CcdbApi.cxx

Go to the documentation of this file.

// Copyright 2019-2020 CERN and copyright holders of ALICE O2.
// See https://alice-o2.web.cern.ch/copyright for details of the copyright holders.
// All rights not expressly granted are reserved.
//
// This software is distributed under the terms of the GNU General Public
// License v3 (GPL Version 3), copied verbatim in the file "COPYING".
//
// In applying this license CERN does not waive the privileges and immunities
// granted to it by virtue of its status as an Intergovernmental Organization
// or submit itself to any jurisdiction.
 
 
#include "CCDB/CcdbApi.h"
#include "CCDB/CCDBDownloader.h"
#include <curl/curl.h>
#include "CCDB/CCDBQuery.h"
 
#include "CommonUtils/StringUtils.h"
#include "CommonUtils/FileSystemUtils.h"
#include "CommonUtils/MemFileHelper.h"
#include "Framework/DefaultsHelpers.h"
#include "Framework/DataTakingContext.h"
#include <chrono>
#include <memory>
#include <ranges>
#include <sstream>
#include <TFile.h>
#include <TGrid.h>
#include <TSystem.h>
#include <TStreamerInfo.h>
#include <TMemFile.h>
#include <TH1F.h>
#include <TTree.h>
#include <fairlogger/Logger.h>
#include <TError.h>
#include <TClass.h>
#include <CCDB/CCDBTimeStampUtils.h>
#include <algorithm>
#include <filesystem>
#include <boost/algorithm/string.hpp>
#include <iostream>
#include <mutex>
#include <boost/interprocess/sync/named_semaphore.hpp>
#include <regex>
#include <cstdio>
#include <string>
#include <string_view>
#include <utility>
#include <TAlienUserAgent.h>
#include <unordered_set>
#include "rapidjson/document.h"
#include "rapidjson/writer.h"
#include "rapidjson/stringbuffer.h"
 
namespace o2::ccdb
{
 
using namespace std;
 
std::mutex gIOMutex; // to protect TMemFile IO operations
unique_ptr<TJAlienCredentials> CcdbApi::mJAlienCredentials = nullptr;
 
namespace
{
std::string_view trimHeaderValue(std::string_view value)
{
  constexpr std::string_view whitespace = " \t\r\n";
  const auto first = value.find_first_not_of(whitespace);
  return first == std::string_view::npos
           ? std::string_view{}
           : value.substr(first, value.find_last_not_of(whitespace) - first + 1);
}
 
const std::vector<std::pair<std::string, std::string>>& gateTokenTable()
{
  static const auto table = []() {
    std::vector<std::pair<std::string, std::string>> entries;
    const char* spec = getenv("ALICEO2_CCDB_AUTH_TOKENS");
    std::string_view rest = spec ? spec : "";
    while (!rest.empty()) {
      const auto sep = rest.find(';');
      const auto entry = trimHeaderValue(rest.substr(0, sep));
      rest = (sep == std::string_view::npos) ? std::string_view{} : rest.substr(sep + 1);
      const auto eq = entry.find('=');
      if (eq == std::string_view::npos) {
        continue;
      }
      auto url = trimHeaderValue(entry.substr(0, eq));
      // Trimmed: a stray newline in a token makes the request malformed, which
      // a strict broker rejects with an opaque 400 rather than an auth error.
      const auto token = trimHeaderValue(entry.substr(eq + 1));
      while (url.size() > 1 && url.back() == '/') { // normalise, so the boundary test below is exact
        url.remove_suffix(1);
      }
      if (!url.empty() && !token.empty()) {
        entries.emplace_back(std::string(url), std::string("Authorization: Bearer ").append(token));
      }
    }
    std::sort(entries.begin(), entries.end(),
              [](const auto& a, const auto& b) { return a.first.size() > b.first.size(); });
    return entries;
  }();
  return table;
}
 
curl_slist* appendGateToken(curl_slist* list, std::string_view url)
{
  for (const auto& [prefix, header] : gateTokenTable()) {
    if (url.substr(0, prefix.size()) == prefix &&
        (url.size() == prefix.size() || url[prefix.size()] == '/')) {
      return curl_slist_append(list, header.c_str());
    }
  }
  return list;
}
} // namespace
 
class CCDBSemaphore
{
 public:
  CCDBSemaphore(std::string const& cachepath, std::string const& path);
  ~CCDBSemaphore();
 
 private:
  boost::interprocess::named_semaphore* mSem = nullptr;
  std::string mSemName{}; // name under which semaphore is kept by the OS kernel
};
 
// Small registry class with the purpose that a static object
// ensures cleanup of registered semaphores even when programs
// "crash".
class SemaphoreRegistry
{
 public:
  SemaphoreRegistry() = default;
  ~SemaphoreRegistry();
  void add(CCDBSemaphore const* ptr);
  void remove(CCDBSemaphore const* ptr);
 
 private:
  std::unordered_set<CCDBSemaphore const*> mStore;
};
static SemaphoreRegistry gSemaRegistry;
 
CcdbApi::CcdbApi()
{
  using namespace o2::framework;
  setUniqueAgentID();
 
  DeploymentMode deploymentMode = DefaultsHelpers::deploymentMode();
  mIsCCDBDownloaderPreferred = 0;
  if (deploymentMode == DeploymentMode::OnlineDDS && deploymentMode == DeploymentMode::OnlineECS && deploymentMode == DeploymentMode::OnlineAUX && deploymentMode == DeploymentMode::FST) {
    mIsCCDBDownloaderPreferred = 1;
  }
  if (getenv("ALICEO2_ENABLE_MULTIHANDLE_CCDBAPI")) { // todo rename ALICEO2_ENABLE_MULTIHANDLE_CCDBAPI to ALICEO2_PREFER_MULTIHANDLE_CCDBAPI
    mIsCCDBDownloaderPreferred = atoi(getenv("ALICEO2_ENABLE_MULTIHANDLE_CCDBAPI"));
  }
  mDownloader = new CCDBDownloader();
}
 
CcdbApi::~CcdbApi()
{
  curl_global_cleanup();
  delete mDownloader;
}
 
void CcdbApi::setUniqueAgentID()
{
  mUniqueAgentID = TAlienUserAgent::BasedOnEnvironment().ToString();
}
 
bool CcdbApi::checkAlienToken()
{
#ifdef __APPLE__
  LOG(debug) << "On macOS we simply rely on TGrid::Connect(\"alien\").";
  return true;
#endif
  if (getenv("ALICEO2_CCDB_NOTOKENCHECK") && atoi(getenv("ALICEO2_CCDB_NOTOKENCHECK"))) {
    return true;
  }
  if (getenv("JALIEN_TOKEN_CERT")) {
    return true;
  }
  auto returncode = system("LD_PRELOAD= alien-token-info &> /dev/null");
  if (returncode == -1) {
    LOG(error) << "...";
  }
  return returncode == 0;
}
 
void CcdbApi::curlInit()
{
  // todo : are there other things to initialize globally for curl ?
  curl_global_init(CURL_GLOBAL_DEFAULT);
  CcdbApi::mJAlienCredentials = std::make_unique<TJAlienCredentials>();
  CcdbApi::mJAlienCredentials->loadCredentials();
  CcdbApi::mJAlienCredentials->selectPreferedCredentials();
 
  // allow to configure the socket timeout of CCDBDownloader (for some tuning studies)
  if (getenv("ALICEO2_CCDB_SOCKET_TIMEOUT")) {
    auto timeoutMS = atoi(getenv("ALICEO2_CCDB_SOCKET_TIMEOUT"));
    if (timeoutMS >= 0) {
      LOG(info) << "Setting socket timeout to " << timeoutMS << " milliseconds";
      mDownloader->setKeepaliveTimeoutTime(timeoutMS);
    }
  }
}
 
void CcdbApi::init(std::string const& host)
{
  if (host.empty()) {
    throw std::invalid_argument("Empty url passed CcdbApi, cannot initialize. Aborting.");
  }
 
  // if host is prefixed with "file://" this is a local snapshot
  // in this case we init the API in snapshot (readonly) mode
  constexpr const char* SNAPSHOTPREFIX = "file://";
  mUrl = host;
 
  if (host.substr(0, 7).compare(SNAPSHOTPREFIX) == 0) {
    auto path = host.substr(7);
    initInSnapshotMode(path);
  } else {
    initHostsPool(host);
    curlInit();
  }
  // The environment option ALICEO2_CCDB_LOCALCACHE allows
  // to reduce the number of queries to the server, by collecting the objects in a local
  // cache folder, and serving from this folder for repeated queries.
  // This is useful for instance for MC GRID productions in which we spawn
  // many isolated processes, all querying the CCDB (for potentially the same objects and same timestamp).
  // In addition, we can monitor exactly which objects are fetched and what is their content.
  // One can also distribute so obtained caches to sites without network access.
  //
  // THE INFORMATION BELOW IS TEMPORARILY WRONG: the functionality of checking the validity if IGNORE_VALIDITYCHECK_OF_CCDB_LOCALCACHE
  // is NOT set is broken. At the moment the code is modified to behave as if the IGNORE_VALIDITYCHECK_OF_CCDB_LOCALCACHE is always set
  // whenever the ALICEO2_CCDB_LOCALCACHE is defined.
  //
  // When used with the DPL CCDB fetcher (i.e. loadFileToMemory is called), in order to prefer the available snapshot w/o its validity
  // check an extra variable IGNORE_VALIDITYCHECK_OF_CCDB_LOCALCACHE must be defined, otherwhise the object will be fetched from the
  // server after the validity check and new snapshot will be created if needed
 
  std::string snapshotReport{};
  const char* cachedir = getenv("ALICEO2_CCDB_LOCALCACHE");
  namespace fs = std::filesystem;
  if (cachedir) {
    if (cachedir[0] == 0) {
      mSnapshotCachePath = fs::weakly_canonical(fs::absolute("."));
    } else {
      mSnapshotCachePath = fs::weakly_canonical(fs::absolute(cachedir));
    }
    snapshotReport = fmt::format("(cache snapshots to dir={}", mSnapshotCachePath);
  }
  if (cachedir) { // || getenv("IGNORE_VALIDITYCHECK_OF_CCDB_LOCALCACHE")) {
    mPreferSnapshotCache = true;
    if (mSnapshotCachePath.empty()) {
      LOGP(fatal, "IGNORE_VALIDITYCHECK_OF_CCDB_LOCALCACHE is defined but the ALICEO2_CCDB_LOCALCACHE is not");
    }
    snapshotReport += ", prefer if available";
  }
  if (!snapshotReport.empty()) {
    snapshotReport += ')';
  }
 
  mNeedAlienToken = (host.find("https://") != std::string::npos) || (host.find("alice-ccdb.cern.ch") != std::string::npos) || (host.find("ccdb-test.cern.ch") != std::string::npos);
  // Set the curl timeout. It can be forced with an env var or it has different defaults based on the deployment mode.
  if (getenv("ALICEO2_CCDB_CURL_TIMEOUT_DOWNLOAD")) {
    auto timeout = atoi(getenv("ALICEO2_CCDB_CURL_TIMEOUT_DOWNLOAD"));
    if (timeout >= 0) { // if valid int
      mCurlTimeoutDownload = timeout;
    }
  } else { // set a default depending on the deployment mode
    o2::framework::DeploymentMode deploymentMode = o2::framework::DefaultsHelpers::deploymentMode();
    if (deploymentMode == o2::framework::DeploymentMode::OnlineDDS ||
        deploymentMode == o2::framework::DeploymentMode::OnlineAUX ||
        deploymentMode == o2::framework::DeploymentMode::OnlineECS) {
      mCurlTimeoutDownload = 15;
    } else if (deploymentMode == o2::framework::DeploymentMode::Grid ||
               deploymentMode == o2::framework::DeploymentMode::FST) {
      mCurlTimeoutDownload = 15;
    } else if (deploymentMode == o2::framework::DeploymentMode::Local) {
      mCurlTimeoutDownload = 5;
    }
  }
 
  if (getenv("ALICEO2_CCDB_CURL_TIMEOUT_UPLOAD")) {
    auto timeout = atoi(getenv("ALICEO2_CCDB_CURL_TIMEOUT_UPLOAD"));
    if (timeout >= 0) { // if valid int
      mCurlTimeoutUpload = timeout;
    }
  } else { // set a default depending on the deployment mode
    o2::framework::DeploymentMode deploymentMode = o2::framework::DefaultsHelpers::deploymentMode();
    if (deploymentMode == o2::framework::DeploymentMode::OnlineDDS ||
        deploymentMode == o2::framework::DeploymentMode::OnlineAUX ||
        deploymentMode == o2::framework::DeploymentMode::OnlineECS) {
      mCurlTimeoutUpload = 3;
    } else if (deploymentMode == o2::framework::DeploymentMode::Grid ||
               deploymentMode == o2::framework::DeploymentMode::FST) {
      mCurlTimeoutUpload = 20;
    } else if (deploymentMode == o2::framework::DeploymentMode::Local) {
      mCurlTimeoutUpload = 20;
    }
  }
  if (mDownloader) {
    mDownloader->setRequestTimeoutTime(mCurlTimeoutDownload * 1000L);
  }
 
  LOGP(debug, "Curl timeouts are set to: download={:2}, upload={:2} seconds", mCurlTimeoutDownload, mCurlTimeoutUpload);
 
  LOGP(info, "Init CcdApi with UserAgentID: {}, Host: {}{}, Curl timeouts: upload:{} download:{}", mUniqueAgentID, host,
       mInSnapshotMode ? "(snapshot readonly mode)" : snapshotReport.c_str(), mCurlTimeoutUpload, mCurlTimeoutDownload);
}
 
void CcdbApi::runDownloaderLoop(bool noWait)
{
  mDownloader->runLoop(noWait);
}
 
// A helper function used in a few places. Updates a ROOT file with meta/header information.
void CcdbApi::updateMetaInformationInLocalFile(std::string const& filename, std::map<std::string, std::string> const* headers, CCDBQuery const* querysummary)
{
  std::lock_guard<std::mutex> guard(gIOMutex);
  auto oldlevel = gErrorIgnoreLevel;
  gErrorIgnoreLevel = 6001; // ignoring error messages here (since we catch with IsZombie)
  TFile snapshotfile(filename.c_str(), "UPDATE");
  // The assumption is that the blob is a ROOT file
  if (!snapshotfile.IsZombie()) {
    if (querysummary && !snapshotfile.Get(CCDBQUERY_ENTRY)) {
      snapshotfile.WriteObjectAny(querysummary, TClass::GetClass(typeid(*querysummary)), CCDBQUERY_ENTRY);
    }
    if (headers && !snapshotfile.Get(CCDBMETA_ENTRY)) {
      snapshotfile.WriteObjectAny(headers, TClass::GetClass(typeid(*headers)), CCDBMETA_ENTRY);
    }
    snapshotfile.Write();
    snapshotfile.Close();
  }
  gErrorIgnoreLevel = oldlevel;
}
 
std::string sanitizeObjectName(const std::string& objectName)
{
  std::string tmpObjectName = objectName;
  tmpObjectName.erase(std::remove_if(tmpObjectName.begin(), tmpObjectName.end(),
                                     [](auto const& c) -> bool { return (!std::isalnum(c) && c != '_' && c != '/' && c != '.'); }),
                      tmpObjectName.end());
  return tmpObjectName;
}
 
std::unique_ptr<std::vector<char>> CcdbApi::createObjectImage(const void* obj, std::type_info const& tinfo, CcdbObjectInfo* info)
{
  // Create a binary image of the object, if CcdbObjectInfo pointer is provided, register there
  // the assigned object class name and the filename
  std::lock_guard<std::mutex> guard(gIOMutex);
  std::string className = o2::utils::MemFileHelper::getClassName(tinfo);
  std::string tmpFileName = generateFileName(className);
  if (info) {
    info->setFileName(tmpFileName);
    info->setObjectType(className);
  }
  return o2::utils::MemFileHelper::createFileImage(obj, tinfo, tmpFileName, CCDBOBJECT_ENTRY);
}
 
std::unique_ptr<std::vector<char>> CcdbApi::createObjectImage(const TObject* rootObject, CcdbObjectInfo* info)
{
  // Create a binary image of the object, if CcdbObjectInfo pointer is provided, register there
  // the assigned object class name and the filename
  std::string className = rootObject->GetName();
  std::string tmpFileName = generateFileName(className);
  if (info) {
    info->setFileName(tmpFileName);
    info->setObjectType("TObject"); // why TObject and not the actual name?
  }
  std::lock_guard<std::mutex> guard(gIOMutex);
  return o2::utils::MemFileHelper::createFileImage(*rootObject, tmpFileName, CCDBOBJECT_ENTRY);
}
 
int CcdbApi::storeAsTFile_impl(const void* obj, std::type_info const& tinfo, std::string const& path,
                               std::map<std::string, std::string> const& metadata,
                               long startValidityTimestamp, long endValidityTimestamp,
                               std::vector<char>::size_type maxSize) const
{
  // We need the TClass for this type; will verify if dictionary exists
  if (!obj) {
    LOGP(error, "nullptr is provided for object {}/{}/{}", path, startValidityTimestamp, endValidityTimestamp);
    return -1;
  }
  CcdbObjectInfo info;
  auto img = createObjectImage(obj, tinfo, &info);
  return storeAsBinaryFile(img->data(), img->size(), info.getFileName(), info.getObjectType(),
                           path, metadata, startValidityTimestamp, endValidityTimestamp, maxSize);
}
 
int CcdbApi::storeAsBinaryFile(const char* buffer, size_t size, const std::string& filename, const std::string& objectType,
                               const std::string& path, const std::map<std::string, std::string>& metadata,
                               long startValidityTimestamp, long endValidityTimestamp, std::vector<char>::size_type maxSize) const
{
  if (maxSize > 0 && size > maxSize) {
    LOGP(alarm, "Object will not be uploaded to {} since its size {} exceeds max allowed {}", path, size, maxSize);
    return -1;
  }
  int returnValue = 0;
 
  // Prepare URL
  long sanitizedStartValidityTimestamp = startValidityTimestamp;
  if (startValidityTimestamp == -1) {
    LOGP(info, "Start of Validity not set, current timestamp used.");
    sanitizedStartValidityTimestamp = getCurrentTimestamp();
  }
  long sanitizedEndValidityTimestamp = endValidityTimestamp;
  if (endValidityTimestamp == -1) {
    LOGP(info, "End of Validity not set, start of validity plus 1 day used.");
    sanitizedEndValidityTimestamp = getFutureTimestamp(60 * 60 * 24 * 1);
  }
  if (mInSnapshotMode) { // write local file
    if (filename.empty() || buffer == nullptr || size == 0) {
      LOGP(alarm, "Snapshot mode does not support headers-only upload");
      return -3;
    }
    auto pthLoc = getSnapshotDir(mSnapshotTopPath, path);
    o2::utils::createDirectoriesIfAbsent(pthLoc);
    auto flLoc = getSnapshotFile(mSnapshotTopPath, path, filename);
    // add the timestamps to the end
    auto pent = flLoc.find_last_of('.');
    if (pent == std::string::npos) {
      pent = flLoc.size();
    }
    flLoc.insert(pent, fmt::format("_{}_{}", startValidityTimestamp, endValidityTimestamp));
    ofstream outf(flLoc.c_str(), ios::out | ios::binary);
    outf.write(buffer, size);
    outf.close();
    if (!outf.good()) {
      throw std::runtime_error(fmt::format("Failed to write local CCDB file {}", flLoc));
    } else {
      std::map<std::string, std::string> metaheader(metadata);
      // add time validity information
      metaheader["Valid-From"] = std::to_string(startValidityTimestamp);
      metaheader["Valid-Until"] = std::to_string(endValidityTimestamp);
      updateMetaInformationInLocalFile(flLoc.c_str(), &metaheader);
      std::string metaStr{};
      for (const auto& mentry : metadata) {
        metaStr += fmt::format("{}={};", mentry.first, mentry.second);
      }
      metaStr += "$USER_META;";
      LOGP(info, "Created local snapshot {}", flLoc);
      LOGP(info, R"(Upload with: o2-ccdb-upload --host "$ccdbhost" -p {} -f {} -k {} --starttimestamp {} --endtimestamp {} -m "{}")",
           path, flLoc, CCDBOBJECT_ENTRY, startValidityTimestamp, endValidityTimestamp, metaStr);
    }
    return returnValue;
  }
 
  // Curl preparation
  CurlHandle* curl = nullptr;
  curl = curl_easy_init();
 
  // checking that all metadata keys do not contain invalid characters
  checkMetadataKeys(metadata);
 
  if (curl != nullptr) {
    auto mime = curl_mime_init(curl);
    auto field = curl_mime_addpart(mime);
    curl_mime_name(field, "send");
    if (!filename.empty()) {
      curl_mime_filedata(field, filename.c_str());
    }
    if (buffer != nullptr && size > 0) {
      curl_mime_data(field, buffer, size);
    } else {
      curl_mime_data(field, "", 0);
    }
 
    curlSetSSLOptions(curl);
 
    curl_easy_setopt(curl, CURLOPT_MIMEPOST, mime);
    curl_easy_setopt(curl, CURLOPT_FOLLOWLOCATION, 1L);
    curl_easy_setopt(curl, CURLOPT_USERAGENT, mUniqueAgentID.c_str());
    curl_easy_setopt(curl, CURLOPT_TIMEOUT, mCurlTimeoutUpload);
 
    CURLcode res = CURL_LAST;
 
    for (size_t hostIndex = 0; hostIndex < hostsPool.size() && res > 0; hostIndex++) {
      std::string fullUrl = getFullUrlForStorage(curl, path, objectType, metadata, sanitizedStartValidityTimestamp, sanitizedEndValidityTimestamp, hostIndex);
      LOG(debug3) << "Full URL Encoded: " << fullUrl;
      /* what URL that receives this POST */
      curl_easy_setopt(curl, CURLOPT_URL, fullUrl.c_str());
 
      // Per host: the gate token is per endpoint (see appendGateToken).
      struct curl_slist* headerlist = curl_slist_append(nullptr, "Expect:");
      headerlist = appendGateToken(headerlist, fullUrl);
      curl_easy_setopt(curl, CURLOPT_HTTPHEADER, headerlist);
 
      /* Perform the request, res will get the return code */
      res = static_cast<CURLcode>(CURL_perform(curl));
      /* Check for errors */
      if (res != CURLE_OK) {
        if (res == CURLE_OPERATION_TIMEDOUT) {
          LOGP(alarm, "curl_easy_perform() timed out. Consider increasing the timeout using the env var `ALICEO2_CCDB_CURL_TIMEOUT_UPLOAD` (seconds), current one is {}", mCurlTimeoutUpload);
        } else { // generic message
          LOGP(alarm, "curl_easy_perform() failed: {}", curl_easy_strerror(res));
        }
        returnValue = res;
      }
      curl_slist_free_all(headerlist);
    }
 
    /* always cleanup */
    curl_easy_cleanup(curl);
 
    /* free mime */
    curl_mime_free(mime);
  } else {
    LOGP(alarm, "curl initialization failure");
    returnValue = -2;
  }
  return returnValue;
}
 
int CcdbApi::storeAsTFile(const TObject* rootObject, std::string const& path, std::map<std::string, std::string> const& metadata,
                          long startValidityTimestamp, long endValidityTimestamp, std::vector<char>::size_type maxSize) const
{
  // Prepare file
  if (!rootObject) {
    LOGP(error, "nullptr is provided for object {}/{}/{}", path, startValidityTimestamp, endValidityTimestamp);
    return -1;
  }
  CcdbObjectInfo info;
  auto img = createObjectImage(rootObject, &info);
  return storeAsBinaryFile(img->data(), img->size(), info.getFileName(), info.getObjectType(), path, metadata, startValidityTimestamp, endValidityTimestamp, maxSize);
}
 
std::string CcdbApi::getFullUrlForStorage(CurlHandle* curl, const std::string& path, const std::string& objtype,
                                          const std::map<std::string, std::string>& metadata,
                                          long startValidityTimestamp, long endValidityTimestamp, int hostIndex) const
{
  // Prepare timestamps
  std::string startValidityString = getTimestampString(startValidityTimestamp < 0 ? getCurrentTimestamp() : startValidityTimestamp);
  std::string endValidityString = getTimestampString(endValidityTimestamp < 0 ? getFutureTimestamp(60 * 60 * 24 * 1) : endValidityTimestamp);
  // Get url
  std::string url = getHostUrl(hostIndex);
  // Build URL
  std::string fullUrl = url + "/" + path + "/" + startValidityString + "/" + endValidityString + "/";
  // Add type as part of metadata
  // we need to URL encode the object type, since in case it has special characters (like the "<", ">" for templated classes) it won't work otherwise
  char* objtypeEncoded = curl_easy_escape(curl, objtype.c_str(), objtype.size());
  fullUrl += "ObjectType=" + std::string(objtypeEncoded) + "/";
  curl_free(objtypeEncoded);
  // Add general metadata
  for (auto& kv : metadata) {
    std::string mfirst = kv.first;
    std::string msecond = kv.second;
    // same trick for the metadata as for the object type
    char* mfirstEncoded = curl_easy_escape(curl, mfirst.c_str(), mfirst.size());
    char* msecondEncoded = curl_easy_escape(curl, msecond.c_str(), msecond.size());
    fullUrl += std::string(mfirstEncoded) + "=" + std::string(msecondEncoded) + "/";
    curl_free(mfirstEncoded);
    curl_free(msecondEncoded);
  }
  return fullUrl;
}
 
// todo make a single method of the one above and below
std::string CcdbApi::getFullUrlForRetrieval(CurlHandle* curl, const std::string& path, const std::map<std::string, std::string>& metadata, long timestamp, int hostIndex) const
{
  if (mInSnapshotMode) {
    return getSnapshotFile(mSnapshotTopPath, path);
  }
 
  // Prepare timestamps
  std::string validityString = getTimestampString(timestamp < 0 ? getCurrentTimestamp() : timestamp);
  // Get host url
  std::string hostUrl = getHostUrl(hostIndex);
  // Build URL
  std::string fullUrl = hostUrl + "/" + path + "/" + validityString + "/";
  // Add metadata
  for (auto& kv : metadata) {
    std::string mfirst = kv.first;
    std::string msecond = kv.second;
    // trick for the metadata in case it contains special characters
    char* mfirstEncoded = curl_easy_escape(curl, mfirst.c_str(), mfirst.size());
    char* msecondEncoded = curl_easy_escape(curl, msecond.c_str(), msecond.size());
    fullUrl += std::string(mfirstEncoded) + "=" + std::string(msecondEncoded) + "/";
    curl_free(mfirstEncoded);
    curl_free(msecondEncoded);
  }
  return fullUrl;
}
 
struct MemoryStruct {
  char* memory;
  unsigned int size;
};
 
static size_t WriteMemoryCallback(void* contents, size_t size, size_t nmemb, void* userp)
{
  size_t realsize = size * nmemb;
  auto* mem = (struct MemoryStruct*)userp;
 
  mem->memory = (char*)realloc(mem->memory, mem->size + realsize + 1);
  if (mem->memory == nullptr) {
    printf("not enough memory (realloc returned NULL)\n");
    return 0;
  }
 
  memcpy(&(mem->memory[mem->size]), contents, realsize);
  mem->size += realsize;
  mem->memory[mem->size] = 0;
 
  return realsize;
}
 
static size_t WriteToFileCallback(void* ptr, size_t size, size_t nmemb, FILE* stream)
{
  size_t written = fwrite(ptr, size, nmemb, stream);
  return written;
}
 
static CURLcode ssl_ctx_callback(CurlHandle*, void*, void* parm)
{
  std::string msg((const char*)parm);
  int start = 0, end = msg.find('\n');
 
  if (msg.length() > 0 && end == -1) {
    LOG(warn) << msg;
  } else if (end > 0) {
    while (end > 0) {
      LOG(warn) << msg.substr(start, end - start);
      start = end + 1;
      end = msg.find('\n', start);
    }
  }
  return CURLE_OK;
}
 
void CcdbApi::curlSetSSLOptions(CurlHandle* curl_handle)
{
  CredentialsKind cmk = mJAlienCredentials->getPreferedCredentials();
 
  /* NOTE: return early, the warning should be printed on SSL callback if needed */
  if (cmk == cNOT_FOUND) {
    return;
  }
 
  TJAlienCredentialsObject cmo = mJAlienCredentials->get(cmk);
 
  char* CAPath = getenv("X509_CERT_DIR");
  if (CAPath) {
    curl_easy_setopt(curl_handle, CURLOPT_CAPATH, CAPath);
  }
  curl_easy_setopt(curl_handle, CURLOPT_CAINFO, nullptr);
  curl_easy_setopt(curl_handle, CURLOPT_SSLCERT, cmo.certpath.c_str());
  curl_easy_setopt(curl_handle, CURLOPT_SSLKEY, cmo.keypath.c_str());
 
  // NOTE: for lazy logging only
  curl_easy_setopt(curl_handle, CURLOPT_SSL_CTX_FUNCTION, ssl_ctx_callback);
  curl_easy_setopt(curl_handle, CURLOPT_SSL_CTX_DATA, mJAlienCredentials->getMessages().c_str());
 
  // CURLcode ret = curl_easy_setopt(curl_handle, CURLOPT_SSL_CTX_FUNCTION, *ssl_ctx_callback);
}
 
using CurlWriteCallback = size_t (*)(void*, size_t, size_t, void*);
 
void CcdbApi::initCurlOptionsForRetrieve(CurlHandle* curlHandle, void* chunk, CurlWriteCallback writeCallback, bool followRedirect) const
{
  curl_easy_setopt(curlHandle, CURLOPT_WRITEFUNCTION, writeCallback);
  curl_easy_setopt(curlHandle, CURLOPT_WRITEDATA, chunk);
  curl_easy_setopt(curlHandle, CURLOPT_FOLLOWLOCATION, followRedirect ? 1L : 0L);
}
 
namespace
{
template <typename MapType = std::map<std::string, std::string>>
size_t header_map_callback(char* buffer, size_t size, size_t nitems, void* userdata)
{
  auto* headers = static_cast<MapType*>(userdata);
  auto header = std::string(buffer, size * nitems);
  std::string::size_type index = header.find(':', 0);
  if (index != std::string::npos) {
    const auto key = boost::algorithm::trim_copy(header.substr(0, index));
    const auto value = boost::algorithm::trim_copy(header.substr(index + 1));
    LOGP(debug, "Adding #{} {} -> {}", headers->size(), key, value);
    bool insert = true;
    if (key == "Content-Length") {
      auto cl = headers->find("Content-Length");
      if (cl != headers->end()) {
        if (std::stol(cl->second) < stol(value)) {
          headers->erase(key);
        } else {
          insert = false;
        }
      }
    }
 
    // Keep only the first ETag encountered
    if (key == "ETag") {
      auto cl = headers->find("ETag");
      if (cl != headers->end()) {
        insert = false;
      }
    }
 
    // Keep only the first Content-Type encountered
    if (key == "Content-Type") {
      auto cl = headers->find("Content-Type");
      if (cl != headers->end()) {
        insert = false;
      }
    }
 
    if (insert) {
      headers->insert(std::make_pair(key, value));
    }
  }
  return size * nitems;
}
} // namespace
 
void CcdbApi::initCurlHTTPHeaderOptionsForRetrieve(CurlHandle* curlHandle, curl_slist*& option_list, long timestamp, std::map<std::string, std::string>* headers, std::string const& etag,
                                                   const std::string& createdNotAfter, const std::string& createdNotBefore, std::string_view url) const
{
  // struct curl_slist* list = nullptr;
  if (!etag.empty()) {
    option_list = curl_slist_append(option_list, ("If-None-Match: " + etag).c_str());
  }
 
  if (!createdNotAfter.empty()) {
    option_list = curl_slist_append(option_list, ("If-Not-After: " + createdNotAfter).c_str());
  }
 
  if (!createdNotBefore.empty()) {
    option_list = curl_slist_append(option_list, ("If-Not-Before: " + createdNotBefore).c_str());
  }
 
  if (headers != nullptr) {
    option_list = curl_slist_append(option_list, ("If-None-Match: " + to_string(timestamp)).c_str());
    curl_easy_setopt(curlHandle, CURLOPT_HEADERFUNCTION, header_map_callback<>);
    curl_easy_setopt(curlHandle, CURLOPT_HEADERDATA, headers);
  }
 
  option_list = appendGateToken(option_list, url);
 
  // Unconditionally, nullptr included: the handle is reused across hosts, and
  // skipping the set would leave a previous host's freed list installed.
  curl_easy_setopt(curlHandle, CURLOPT_HTTPHEADER, option_list);
 
  curl_easy_setopt(curlHandle, CURLOPT_USERAGENT, mUniqueAgentID.c_str());
}
 
bool CcdbApi::receiveToFile(FILE* fileHandle, std::string const& path, std::map<std::string, std::string> const& metadata,
                            long timestamp, std::map<std::string, std::string>* headers, std::string const& etag,
                            const std::string& createdNotAfter, const std::string& createdNotBefore, bool followRedirect) const
{
  return receiveObject((void*)fileHandle, path, metadata, timestamp, headers, etag, createdNotAfter, createdNotBefore, followRedirect, (CurlWriteCallback)&WriteToFileCallback);
}
 
bool CcdbApi::receiveToMemory(void* chunk, std::string const& path, std::map<std::string, std::string> const& metadata,
                              long timestamp, std::map<std::string, std::string>* headers, std::string const& etag,
                              const std::string& createdNotAfter, const std::string& createdNotBefore, bool followRedirect) const
{
  return receiveObject((void*)chunk, path, metadata, timestamp, headers, etag, createdNotAfter, createdNotBefore, followRedirect, (CurlWriteCallback)&WriteMemoryCallback);
}
 
bool CcdbApi::receiveObject(void* dataHolder, std::string const& path, std::map<std::string, std::string> const& metadata,
                            long timestamp, std::map<std::string, std::string>* headers, std::string const& etag,
                            const std::string& createdNotAfter, const std::string& createdNotBefore, bool followRedirect, CurlWriteCallback writeCallback) const
{
  CurlHandle* curlHandle;
 
  curlHandle = curl_easy_init();
  curl_easy_setopt(curlHandle, CURLOPT_USERAGENT, mUniqueAgentID.c_str());
 
  if (curlHandle != nullptr) {
 
    curlSetSSLOptions(curlHandle);
    initCurlOptionsForRetrieve(curlHandle, dataHolder, writeCallback, followRedirect);
    long responseCode = 0;
    CURLcode curlResultCode = CURL_LAST;
 
    for (size_t hostIndex = 0; hostIndex < hostsPool.size() && (responseCode >= 400 || curlResultCode > 0); hostIndex++) {
      std::string fullUrl = getFullUrlForRetrieval(curlHandle, path, metadata, timestamp, hostIndex);
      curl_easy_setopt(curlHandle, CURLOPT_URL, fullUrl.c_str());
 
      // Per host: the gate token is per endpoint (see appendGateToken).
      curl_slist* option_list = nullptr;
      initCurlHTTPHeaderOptionsForRetrieve(curlHandle, option_list, timestamp, headers, etag, createdNotAfter, createdNotBefore, fullUrl);
 
      curlResultCode = static_cast<CURLcode>(CURL_perform(curlHandle));
 
      if (curlResultCode != CURLE_OK) {
        LOGP(alarm, "curl_easy_perform() failed: {}", curl_easy_strerror(curlResultCode));
      } else {
        curlResultCode = curl_easy_getinfo(curlHandle, CURLINFO_RESPONSE_CODE, &responseCode);
        if ((curlResultCode == CURLE_OK) && (responseCode < 300)) {
          curl_slist_free_all(option_list);
          curl_easy_cleanup(curlHandle);
          return true;
        } else {
          if (curlResultCode != CURLE_OK) {
            LOGP(alarm, "invalid URL {}", fullUrl);
          } else {
            LOGP(alarm, "not found under link {}", fullUrl);
          }
        }
      }
      curl_slist_free_all(option_list);
    }
 
    curl_easy_cleanup(curlHandle);
  }
  return false;
}
 
TObject* CcdbApi::retrieve(std::string const& path, std::map<std::string, std::string> const& metadata,
                           long timestamp) const
{
  struct MemoryStruct chunk{
    (char*)malloc(1) /*memory*/, 0 /*size*/
  };
 
  TObject* result = nullptr;
 
  bool res = receiveToMemory((void*)&chunk, path, metadata, timestamp);
 
  if (res) {
    std::lock_guard<std::mutex> guard(gIOMutex);
    TMessage mess(kMESS_OBJECT);
    mess.SetBuffer(chunk.memory, chunk.size, kFALSE);
    mess.SetReadMode();
    mess.Reset();
    result = (TObject*)(mess.ReadObjectAny(mess.GetClass()));
    if (result == nullptr) {
      LOGP(info, "couldn't retrieve the object {}", path);
    }
  }
 
  free(chunk.memory);
 
  return result;
}
 
std::string CcdbApi::generateFileName(const std::string& inp)
{
  // generate file name for the CCDB object  (for now augment the input string by the timestamp)
  std::string str = inp;
  str.erase(std::remove_if(str.begin(), str.end(), ::isspace), str.end());
  str = std::regex_replace(str, std::regex("::"), "-");
  str += "_" + std::to_string(o2::ccdb::getCurrentTimestamp()) + ".root";
  return str;
}
 
TObject* CcdbApi::retrieveFromTFile(std::string const& path, std::map<std::string, std::string> const& metadata,
                                    long timestamp, std::map<std::string, std::string>* headers, std::string const& etag,
                                    const std::string& createdNotAfter, const std::string& createdNotBefore) const
{
  return (TObject*)retrieveFromTFile(typeid(TObject), path, metadata, timestamp, headers, etag, createdNotAfter, createdNotBefore);
}
 
bool CcdbApi::retrieveBlob(std::string const& path, std::string const& targetdir, std::map<std::string, std::string> const& metadata,
                           long timestamp, bool preservePath, std::string const& localFileName, std::string const& createdNotAfter, std::string const& createdNotBefore, std::map<std::string, std::string>* outHeaders) const
{
 
  // we setup the target path for this blob
  std::string fulltargetdir = targetdir + (preservePath ? ('/' + path) : "");
 
  try {
    o2::utils::createDirectoriesIfAbsent(fulltargetdir);
  } catch (std::exception e) {
    LOGP(error, "Could not create local snapshot cache directory {}, reason: {}", fulltargetdir, e.what());
    return false;
  }
 
  o2::pmr::vector<char> buff;
  std::map<std::string, std::string> headers;
  // avoid creating snapshot via loadFileToMemory itself
  loadFileToMemory(buff, path, metadata, timestamp, &headers, "", createdNotAfter, createdNotBefore, false);
  if ((headers.count("Error") != 0) || (buff.empty())) {
    LOGP(error, "Unable to find object {}/{}, Aborting", path, timestamp);
    return false;
  }
  // determine local filename --> use user given one / default -- or if empty string determine from content
  auto getFileName = [&headers]() {
    auto& s = headers["Content-Disposition"];
    if (s != "") {
      std::regex re("(.*;)filename=\"(.*)\"");
      std::cmatch m;
      if (std::regex_match(s.c_str(), m, re)) {
        return m[2].str();
      }
    }
    std::string backupname("ccdb-blob.bin");
    LOG(error) << "Cannot determine original filename from Content-Disposition ... falling back to " << backupname;
    return backupname;
  };
  auto filename = localFileName.size() > 0 ? localFileName : getFileName();
  std::string targetpath = fulltargetdir + "/" + filename;
  {
    std::ofstream objFile(targetpath, std::ios::out | std::ofstream::binary);
    std::copy(buff.begin(), buff.end(), std::ostreambuf_iterator<char>(objFile));
    if (!objFile.good()) {
      LOGP(error, "Unable to open local file {}, Aborting", targetpath);
      return false;
    }
  }
  CCDBQuery querysummary(path, metadata, timestamp);
 
  updateMetaInformationInLocalFile(targetpath.c_str(), &headers, &querysummary);
  if (outHeaders) {
    *outHeaders = std::move(headers);
  }
  return true;
}
 
void CcdbApi::snapshot(std::string const& ccdbrootpath, std::string const& localDir, long timestamp) const
{
  // query all subpaths to ccdbrootpath
  const auto allfolders = getAllFolders(ccdbrootpath);
  std::map<std::string, std::string> metadata;
  for (auto& folder : allfolders) {
    retrieveBlob(folder, localDir, metadata, timestamp);
  }
}
 
void* CcdbApi::extractFromTFile(TFile& file, TClass const* cl, const char* what)
{
  if (!cl) {
    return nullptr;
  }
  auto object = file.GetObjectChecked(what, cl);
  if (!object) {
    // it could be that object was stored with previous convention
    // where the classname was taken as key
    std::string objectName(cl->GetName());
    o2::utils::Str::trim(objectName);
    object = file.GetObjectChecked(objectName.c_str(), cl);
    LOG(warn) << "Did not find object under expected name " << what;
    if (!object) {
      return nullptr;
    }
    LOG(warn) << "Found object under deprecated name " << cl->GetName();
  }
  auto result = object;
  // We need to handle some specific cases as ROOT ties them deeply
  // to the file they are contained in
  if (cl->InheritsFrom("TObject")) {
    // make a clone
    // detach from the file
    auto tree = dynamic_cast<TTree*>((TObject*)object);
    if (tree) {
      tree->LoadBaskets(0x1L << 32); // make tree memory based
      tree->SetDirectory(nullptr);
      result = tree;
    } else {
      auto h = dynamic_cast<TH1*>((TObject*)object);
      if (h) {
        h->SetDirectory(nullptr);
        result = h;
      }
    }
  }
  return result;
}
 
void* CcdbApi::extractFromLocalFile(std::string const& filename, std::type_info const& tinfo, std::map<std::string, std::string>* headers) const
{
  if (!std::filesystem::exists(filename)) {
    LOG(error) << "Local snapshot " << filename << " not found \n";
    return nullptr;
  }
  std::lock_guard<std::mutex> guard(gIOMutex);
  auto tcl = tinfo2TClass(tinfo);
  TFile f(filename.c_str(), "READ");
  if (headers) {
    auto storedmeta = retrieveMetaInfo(f);
    if (storedmeta) {
      *headers = *storedmeta; // do a simple deep copy
      delete storedmeta;
    }
    if ((isSnapshotMode() || mPreferSnapshotCache) && headers->find("ETag") == headers->end()) { // generate dummy ETag to profit from the caching
      (*headers)["ETag"] = filename;
    }
    if (headers->find("fileSize") == headers->end()) {
      (*headers)["fileSize"] = fmt::format("{}", f.GetEND());
    }
  }
  return extractFromTFile(f, tcl);
}
 
bool CcdbApi::initTGrid() const
{
  if (mNeedAlienToken && !gGrid) {
    static bool allowNoToken = getenv("ALICEO2_CCDB_NOTOKENCHECK") && atoi(getenv("ALICEO2_CCDB_NOTOKENCHECK"));
    if (!allowNoToken && !checkAlienToken()) {
      LOG(fatal) << "Alien Token Check failed - Please get an alien token before running with https CCDB endpoint, or alice-ccdb.cern.ch!";
    }
    TGrid::Connect("alien");
    static bool errorShown = false;
    if (!gGrid && errorShown == false) {
      if (allowNoToken) {
        LOG(error) << "TGrid::Connect returned nullptr. May be due to missing alien token";
      } else {
        LOG(fatal) << "TGrid::Connect returned nullptr. May be due to missing alien token";
      }
      errorShown = true;
    }
  }
  return gGrid != nullptr;
}
 
void* CcdbApi::downloadFilesystemContent(std::string const& url, std::type_info const& tinfo, std::map<std::string, std::string>* headers) const
{
  if ((url.find("alien:/", 0) != std::string::npos) && !initTGrid()) {
    return nullptr;
  }
  std::lock_guard<std::mutex> guard(gIOMutex);
  auto memfile = TMemFile::Open(url.c_str(), "OPEN");
  if (memfile) {
    auto cl = tinfo2TClass(tinfo);
    auto content = extractFromTFile(*memfile, cl);
    if (headers && headers->find("fileSize") == headers->end()) {
      (*headers)["fileSize"] = fmt::format("{}", memfile->GetEND());
    }
    delete memfile;
    return content;
  }
  return nullptr;
}
 
void* CcdbApi::interpretAsTMemFileAndExtract(char* contentptr, size_t contentsize, std::type_info const& tinfo)
{
  void* result = nullptr;
  Int_t previousErrorLevel = gErrorIgnoreLevel;
  gErrorIgnoreLevel = kFatal;
  std::lock_guard<std::mutex> guard(gIOMutex);
  TMemFile memFile("name", contentptr, contentsize, "READ");
  gErrorIgnoreLevel = previousErrorLevel;
  if (!memFile.IsZombie()) {
    auto tcl = tinfo2TClass(tinfo);
    result = extractFromTFile(memFile, tcl);
    if (!result) {
      LOG(error) << o2::utils::Str::concat_string("Couldn't retrieve object corresponding to ", tcl->GetName(), " from TFile");
    }
    memFile.Close();
  }
  return result;
}
 
// navigate sequence of URLs until TFile content is found; object is extracted and returned
void* CcdbApi::navigateURLsAndRetrieveContent(CurlHandle* curl_handle, std::string const& url, std::type_info const& tinfo, std::map<std::string, std::string>* headers) const
{
  // a global internal data structure that can be filled with HTTP header information
  // static --> to avoid frequent alloc/dealloc as optimization
  // not sure if thread_local takes away that benefit
  static thread_local std::multimap<std::string, std::string> headerData;
 
  // let's see first of all if the url is something specific that curl cannot handle
  if ((url.find("alien:/", 0) != std::string::npos) || (url.find("file:/", 0) != std::string::npos)) {
    return downloadFilesystemContent(url, tinfo, headers);
  }
  // add other final cases here
  // example root://
 
  // otherwise make an HTTP/CURL request
  // specify URL to get
  curl_easy_setopt(curl_handle, CURLOPT_URL, url.c_str());
 
  MemoryStruct chunk{(char*)malloc(1), 0};
  initCurlOptionsForRetrieve(curl_handle, (void*)&chunk, WriteMemoryCallback, false);
 
  curl_easy_setopt(curl_handle, CURLOPT_HEADERFUNCTION, header_map_callback<decltype(headerData)>);
  headerData.clear();
  curl_easy_setopt(curl_handle, CURLOPT_HEADERDATA, (void*)&headerData);
 
  curlSetSSLOptions(curl_handle);
 
  auto res = static_cast<CURLcode>(CURL_perform(curl_handle));
  long response_code = -1;
  void* content = nullptr;
  bool errorflag = false;
  if (res == CURLE_OK && curl_easy_getinfo(curl_handle, CURLINFO_RESPONSE_CODE, &response_code) == CURLE_OK) {
    if (headers) {
      for (auto& p : headerData) {
        (*headers)[p.first] = p.second;
      }
    }
    if (200 <= response_code && response_code < 300) {
      // good response and the content is directly provided and should have been dumped into "chunk"
      content = interpretAsTMemFileAndExtract(chunk.memory, chunk.size, tinfo);
      if (headers && headers->find("fileSize") == headers->end()) {
        (*headers)["fileSize"] = fmt::format("{}", chunk.size);
      }
    } else if (response_code == 304) {
      // this means the object exist but I am not serving
      // it since it's already in your possession
 
      // there is nothing to be done here
      LOGP(debug, "Object exists but I am not serving it since it's already in your possession");
    }
    // this is a more general redirection
    else if (300 <= response_code && response_code < 400) {
      // we try content locations in order of appearance until one succeeds
      // 1st: The "Location" field
      // 2nd: Possible "Content-Location" fields - Location field
 
      // some locations are relative to the main server so we need to fix/complement them
      auto complement_Location = [this](std::string const& loc) {
        if (loc[0] == '/') {
          // if it's just a path (noticed by trailing '/' we prepend the server url
          return getURL() + loc;
        }
        return loc;
      };
 
      std::vector<std::string> locs;
      auto iter = headerData.find("Location");
      if (iter != headerData.end()) {
        locs.push_back(complement_Location(iter->second));
      }
      // add alternative locations (not yet included)
      auto iter2 = headerData.find("Content-Location");
      if (iter2 != headerData.end()) {
        auto range = headerData.equal_range("Content-Location");
        for (auto it = range.first; it != range.second; ++it) {
          if (std::find(locs.begin(), locs.end(), it->second) == locs.end()) {
            locs.push_back(complement_Location(it->second));
          }
        }
      }
      for (auto& l : locs) {
        if (l.size() > 0) {
          LOG(debug) << "Trying content location " << l;
          content = navigateURLsAndRetrieveContent(curl_handle, l, tinfo, headers);
          if (content /* or other success marker in future */) {
            break;
          }
        }
      }
    } else if (response_code == 404) {
      LOG(error) << "Requested resource does not exist: " << url;
      errorflag = true;
    } else {
      LOG(error) << "Error in fetching object " << url << ", curl response code:" << response_code;
      errorflag = true;
    }
    // cleanup
    if (chunk.memory != nullptr) {
      free(chunk.memory);
    }
  } else {
    LOGP(alarm, "Curl request to {} failed with result {}, response code: {}", url, int(res), response_code);
    errorflag = true;
  }
  // indicate that an error occurred ---> used by caching layers (such as CCDBManager)
  if (errorflag && headers) {
    (*headers)["Error"] = "An error occurred during retrieval";
  }
  return content;
}
 
void* CcdbApi::retrieveFromTFile(std::type_info const& tinfo, std::string const& path,
                                 std::map<std::string, std::string> const& metadata, long timestamp,
                                 std::map<std::string, std::string>* headers, std::string const& etag,
                                 const std::string& createdNotAfter, const std::string& createdNotBefore) const
{
  if (!mSnapshotCachePath.empty()) {
    // protect this sensitive section by a multi-process named semaphore
    auto semaphore_barrier = std::make_unique<CCDBSemaphore>(mSnapshotCachePath, path);
    std::string logfile = mSnapshotCachePath + "/log";
    std::fstream out(logfile, ios_base::out | ios_base::app);
    if (out.is_open()) {
      out << "CCDB-access[" << getpid() << "] of " << mUniqueAgentID << " to " << path << " timestamp " << timestamp << "\n";
    }
    auto snapshotfile = getSnapshotFile(mSnapshotCachePath, path);
    bool snapshoting = false;
    if (!std::filesystem::exists(snapshotfile)) {
      snapshoting = true;
      out << "CCDB-access[" << getpid() << "] ... " << mUniqueAgentID << " downloading to snapshot " << snapshotfile << "\n";
      // if file not already here and valid --> snapshot it
      if (!retrieveBlob(path, mSnapshotCachePath, metadata, timestamp)) {
        out << "CCDB-access[" << getpid() << "] ... " << mUniqueAgentID << " failed to create directory for " << snapshotfile << "\n";
      }
    } else {
      out << "CCDB-access[" << getpid() << "]  ... " << mUniqueAgentID << "serving from local snapshot " << snapshotfile << "\n";
    }
 
    auto res = extractFromLocalFile(snapshotfile, tinfo, headers);
    if (!snapshoting) { // if snapshot was created at this call, the log was already done
      logReading(path, timestamp, headers, "retrieve from snapshot");
    }
    return res;
  }
 
  // normal mode follows
 
  CurlHandle* curl_handle = curl_easy_init();
  curl_easy_setopt(curl_handle, CURLOPT_USERAGENT, mUniqueAgentID.c_str());
  std::string fullUrl = getFullUrlForRetrieval(curl_handle, path, metadata, timestamp); // todo check if function still works correctly in case mInSnapshotMode
  // if we are in snapshot mode we can simply open the file; extract the object and return
  if (mInSnapshotMode) {
    auto res = extractFromLocalFile(fullUrl, tinfo, headers);
    if (res) {
      logReading(path, timestamp, headers, "retrieve from snapshot");
    }
    return res;
  }
 
  curl_slist* option_list = nullptr;
  initCurlHTTPHeaderOptionsForRetrieve(curl_handle, option_list, timestamp, headers, etag, createdNotAfter, createdNotBefore, fullUrl);
  auto content = navigateURLsAndRetrieveContent(curl_handle, fullUrl, tinfo, headers);
 
  for (size_t hostIndex = 1; hostIndex < hostsPool.size() && !(content); hostIndex++) {
    fullUrl = getFullUrlForRetrieval(curl_handle, path, metadata, timestamp, hostIndex);
    // Per host: the gate token is per endpoint (see appendGateToken).
    curl_slist_free_all(option_list);
    option_list = nullptr;
    initCurlHTTPHeaderOptionsForRetrieve(curl_handle, option_list, timestamp, headers, etag, createdNotAfter, createdNotBefore, fullUrl);
    content = navigateURLsAndRetrieveContent(curl_handle, fullUrl, tinfo, headers);
  }
  if (content) {
    logReading(path, timestamp, headers, "retrieve");
  }
  curl_slist_free_all(option_list);
  curl_easy_cleanup(curl_handle);
  return content;
}
 
size_t CurlWrite_CallbackFunc_StdString2(void* contents, size_t size, size_t nmemb, std::string* s)
{
  size_t newLength = size * nmemb;
  size_t oldLength = s->size();
  try {
    s->resize(oldLength + newLength);
  } catch (std::bad_alloc& e) {
    LOG(error) << "memory error when getting data from CCDB";
    return 0;
  }
 
  std::copy((char*)contents, (char*)contents + newLength, s->begin() + oldLength);
  return size * nmemb;
}
 
std::string CcdbApi::list(std::string const& path, bool latestOnly, std::string const& returnFormat, long createdNotAfter, long createdNotBefore) const
{
  CurlHandle* curl;
  CURLcode res = CURL_LAST;
  std::string result;
 
  curl = curl_easy_init();
  if (curl != nullptr) {
    curl_easy_setopt(curl, CURLOPT_WRITEFUNCTION, CurlWrite_CallbackFunc_StdString2);
    curl_easy_setopt(curl, CURLOPT_WRITEDATA, &result);
    curl_easy_setopt(curl, CURLOPT_USERAGENT, mUniqueAgentID.c_str());
 
    curlSetSSLOptions(curl);
 
    std::string fullUrl;
    // Perform the request, res will get the return code
    for (size_t hostIndex = 0; hostIndex < hostsPool.size() && res != CURLE_OK; hostIndex++) {
      fullUrl = getHostUrl(hostIndex);
      fullUrl += latestOnly ? "/latest/" : "/browse/";
      fullUrl += path;
      curl_easy_setopt(curl, CURLOPT_URL, fullUrl.c_str());
 
      // Per host: the gate token is per endpoint (see appendGateToken).
      struct curl_slist* headers = nullptr;
      headers = curl_slist_append(headers, (std::string("Accept: ") + returnFormat).c_str());
      headers = curl_slist_append(headers, (std::string("Content-Type: ") + returnFormat).c_str());
      if (createdNotAfter >= 0) {
        headers = curl_slist_append(headers, ("If-Not-After: " + std::to_string(createdNotAfter)).c_str());
      }
      if (createdNotBefore >= 0) {
        headers = curl_slist_append(headers, ("If-Not-Before: " + std::to_string(createdNotBefore)).c_str());
      }
      headers = appendGateToken(headers, fullUrl);
      curl_easy_setopt(curl, CURLOPT_HTTPHEADER, headers);
 
      res = static_cast<CURLcode>(CURL_perform(curl));
      if (res != CURLE_OK) {
        LOGP(alarm, "CURL_perform() failed: {}", curl_easy_strerror(res));
      }
      curl_slist_free_all(headers);
    }
    curl_easy_cleanup(curl);
  }
 
  return result;
}
 
std::string CcdbApi::getTimestampString(long timestamp) const
{
  stringstream ss;
  ss << timestamp;
  return ss.str();
}
 
void CcdbApi::deleteObject(std::string const& path, long timestamp) const
{
  CurlHandle* curl;
  CURLcode res;
  long timestampLocal = timestamp == -1 ? getCurrentTimestamp() : timestamp;
 
  curl = curl_easy_init();
  if (curl != nullptr) {
    curl_easy_setopt(curl, CURLOPT_CUSTOMREQUEST, "DELETE");
    curl_easy_setopt(curl, CURLOPT_USERAGENT, mUniqueAgentID.c_str());
    curl_easy_setopt(curl, CURLOPT_FOLLOWLOCATION, 1L);
    curlSetSSLOptions(curl);
 
    for (size_t hostIndex = 0; hostIndex < hostsPool.size(); hostIndex++) {
      // Inside the loop: hoisted out, the stream accumulates and the second
      // host's URL is the first with the second appended.
      stringstream fullUrl;
      fullUrl << getHostUrl(hostIndex) << "/" << path << "/" << timestampLocal;
      curl_easy_setopt(curl, CURLOPT_URL, fullUrl.str().c_str());
 
      // A DELETE is a write, so it needs the gate token as storing does -- per
      // host, since the token is per endpoint (see appendGateToken).
      struct curl_slist* list = appendGateToken(nullptr, fullUrl.str());
      curl_easy_setopt(curl, CURLOPT_HTTPHEADER, list);
 
      // Perform the request, res will get the return code
      res = static_cast<CURLcode>(CURL_perform(curl));
      if (res != CURLE_OK) {
        LOGP(alarm, "CURL_perform() failed: {}", curl_easy_strerror(res));
      }
      curl_slist_free_all(list);
    }
    // After the loop, not inside it: cleaning up per host left every later
    // iteration using a freed handle.
    curl_easy_cleanup(curl);
  }
}
 
void CcdbApi::truncate(std::string const& path) const
{
  CurlHandle* curl;
  CURLcode res;
  for (size_t i = 0; i < hostsPool.size(); i++) {
    // Declared inside the loop: a stringstream hoisted out of it accumulates,
    // so the second host's URL would be the first one with the second appended
    // to it. Latent until now -- every caller used a single-host pool.
    stringstream fullUrl;
    std::string url = getHostUrl(i);
    fullUrl << url << "/truncate/" << path;
 
    curl = curl_easy_init();
    curl_easy_setopt(curl, CURLOPT_USERAGENT, mUniqueAgentID.c_str());
    if (curl != nullptr) {
      curl_easy_setopt(curl, CURLOPT_URL, fullUrl.str().c_str());
 
      // Truncating is a write, so it needs the gate token exactly as storing
      // does. This was the one write path left without it, which a broker
      // answers 401 -- failing every CCDB suite in their teardown, since each
      // one truncates the path it just wrote.
      struct curl_slist* list = appendGateToken(nullptr, fullUrl.str());
      curl_easy_setopt(curl, CURLOPT_HTTPHEADER, list);
      curl_easy_setopt(curl, CURLOPT_FOLLOWLOCATION, 1L);
      curlSetSSLOptions(curl);
 
      // Perform the request, res will get the return code
      res = static_cast<CURLcode>(CURL_perform(curl));
      if (res != CURLE_OK) {
        LOGP(alarm, "CURL_perform() failed: {}", curl_easy_strerror(res));
      }
      curl_easy_cleanup(curl);
      curl_slist_free_all(list);
    }
  }
}
 
size_t write_data(void*, size_t size, size_t nmemb, void*)
{
  return size * nmemb;
}
 
bool CcdbApi::isHostReachable() const
{
  CurlHandle* curl;
  CURLcode res = CURL_LAST;
  bool result = false;
 
  curl = curl_easy_init();
  curl_easy_setopt(curl, CURLOPT_USERAGENT, mUniqueAgentID.c_str());
  if (curl) {
    // NOTE: mUrl, not getHostUrl(hostIndex), even though hostIndex is unused.
    // For a failover setup mUrl is the whole comma-separated list, which curl
    // rejects as malformed, so every multi-host instance reports itself
    // unreachable however healthy its hosts are -- and testCcdbApiMultipleUrls,
    // whose cases are gated on this, is skipped rather than run.
    //
    // Fixing it is a separate change: the suite then runs for the first time
    // and its storeAndRetrieve fails, so the multi-host store/retrieve path
    // needs looking at before this can be corrected. Callers outside the tests
    // are affected too -- HMPID/PedestalsCalculationSpec sets mWriteToDB from
    // this, and TPC workflows branch on it.
    for (size_t hostIndex = 0; hostIndex < hostsPool.size() && res != CURLE_OK; hostIndex++) {
      curl_easy_setopt(curl, CURLOPT_URL, mUrl.data());
      curl_easy_setopt(curl, CURLOPT_WRITEFUNCTION, write_data);
      curlSetSSLOptions(curl);
      res = static_cast<CURLcode>(CURL_perform(curl));
      result = (res == CURLE_OK);
    }
 
    /* always cleanup */
    curl_easy_cleanup(curl);
  }
  return result;
}
 
std::vector<std::string> CcdbApi::parseSubFolders(std::string const& reply) const
{
  // this needs some text filtering
  // go through reply line by line until we see "SubFolders:"
  std::stringstream ss(reply.c_str());
  std::string line;
  std::vector<std::string> folders;
 
  size_t numberoflines = std::count(reply.begin(), reply.end(), '\n');
  bool inSubFolderSection = false;
 
  for (size_t linenumber = 0; linenumber < numberoflines; ++linenumber) {
    std::getline(ss, line);
    if (inSubFolderSection && line.size() > 0) {
      // remove all white space
      folders.push_back(sanitizeObjectName(line));
    }
 
    if (line.compare("Subfolders:") == 0) {
      inSubFolderSection = true;
    }
  }
  return folders;
}
 
namespace
{
size_t header_callback(char* buffer, size_t size, size_t nitems, void* userdata)
{
  auto* headers = static_cast<std::vector<std::string>*>(userdata);
  auto header = std::string(buffer, size * nitems);
  headers->emplace_back(std::string(header.data()));
  return size * nitems;
}
} // namespace
 
bool stdmap_to_jsonfile(std::map<std::string, std::string> const& meta, std::string const& filename)
{
 
  // create directory structure if necessary
  auto p = std::filesystem::path(filename).parent_path();
  if (!std::filesystem::exists(p)) {
    std::filesystem::create_directories(p);
  }
 
  rapidjson::StringBuffer buffer;
  rapidjson::Writer<rapidjson::StringBuffer> writer(buffer);
  writer.StartObject();
  for (const auto& pair : meta) {
    writer.Key(pair.first.c_str());
    writer.String(pair.second.c_str());
  }
  writer.EndObject();
 
  // Write JSON to file
  std::ofstream file(filename);
  if (file.is_open()) {
    file << buffer.GetString();
    file.close();
  } else {
    return false;
  }
  return true;
}
 
bool jsonfile_to_stdmap(std::map<std::string, std::string>& meta, std::string const& filename)
{
  // Read JSON from file
  std::ifstream file(filename);
  if (!file.is_open()) {
    std::cerr << "Failed to open file for reading." << std::endl;
    return false;
  }
 
  std::string jsonStr((std::istreambuf_iterator<char>(file)), std::istreambuf_iterator<char>());
 
  // Parse JSON
  rapidjson::Document document;
  document.Parse(jsonStr.c_str());
 
  if (document.HasParseError()) {
    std::cerr << "Error parsing JSON" << std::endl;
    return false;
  }
 
  // Convert JSON to std::map
  for (auto itr = document.MemberBegin(); itr != document.MemberEnd(); ++itr) {
    meta[itr->name.GetString()] = itr->value.GetString();
  }
  return true;
}
 
std::map<std::string, std::string> CcdbApi::retrieveHeaders(std::string const& path, std::map<std::string, std::string> const& metadata, long timestamp) const
{
  // lambda that actually does the call to the CCDB server
  auto do_remote_header_call = [this, &path, &metadata, timestamp]() -> std::map<std::string, std::string> {
    CurlHandle* curl = curl_easy_init();
    CURLcode res = CURL_LAST;
    std::string fullUrl = getFullUrlForRetrieval(curl, path, metadata, timestamp);
    std::map<std::string, std::string> headers;
 
    if (curl != nullptr) {
      struct curl_slist* list = nullptr;
      list = curl_slist_append(list, ("If-None-Match: " + std::to_string(timestamp)).c_str());
      list = appendGateToken(list, fullUrl);
 
      curl_easy_setopt(curl, CURLOPT_HTTPHEADER, list);
 
      /* get us the resource without a body! */
      curl_easy_setopt(curl, CURLOPT_NOBODY, 1L);
      curl_easy_setopt(curl, CURLOPT_FOLLOWLOCATION, 1L);
      curl_easy_setopt(curl, CURLOPT_HEADERFUNCTION, header_map_callback<>);
      curl_easy_setopt(curl, CURLOPT_HEADERDATA, &headers);
      curl_easy_setopt(curl, CURLOPT_USERAGENT, mUniqueAgentID.c_str());
 
      curlSetSSLOptions(curl);
 
      // Perform the request, res will get the return code
      long httpCode = 404;
      CURLcode getCodeRes = CURL_LAST;
      for (size_t hostIndex = 0; hostIndex < hostsPool.size() && (httpCode >= 400 || res > 0 || getCodeRes > 0); hostIndex++) {
        curl_easy_setopt(curl, CURLOPT_URL, fullUrl.c_str());
        res = static_cast<CURLcode>(CURL_perform(curl));
        if (res != CURLE_OK && res != CURLE_UNSUPPORTED_PROTOCOL) {
          // We take out the unsupported protocol error because we are only querying
          // header info which is returned in any case. Unsupported protocol error
          // occurs sometimes because of redirection to alien for blobs.
          LOG(error) << "CURL_perform() failed: " << curl_easy_strerror(res);
        }
        getCodeRes = curl_easy_getinfo(curl, CURLINFO_RESPONSE_CODE, &httpCode);
      }
      if (httpCode == 404) {
        headers.clear();
      }
      curl_easy_cleanup(curl);
    }
    return headers;
  };
 
  if (!mSnapshotCachePath.empty()) {
    // protect this sensitive section by a multi-process named semaphore
    auto semaphore_barrier = std::make_unique<CCDBSemaphore>(mSnapshotCachePath + std::string("_headers"), path);
 
    std::string logfile = mSnapshotCachePath + "/log";
    std::fstream out(logfile, ios_base::out | ios_base::app);
    if (out.is_open()) {
      out << "CCDB-header-access[" << getpid() << "] of " << mUniqueAgentID << " to " << path << " timestamp " << timestamp << "\n";
    }
    auto snapshotfile = getSnapshotFile(mSnapshotCachePath, path + "/" + std::to_string(timestamp), "header.json");
    if (!std::filesystem::exists(snapshotfile)) {
      out << "CCDB-header-access[" << getpid() << "] ... " << mUniqueAgentID << " storing to snapshot " << snapshotfile << "\n";
 
      // if file not already here and valid --> snapshot it
      auto meta = do_remote_header_call();
 
      // cache the result
      if (!stdmap_to_jsonfile(meta, snapshotfile)) {
        LOG(warn) << "Failed to cache the header information to disc";
      }
      return meta;
    } else {
      out << "CCDB-header-access[" << getpid() << "]  ... " << mUniqueAgentID << "serving from local snapshot " << snapshotfile << "\n";
      std::map<std::string, std::string> meta;
      if (!jsonfile_to_stdmap(meta, snapshotfile)) {
        LOG(warn) << "Failed to read cached information from disc";
        return do_remote_header_call();
      }
      return meta;
    }
  }
  return do_remote_header_call();
}
 
bool CcdbApi::getCCDBEntryHeaders(std::string const& url, std::string const& etag, std::vector<std::string>& headers, const std::string& agentID)
{
  auto curl = curl_easy_init();
  headers.clear();
  if (!curl) {
    return true;
  }
 
  struct curl_slist* list = nullptr;
  list = curl_slist_append(list, ("If-None-Match: " + etag).c_str());
  list = appendGateToken(list, url);
 
  curl_easy_setopt(curl, CURLOPT_HTTPHEADER, list);
 
  curl_easy_setopt(curl, CURLOPT_URL, url.c_str());
  /* get us the resource without a body! */
  curl_easy_setopt(curl, CURLOPT_NOBODY, 1L);
  curl_easy_setopt(curl, CURLOPT_FOLLOWLOCATION, 1L);
  curl_easy_setopt(curl, CURLOPT_HEADERFUNCTION, header_callback);
  curl_easy_setopt(curl, CURLOPT_HEADERDATA, &headers);
  if (!agentID.empty()) {
    curl_easy_setopt(curl, CURLOPT_USERAGENT, agentID.c_str());
  }
 
  curlSetSSLOptions(curl);
 
  /* Perform the request */
  curl_easy_perform(curl);
  long http_code = 404;
  curl_easy_getinfo(curl, CURLINFO_RESPONSE_CODE, &http_code);
  if (http_code == 304) {
    return false;
  }
  return true;
}
 
void CcdbApi::parseCCDBHeaders(std::vector<std::string> const& headers, std::vector<std::string>& pfns, std::string& etag)
{
  static std::string etagHeader = "ETag: ";
  static std::string locationHeader = "Content-Location: ";
  // Trimmed: `headers` holds raw header lines, CRLF and all, and the etag goes
  // straight back out as an If-None-Match request header.
  for (auto h : headers) {
    if (h.find(etagHeader) == 0) {
      etag = trimHeaderValue(std::string_view(h).substr(etagHeader.size()));
    } else if (h.find(locationHeader) == 0) {
      pfns.emplace_back(trimHeaderValue(std::string_view(h).substr(locationHeader.size())));
    }
  }
}
 
CCDBQuery* CcdbApi::retrieveQueryInfo(TFile& file)
{
  auto object = file.GetObjectChecked(CCDBQUERY_ENTRY, TClass::GetClass(typeid(o2::ccdb::CCDBQuery)));
  if (object) {
    return static_cast<CCDBQuery*>(object);
  }
  return nullptr;
}
 
std::map<std::string, std::string>* CcdbApi::retrieveMetaInfo(TFile& file)
{
  auto object = file.GetObjectChecked(CCDBMETA_ENTRY, TClass::GetClass(typeid(std::map<std::string, std::string>)));
  if (object) {
    return static_cast<std::map<std::string, std::string>*>(object);
  }
  return nullptr;
}
 
namespace
{
void traverseAndFillFolders(CcdbApi const& api, std::string const& top, std::vector<std::string>& folders)
{
  // LOG(info) << "Querying " << top;
  auto reply = api.list(top);
  folders.emplace_back(top);
  // LOG(info) << reply;
  auto subfolders = api.parseSubFolders(reply);
  if (subfolders.size() > 0) {
    // LOG(info) << subfolders.size() << " folders in " << top;
    for (auto& sub : subfolders) {
      traverseAndFillFolders(api, sub, folders);
    }
  } else {
    // LOG(info) << "NO subfolders in " << top;
  }
}
} // namespace
 
std::vector<std::string> CcdbApi::getAllFolders(std::string const& top) const
{
  std::vector<std::string> folders;
  traverseAndFillFolders(*this, top, folders);
  return folders;
}
 
TClass* CcdbApi::tinfo2TClass(std::type_info const& tinfo)
{
  TClass* cl = TClass::GetClass(tinfo);
  if (!cl) {
    throw std::runtime_error(fmt::format("Could not retrieve ROOT dictionary for type {}, aborting", tinfo.name()));
    return nullptr;
  }
  return cl;
}
 
int CcdbApi::updateMetadata(std::string const& path, std::map<std::string, std::string> const& metadata, long timestamp, std::string const& id, long newEOV)
{
  int ret = -1;
  CurlHandle* curl = curl_easy_init();
  curl_easy_setopt(curl, CURLOPT_USERAGENT, mUniqueAgentID.c_str());
  if (curl != nullptr) {
    CURLcode res;
    for (size_t hostIndex = 0; hostIndex < hostsPool.size(); hostIndex++) {
      // Inside the loop: hoisted out, the stream accumulates and the second
      // host's URL is the first with the second appended.
      stringstream fullUrl;
      fullUrl << getHostUrl(hostIndex) << "/" << path << "/" << timestamp;
      if (newEOV > 0) {
        fullUrl << "/" << newEOV;
      }
      if (!id.empty()) {
        fullUrl << "/" << id;
      }
      fullUrl << "?";
 
      for (auto& kv : metadata) {
        std::string mfirst = kv.first;
        std::string msecond = kv.second;
        // same trick for the metadata as for the object type
        char* mfirstEncoded = curl_easy_escape(curl, mfirst.c_str(), mfirst.size());
        char* msecondEncoded = curl_easy_escape(curl, msecond.c_str(), msecond.size());
        fullUrl << std::string(mfirstEncoded) + "=" + std::string(msecondEncoded) + "&";
        curl_free(mfirstEncoded);
        curl_free(msecondEncoded);
      }
 
      if (curl != nullptr) {
        LOG(debug) << "passing to curl: " << fullUrl.str();
        curl_easy_setopt(curl, CURLOPT_URL, fullUrl.str().c_str());
        curl_easy_setopt(curl, CURLOPT_CUSTOMREQUEST, "PUT"); // make sure we use PUT
        curl_easy_setopt(curl, CURLOPT_USERAGENT, mUniqueAgentID.c_str());
        curl_easy_setopt(curl, CURLOPT_FOLLOWLOCATION, 1L);
        // A PUT is a write, so it needs the gate token as storing does -- per
        // host, since the token is per endpoint (see appendGateToken).
        struct curl_slist* list = appendGateToken(nullptr, fullUrl.str());
        curl_easy_setopt(curl, CURLOPT_HTTPHEADER, list);
        curlSetSSLOptions(curl);
 
        // Perform the request, res will get the return code
        res = static_cast<CURLcode>(CURL_perform(curl));
        if (res != CURLE_OK) {
          LOGP(alarm, "CURL_perform() failed: {}, code: {}", curl_easy_strerror(res), int(res));
          ret = int(res);
        } else {
          ret = 0;
        }
        curl_slist_free_all(list);
      }
    }
    // After the loop, not inside it: cleaning up per host left every later
    // iteration using a freed handle.
    curl_easy_cleanup(curl);
  }
  return ret;
}
 
void CcdbApi::initHostsPool(std::string hosts)
{
  hostsPool.clear();
  auto splitted = hosts | std::views::transform([](char c) { return (c == ';') ? ',' : c; }) | std::views::split(',');
  for (auto&& part : splitted) {
    hostsPool.emplace_back(part.begin(), part.end());
  }
}
 
std::string CcdbApi::getHostUrl(int hostIndex) const
{
  return hostsPool.at(hostIndex);
}
 
void CcdbApi::scheduleDownload(RequestContext& requestContext, size_t* requestCounter) const
{
  auto data = new DownloaderRequestData(); // Deleted in transferFinished of CCDBDownloader.cxx
  data->hoPair.object = &requestContext.dest;
 
  std::function<bool(std::string)> localContentCallback = [this, &requestContext](std::string url) {
    return this->loadLocalContentToMemory(requestContext.dest, url);
  };
 
  auto writeCallback = [](void* contents, size_t size, size_t nmemb, void* chunkptr) {
    auto& ho = *static_cast<HeaderObjectPair_t*>(chunkptr);
    auto& chunk = *ho.object;
    size_t realsize = size * nmemb, sz = 0;
    ho.counter++;
    try {
      if (chunk.capacity() < chunk.size() + realsize) {
        // estimate headers size when converted to annotated text string
        const char hannot[] = "header";
        size_t hsize = getFlatHeaderSize(ho.header);
        auto cl = ho.header.find("Content-Length");
        if (cl != ho.header.end()) {
          size_t sizeFromHeader = std::stol(cl->second);
          sz = hsize + std::max(chunk.size() * (sizeFromHeader ? 1 : 2) + realsize, sizeFromHeader);
        } else {
          sz = hsize + std::max(chunk.size() * 2, chunk.size() + realsize);
          // LOGP(debug, "SIZE IS NOT IN HEADER, allocate {}", sz);
        }
        chunk.reserve(sz);
      }
      char* contC = (char*)contents;
      chunk.insert(chunk.end(), contC, contC + realsize);
    } catch (std::exception e) {
      // LOGP(alarm, "failed to reserve {} bytes in CURL write callback (realsize = {}): {}", sz, realsize, e.what());
      realsize = 0;
    }
    return realsize;
  };
 
  CurlHandle* curl_handle = curl_easy_init();
  curl_easy_setopt(curl_handle, CURLOPT_USERAGENT, mUniqueAgentID.c_str());
  std::string fullUrl = getFullUrlForRetrieval(curl_handle, requestContext.path, requestContext.metadata, requestContext.timestamp);
 
  data->headers = &requestContext.headers;
  data->hosts = hostsPool;
  data->path = requestContext.path;
  data->timestamp = requestContext.timestamp;
  data->localContentCallback = localContentCallback;
  data->userAgent = mUniqueAgentID;
 
  // One header list per host, built HERE because this is where the gate-token
  // table is visible -- the downloader only indexes them. A single shared list
  // sent the first host's token to every host it failed over to, which a broker
  // answers 401: the failover then retrieved nothing while looking like a
  // network failure (testCcdbApi multi_host_test).
  data->optionsLists.reserve(hostsPool.size());
  for (size_t hostIndex = 0; hostIndex < hostsPool.size(); hostIndex++) {
    curl_slist* hostOptions = nullptr;
    const std::string hostUrl = getFullUrlForRetrieval(curl_handle, requestContext.path, requestContext.metadata,
                                                       requestContext.timestamp, hostIndex);
    initCurlHTTPHeaderOptionsForRetrieve(curl_handle, hostOptions, requestContext.timestamp, &requestContext.headers,
                                         requestContext.etag, requestContext.createdNotAfter, requestContext.createdNotBefore,
                                         hostUrl);
    data->optionsLists.push_back(hostOptions);
  }
  // initCurlHTTPHeaderOptionsForRetrieve sets CURLOPT_HTTPHEADER as a side
  // effect, so the handle currently points at the LAST host's list. Point it
  // back at host 0, which is the one this transfer starts with.
  if (!data->optionsLists.empty()) {
    curl_easy_setopt(curl_handle, CURLOPT_HTTPHEADER, data->optionsLists.front());
  }
 
  curl_easy_setopt(curl_handle, CURLOPT_URL, fullUrl.c_str());
  initCurlOptionsForRetrieve(curl_handle, (void*)(&data->hoPair), writeCallback, false);
  curl_easy_setopt(curl_handle, CURLOPT_HEADERFUNCTION, header_map_callback<decltype(data->hoPair.header)>);
  curl_easy_setopt(curl_handle, CURLOPT_HEADERDATA, (void*)&(data->hoPair.header));
  curl_easy_setopt(curl_handle, CURLOPT_PRIVATE, (void*)data);
  curlSetSSLOptions(curl_handle);
 
  asynchPerform(curl_handle, requestCounter);
}
 
std::string CcdbApi::determineSemaphoreName(std::string const& basedir, std::string const& ccdbpath)
{
  std::hash<std::string> hasher;
  std::string semhashedstring = "aliceccdb" + std::to_string(hasher(basedir + ccdbpath)).substr(0, 16);
  return semhashedstring;
}
 
boost::interprocess::named_semaphore* CcdbApi::createNamedSemaphore(std::string const& path) const
{
  std::string semhashedstring = determineSemaphoreName(mSnapshotCachePath, path);
  // LOG(info) << "Creating named semaphore with name " << semhashedstring.c_str();
  try {
    return new boost::interprocess::named_semaphore(boost::interprocess::open_or_create_t{}, semhashedstring.c_str(), 1);
  } catch (std::exception e) {
    LOG(warn) << "Exception occurred during CCDB (cache) semaphore setup; Continuing without";
    return nullptr;
  }
}
 
void CcdbApi::releaseNamedSemaphore(boost::interprocess::named_semaphore* sem, std::string const& path) const
{
  if (sem) {
    sem->post();
    if (sem->try_wait()) { // if nobody else is waiting remove the semaphore resource
      sem->post();
      boost::interprocess::named_semaphore::remove(determineSemaphoreName(mSnapshotCachePath, path).c_str());
    }
  }
}
 
bool CcdbApi::removeSemaphore(std::string const& semaname, bool remove)
{
  // removes a given named semaphore from the system
  try {
    boost::interprocess::named_semaphore semaphore(boost::interprocess::open_only, semaname.c_str());
    std::cout << "Found CCDB semaphore: " << semaname << "\n";
    if (remove) {
      auto success = boost::interprocess::named_semaphore::remove(semaname.c_str());
      if (success) {
        std::cout << "Removed CCDB semaphore: " << semaname << "\n";
      }
      return success;
    }
    return true;
  } catch (std::exception const& e) {
    // no EXISTING under this name semaphore found
    // nothing to be done
  }
  return false;
}
 
// helper function checking for leaking semaphores associated to CCDB cache files and removing them
// walks a local CCDB snapshot tree and checks
void CcdbApi::removeLeakingSemaphores(std::string const& snapshotdir, bool remove)
{
  namespace fs = std::filesystem;
  std::string fileName{"snapshot.root"};
  try {
    auto absolutesnapshotdir = fs::weakly_canonical(fs::absolute(snapshotdir));
    for (const auto& entry : fs::recursive_directory_iterator(absolutesnapshotdir)) {
      if (entry.is_directory()) {
        const fs::path& currentDir = fs::canonical(fs::absolute(entry.path()));
        fs::path filePath = currentDir / fileName;
        if (fs::exists(filePath) && fs::is_regular_file(filePath)) {
          std::cout << "Directory with file '" << fileName << "': " << currentDir << std::endl;
 
          // we need to obtain the path relative to snapshotdir
          auto pathtokens = o2::utils::Str::tokenize(currentDir, '/', true);
          auto numtokens = pathtokens.size();
          if (numtokens < 3) {
            // cannot be a CCDB path
            continue;
          }
          // path are last 3 entries
          std::string path = pathtokens[numtokens - 3] + "/" + pathtokens[numtokens - 2] + "/" + pathtokens[numtokens - 1];
          auto semaname = o2::ccdb::CcdbApi::determineSemaphoreName(absolutesnapshotdir, path);
          removeSemaphore(semaname, remove);
        }
      }
    }
  } catch (std::exception const& e) {
    LOG(info) << "Semaphore search had exception " << e.what();
  }
}
 
void CcdbApi::getFromSnapshot(bool createSnapshot, std::string const& path,
                              long timestamp, std::map<std::string, std::string>& headers,
                              std::string& snapshotpath, o2::pmr::vector<char>& dest, int& fromSnapshot, std::string const& etag) const
{
  if (createSnapshot) { // create named semaphore
    std::string logfile = mSnapshotCachePath + "/log";
    std::fstream logStream = std::fstream(logfile, ios_base::out | ios_base::app);
    if (logStream.is_open()) {
      logStream << "CCDB-access[" << getpid() << "] of " << mUniqueAgentID << " to " << path << " timestamp " << timestamp << " for load to memory\n";
    }
  }
  if (mInSnapshotMode) { // file must be there, otherwise a fatal will be produced;
    if (etag.empty()) {
      loadFileToMemory(dest, getSnapshotFile(mSnapshotTopPath, path), &headers);
    }
    fromSnapshot = 1;
  } else if (mPreferSnapshotCache && std::filesystem::exists(snapshotpath)) {
    // if file is available, use it, otherwise cache it below from the server. Do this only when etag is empty since otherwise the object was already fetched and cached
    if (etag.empty()) {
      loadFileToMemory(dest, snapshotpath, &headers);
    }
    fromSnapshot = 2;
  }
}
 
void CcdbApi::saveSnapshot(RequestContext& requestContext) const
{
  // Consider saving snapshot
  if (!mSnapshotCachePath.empty() && !(mInSnapshotMode && mSnapshotTopPath == mSnapshotCachePath)) { // store in the snapshot only if the object was not read from the snapshot
    auto semaphore_barrier = std::make_unique<CCDBSemaphore>(mSnapshotCachePath, requestContext.path);
 
    auto snapshotdir = getSnapshotDir(mSnapshotCachePath, requestContext.path);
    std::string snapshotpath = getSnapshotFile(mSnapshotCachePath, requestContext.path);
    o2::utils::createDirectoriesIfAbsent(snapshotdir);
    std::fstream logStream;
    if (logStream.is_open()) {
      logStream << "CCDB-access[" << getpid() << "] ... " << mUniqueAgentID << " downloading to snapshot " << snapshotpath << " from memory\n";
    }
    { // dump image to a file
      LOGP(debug, "creating snapshot {} -> {}", requestContext.path, snapshotpath);
      CCDBQuery querysummary(requestContext.path, requestContext.metadata, requestContext.timestamp);
      {
        std::ofstream objFile(snapshotpath, std::ios::out | std::ofstream::binary);
        std::copy(requestContext.dest.begin(), requestContext.dest.end(), std::ostreambuf_iterator<char>(objFile));
      }
      // now open the same file as root file and store metadata
      updateMetaInformationInLocalFile(snapshotpath, &requestContext.headers, &querysummary);
    }
  }
}
 
void CcdbApi::loadFileToMemory(std::vector<char>& dest, std::string const& path,
                               std::map<std::string, std::string> const& metadata, long timestamp,
                               std::map<std::string, std::string>* headers, std::string const& etag,
                               const std::string& createdNotAfter, const std::string& createdNotBefore, bool considerSnapshot) const
{
  o2::pmr::vector<char> destP;
  destP.reserve(dest.size());
  loadFileToMemory(destP, path, metadata, timestamp, headers, etag, createdNotAfter, createdNotBefore, considerSnapshot);
  dest.clear();
  dest.reserve(destP.size());
  for (const auto c : destP) {
    dest.push_back(c);
  }
}
 
void CcdbApi::loadFileToMemory(o2::pmr::vector<char>& dest, std::string const& path,
                               std::map<std::string, std::string> const& metadata, long timestamp,
                               std::map<std::string, std::string>* headers, std::string const& etag,
                               const std::string& createdNotAfter, const std::string& createdNotBefore, bool considerSnapshot) const
{
  RequestContext requestContext(dest, metadata, *headers);
  requestContext.path = path;
  // std::map<std::string, std::string> metadataCopy = metadata; // Create a copy because metadata will be passed as a pointer so it cannot be constant. The const in definition is for backwards compatability.
  // requestContext.metadata = metadataCopy;
  requestContext.timestamp = timestamp;
  requestContext.etag = etag;
  requestContext.createdNotAfter = createdNotAfter;
  requestContext.createdNotBefore = createdNotBefore;
  requestContext.considerSnapshot = considerSnapshot;
  std::vector<RequestContext> contexts = {requestContext};
  vectoredLoadFileToMemory(contexts);
}
 
void CcdbApi::appendFlatHeader(o2::pmr::vector<char>& dest, const std::map<std::string, std::string>& headers)
{
  size_t hsize = getFlatHeaderSize(headers), cnt = dest.size();
  dest.resize(cnt + hsize);
  auto addString = [&dest, &cnt](const std::string& s) {
    for (char c : s) {
      dest[cnt++] = c;
    }
    dest[cnt++] = 0;
  };
 
  for (auto& h : headers) {
    addString(h.first);
    addString(h.second);
  }
  *reinterpret_cast<int*>(&dest[cnt]) = hsize;                                     // store size
  std::memcpy(&dest[cnt + sizeof(int)], FlatHeaderAnnot, sizeof(FlatHeaderAnnot)); // annotate the flattened headers map
}
 
void CcdbApi::navigateSourcesAndLoadFile(RequestContext& requestContext, int& fromSnapshot, size_t* requestCounter) const
{
  LOGP(debug, "loadFileToMemory {} ETag=[{}]", requestContext.path, requestContext.etag);
  bool createSnapshot = requestContext.considerSnapshot && !mSnapshotCachePath.empty(); // create snaphot if absent
 
  std::string snapshotpath;
  if (mInSnapshotMode || std::filesystem::exists(snapshotpath = getSnapshotFile(mSnapshotCachePath, requestContext.path))) {
    auto semaphore_barrier = std::make_unique<CCDBSemaphore>(mSnapshotCachePath, requestContext.path);
    // if we are in snapshot mode we can simply open the file, unless the etag is non-empty:
    // this would mean that the object was is already fetched and in this mode we don't to validity checks!
    getFromSnapshot(createSnapshot, requestContext.path, requestContext.timestamp, requestContext.headers, snapshotpath, requestContext.dest, fromSnapshot, requestContext.etag);
  } else { // look on the server
    scheduleDownload(requestContext, requestCounter);
  }
}
 
void CcdbApi::vectoredLoadFileToMemory(std::vector<RequestContext>& requestContexts) const
{
  std::vector<int> fromSnapshots(requestContexts.size());
  size_t requestCounter = 0;
 
  // Get files from snapshots and schedule downloads
  for (int i = 0; i < requestContexts.size(); i++) {
    // navigateSourcesAndLoadFile either retrieves file from snapshot immediately, or schedules it to be downloaded when mDownloader->runLoop is ran at a later time
    auto& requestContext = requestContexts.at(i);
    navigateSourcesAndLoadFile(requestContext, fromSnapshots.at(i), &requestCounter);
  }
 
  // Download the rest
  while (requestCounter > 0) {
    mDownloader->runLoop(0);
  }
 
  // Save snapshots
  for (int i = 0; i < requestContexts.size(); i++) {
    auto& requestContext = requestContexts.at(i);
    if (!requestContext.dest.empty()) {
      logReading(requestContext.path, requestContext.timestamp, &requestContext.headers,
                 fmt::format("{}{}", requestContext.considerSnapshot ? "load to memory" : "retrieve", fromSnapshots.at(i) ? " from snapshot" : ""));
      if (requestContext.considerSnapshot && fromSnapshots.at(i) != 2) {
        saveSnapshot(requestContext);
      }
    }
  }
}
 
bool CcdbApi::loadLocalContentToMemory(o2::pmr::vector<char>& dest, std::string& url) const
{
  if (url.find("alien:/", 0) != std::string::npos) {
    std::map<std::string, std::string> localHeaders;
    loadFileToMemory(dest, url, &localHeaders, false);
    auto it = localHeaders.find("Error");
    if (it != localHeaders.end() && it->second == "An error occurred during retrieval") {
      return false;
    } else {
      return true;
    }
  }
  if ((url.find("file:/", 0) != std::string::npos)) {
    std::string path = url.substr(7);
    if (std::filesystem::exists(path)) {
      std::map<std::string, std::string> localHeaders;
      loadFileToMemory(dest, url, &localHeaders, o2::utils::Str::endsWith(path, ".root"));
      auto it = localHeaders.find("Error");
      if (it != localHeaders.end() && it->second == "An error occurred during retrieval") {
        return false;
      } else {
        return true;
      }
    }
  }
  return false;
}
 
void CcdbApi::loadFileToMemory(o2::pmr::vector<char>& dest, const std::string& path, std::map<std::string, std::string>* localHeaders, bool fetchLocalMetaData) const
{
  // Read file to memory as vector. For special case of the locally cached file retriev metadata stored directly in the file
  constexpr size_t MaxCopySize = 0x1L << 25;
  auto signalError = [&dest, localHeaders]() {
    dest.clear();
    dest.reserve(1);
    if (localHeaders) { // indicate that an error occurred ---> used by caching layers (such as CCDBManager)
      (*localHeaders)["Error"] = "An error occurred during retrieval";
    }
  };
  if (path.find("alien:/") == 0 && !initTGrid()) {
    signalError();
    return;
  }
  std::string fname(path);
  if (fname.find("?filetype=raw") == std::string::npos) {
    fname += "?filetype=raw";
  }
  std::unique_ptr<TFile> sfile{TFile::Open(fname.c_str())};
  if (!sfile || sfile->IsZombie()) {
    LOG(error) << "Failed to open file " << fname;
    signalError();
    return;
  }
  size_t totalread = 0, fsize = sfile->GetSize(), b00 = sfile->GetBytesRead();
  dest.resize(fsize);
  char* dptr = dest.data();
  sfile->Seek(0);
  long nread = 0;
  do {
    size_t b0 = sfile->GetBytesRead(), b1 = b0 - b00;
    size_t readsize = fsize - b1 > MaxCopySize ? MaxCopySize : fsize - b1;
    if (readsize == 0) {
      break;
    }
    sfile->Seek(totalread, TFile::kBeg);
    bool failed = sfile->ReadBuffer(dptr, (Int_t)readsize);
    nread = sfile->GetBytesRead() - b0;
    if (failed || nread < 0) {
      LOG(error) << "failed to copy file " << fname << " to memory buffer";
      signalError();
      return;
    }
    dptr += nread;
    totalread += nread;
  } while (nread == (long)MaxCopySize);
 
  if (localHeaders && fetchLocalMetaData) {
    TMemFile memFile("name", const_cast<char*>(dest.data()), dest.size(), "READ");
    auto storedmeta = (std::map<std::string, std::string>*)extractFromTFile(memFile, TClass::GetClass("std::map<std::string, std::string>"), CCDBMETA_ENTRY);
    if (storedmeta) {
      *localHeaders = *storedmeta; // do a simple deep copy
      delete storedmeta;
    }
    if ((isSnapshotMode() || mPreferSnapshotCache) && localHeaders->find("ETag") == localHeaders->end()) { // generate dummy ETag to profit from the caching
      (*localHeaders)["ETag"] = path;
    }
    if (localHeaders->find("fileSize") == localHeaders->end()) {
      (*localHeaders)["fileSize"] = fmt::format("{}", memFile.GetEND());
    }
  }
  return;
}
 
void CcdbApi::checkMetadataKeys(std::map<std::string, std::string> const& metadata) const
{
 
  // function to check if any key contains invalid characters
  // if so, a fatal will be issued
 
  const std::regex regexPatternSearch(R"([ :;.,\\/'?!\‍(\)\{\}\[\]@<>=+*#$&`|~^%])");
  bool isInvalid = false;
 
  for (auto& el : metadata) {
    auto keyMd = el.first;
    auto tmp = keyMd;
    std::smatch searchRes;
    while (std::regex_search(keyMd, searchRes, regexPatternSearch)) {
      isInvalid = true;
      LOG(error) << "Invalid character found in metadata key '" << tmp << "\': '" << searchRes.str() << "\'";
      keyMd = searchRes.suffix();
    }
  }
  if (isInvalid) {
    LOG(fatal) << "Some metadata keys have invalid characters, please fix!";
  }
  return;
}
 
void CcdbApi::logReading(const std::string& path, long ts, const std::map<std::string, std::string>* headers, const std::string& comment) const
{
  std::string upath{path};
  if (headers) {
    auto ent = headers->find("Valid-From");
    if (ent != headers->end()) {
      upath += "/" + ent->second;
    }
    ent = headers->find("ETag");
    if (ent != headers->end()) {
      upath += "/" + ent->second;
    }
  }
  upath.erase(remove(upath.begin(), upath.end(), '\"'), upath.end());
  LOGP(info, "ccdb reads {}{}{} for {} ({}, agent_id: {}), ", mUrl, mUrl.back() == '/' ? "" : "/", upath, ts < 0 ? getCurrentTimestamp() : ts, comment, mUniqueAgentID);
}
 
void CcdbApi::asynchPerform(CurlHandle* handle, size_t* requestCounter) const
{
  mDownloader->asynchSchedule(handle, requestCounter);
}
 
int CcdbApi::CURL_perform(CurlHandle* handle) const
{
  if (mIsCCDBDownloaderPreferred) {
    return mDownloader->perform(handle);
  }
  CURLcode result;
  for (int i = 1; i <= mCurlRetries && (result = curl_easy_perform(handle)) != CURLE_OK; i++) {
    usleep(mCurlDelayRetries * i);
  }
  return result;
}
 
CCDBSemaphore::CCDBSemaphore(std::string const& snapshotpath, std::string const& path)
{
  LOG(debug) << "Entering semaphore barrier";
  mSemName = CcdbApi::determineSemaphoreName(snapshotpath, path);
  try {
    mSem = new boost::interprocess::named_semaphore(boost::interprocess::open_or_create_t{}, mSemName.c_str(), 1);
  } catch (std::exception e) {
    LOG(warn) << "Exception occurred during CCDB (cache) semaphore setup; Continuing without";
    mSem = nullptr;
  }
  // automatically wait
  if (mSem) {
    gSemaRegistry.add(this);
    mSem->wait();
  }
}
 
CCDBSemaphore::~CCDBSemaphore()
{
  LOG(debug) << "Ending semaphore barrier";
  if (mSem) {
    mSem->post();
    if (mSem->try_wait()) { // if nobody else is waiting remove the semaphore resource
      mSem->post();
      boost::interprocess::named_semaphore::remove(mSemName.c_str());
    }
    gSemaRegistry.remove(this);
  }
}
 
SemaphoreRegistry::~SemaphoreRegistry()
{
  LOG(debug) << "Cleaning up semaphore registry with count " << mStore.size();
  for (auto& s : mStore) {
    delete s;
    mStore.erase(s);
  }
}
 
void SemaphoreRegistry::add(CCDBSemaphore const* ptr)
{
  mStore.insert(ptr);
}
 
void SemaphoreRegistry::remove(CCDBSemaphore const* ptr)
{
  mStore.erase(ptr);
}
 
} // namespace o2::ccdb