NUWCDIVNPT/stigman-watcher

Token is unsuited for purpose - develop approach and handling

cd-rite opened this issue · 0 comments

Current behavior:
preflight auth failure - leaves a log entry, does not retry on failure, watcher stops.
subsequent auth failures - keeps processing, adds log entries

subsequent auth failure modes:

  • user does not have required grant for collection

    • throw error, stop processing, retry
  • user can't create assets or assign stigs, when Watcher is configured to do so.

    • throw error, stop processing, retry
  • user can't approve reviews, when watcher is configured to do so.

    • note: double-check API behavior when given status that does not conform with Collection grants/settings
    • log error, continue processing, mark file complete?

retry behavior:

  • scan mode: suspend scanning and file parsing while retrying
  • event mode: continue capturing file add/remove events, suspend file parsing
  • retry every 60 seconds
    • Log initial failure
    • Log every (hour? day? thereafter)
    • Log success
    • log: every attempt at debug level
    • continue trying indefinitely