├── .gitignore ├── CHANGES.md ├── project.clj ├── test └── jdbc_ring_session │ ├── cleaner_test.clj │ └── core_test.clj ├── src └── jdbc_ring_session │ ├── cleaner.clj │ └── core.clj ├── README.md └── LICENSE /.gitignore: -------------------------------------------------------------------------------- 1 | pom.xml 2 | pom.xml.asc 3 | *jar 4 | /lib/ 5 | /classes/ 6 | /target/ 7 | /checkouts/ 8 | .lein-deps-sum 9 | .lein-repl-history 10 | .lein-plugins/ 11 | .lein-failures 12 | -------------------------------------------------------------------------------- /CHANGES.md: -------------------------------------------------------------------------------- 1 | 1.5.2 - [SQLite support](https://github.com/luminus-framework/jdbc-ring-session/pull/21) 2 | 1.5.1 - [Moves query for removing expired sessions into a transaction](https://github.com/luminus-framework/jdbc-ring-session/pull/20) 3 | 1.5.0 - switch to use [next.jdbc](https://github.com/luminus-framework/jdbc-ring-session/pull/18) 4 | - breaking changes: database connection specification changed from clojure.java.jdbc to next.jdbc, see next.jdbc [migration guide](https://cljdoc.org/d/com.github.seancorfield/next.jdbc/1.2.724/doc/migration-from-clojure-java-jdbc#primary-api) for details 5 | -------------------------------------------------------------------------------- /project.clj: -------------------------------------------------------------------------------- 1 | (defproject jdbc-ring-session "1.5.5" 2 | :description "Ring JDBC Session Store" 3 | :url "https://github.com/yogthos/jdbc-ring-session" 4 | :license {:name "Eclipse Public License" 5 | :url "http://www.eclipse.org/legal/epl-v10.html"} 6 | :dependencies [[org.clojure/clojure "1.11.1"] 7 | [ring/ring-core "1.9.6"] 8 | [com.taoensso/nippy "3.4.2"] 9 | [commons-codec/commons-codec "1.15"] 10 | [com.github.seancorfield/next.jdbc "1.3.847"]] 11 | 12 | :profiles 13 | {:dev {:dependencies [[com.h2database/h2 "1.4.200"]]}}) 14 | -------------------------------------------------------------------------------- /test/jdbc_ring_session/cleaner_test.clj: -------------------------------------------------------------------------------- 1 | (ns jdbc-ring-session.cleaner-test 2 | (:require [clojure.test :refer :all] 3 | [next.jdbc :as jdbc] 4 | [jdbc-ring-session.core :refer :all] 5 | [jdbc-ring-session.cleaner :refer :all])) 6 | 7 | (def db {:dbtype "h2" :dbname "example"}) 8 | 9 | (defn create-test-table [db] 10 | (jdbc/with-transaction [tx db] 11 | (jdbc/execute! tx ["drop table if exists session_store"]) 12 | (jdbc/execute! tx [" 13 | CREATE TABLE session_store ( 14 | session_id VARCHAR(36) NOT NULL, 15 | idle_timeout BIGINT DEFAULT NULL, 16 | absolute_timeout BIGINT DEFAULT NULL, 17 | value BINARY(10000), 18 | PRIMARY KEY (session_id) 19 | )"]))) 20 | 21 | (use-fixtures 22 | :once 23 | (fn [f] (create-test-table db) (f))) 24 | 25 | (deftest a-test 26 | 27 | (let [conn (jdbc/get-datasource db) 28 | store (jdbc-store conn) 29 | ten-seconds-ago (- (quot (System/currentTimeMillis) 1000) 10) 30 | data {:foo "bar" 31 | :bar [1 2 3] 32 | :ring.middleware.session-timeout/idle-timeout ten-seconds-ago 33 | :ring.middleware.session-timeout/absolute-timeout ten-seconds-ago} 34 | k (.write-session store nil data)] 35 | 36 | (testing "Delete expired sessions" 37 | (is (= data (.read-session store k))) 38 | (remove-sessions conn {}) 39 | (is (= nil (.read-session store k)))))) 40 | -------------------------------------------------------------------------------- /src/jdbc_ring_session/cleaner.clj: -------------------------------------------------------------------------------- 1 | (ns jdbc-ring-session.cleaner 2 | (:require [next.jdbc.sql :as jdbc.sql] 3 | [next.jdbc :as jdbc]) 4 | (:import [java.util.concurrent Executors TimeUnit ScheduledExecutorService])) 5 | 6 | (defn remove-sessions 7 | "removes stale sessions from the session table" 8 | [datasource {:keys [table] 9 | :or {table :session_store}}] 10 | (let [t (quot (System/currentTimeMillis) 1000)] 11 | (jdbc/with-transaction [tx datasource] 12 | (jdbc.sql/delete! tx table ["idle_timeout < ? or absolute_timeout < ?" t t])))) 13 | 14 | (defprotocol Stoppable 15 | "Something that can be stopped" 16 | (stopped? [_] "Return true if stopped, false otherwise") 17 | (stop [_] "Stop (idempotent)")) 18 | 19 | (defn start-cleaner 20 | "starts a session cleaner 21 | conn - database connection 22 | config - configuration map that ring-jdbc-session was initialized with" 23 | ([conn] (start-cleaner conn {})) 24 | ([conn {:keys [interval] 25 | :or {interval 60} 26 | :as config}] 27 | (let [scheduler ^ScheduledExecutorService (Executors/newScheduledThreadPool 1)] 28 | (.scheduleWithFixedDelay scheduler 29 | (fn [] (remove-sessions conn config)) 30 | 0 31 | (long interval) 32 | TimeUnit/SECONDS) 33 | 34 | (reify Stoppable 35 | (stopped? [_] (.isShutdown scheduler)) 36 | (stop [_] (.shutdown scheduler)))))) 37 | 38 | (defn stop-cleaner 39 | "stops the instance of the session cleaner" 40 | [session-cleaner] 41 | {:pre [(satisfies? Stoppable session-cleaner)]} 42 | (.stop session-cleaner)) 43 | -------------------------------------------------------------------------------- /test/jdbc_ring_session/core_test.clj: -------------------------------------------------------------------------------- 1 | (ns jdbc-ring-session.core-test 2 | (:require [clojure.test :refer :all] 3 | [next.jdbc :as jdbc] 4 | [jdbc-ring-session.core :refer :all])) 5 | 6 | #_(def db 7 | {:classname "org.h2.Driver" 8 | :subprotocol "h2" 9 | :subname "./test/session.db" 10 | :naming {:keys clojure.string/lower-case 11 | :fields clojure.string/upper-case}}) 12 | 13 | (def db {:dbtype "h2" :dbname "example"}) 14 | 15 | (defn create-test-table [db] 16 | (jdbc/with-transaction [tx db] 17 | (jdbc/execute! tx ["drop table if exists session_store"]) 18 | (jdbc/execute! tx [" 19 | CREATE TABLE session_store ( 20 | session_id VARCHAR(36) NOT NULL, 21 | idle_timeout BIGINT DEFAULT NULL, 22 | absolute_timeout BIGINT DEFAULT NULL, 23 | value BINARY(10000), 24 | PRIMARY KEY (session_id) 25 | )"]))) 26 | 27 | (use-fixtures 28 | :once 29 | (fn [f] (create-test-table db) (f))) 30 | 31 | (deftest a-test 32 | (testing "test session write/read" 33 | (let [store (jdbc-store db) 34 | data {:foo "bar" :bar [1 2 3]} 35 | k (.write-session store nil data)] 36 | 37 | (is (= data (.read-session store k))) 38 | 39 | (testing "same session-id is reused after it has expired (deleted)" 40 | (.delete-session store k) 41 | (.write-session store k data) 42 | (is (= data (.read-session store k))))))) 43 | 44 | (deftest test-delete-session-transaction 45 | (let [store (-> db 46 | ;; disable auto-commit 47 | (assoc-in [:options :auto-commit] false) 48 | (jdbc-store)) 49 | data {:foo "bar" :bar [1 2 3]} 50 | k (.write-session store nil data)] 51 | 52 | (testing "Delete should be run in transaction because the connection can have disabled auto-commit" 53 | (is (= data (.read-session store k))) 54 | (is (nil? (.delete-session store k))) 55 | (is (nil? (.read-session store k)))))) -------------------------------------------------------------------------------- /src/jdbc_ring_session/core.clj: -------------------------------------------------------------------------------- 1 | (ns jdbc-ring-session.core 2 | (:require [taoensso.nippy :as nippy] 3 | [next.jdbc :as jdbc] 4 | [next.jdbc.sql :as jdbc.sql] 5 | [ring.middleware.session.store :refer :all]) 6 | (:import java.util.UUID 7 | org.apache.commons.codec.binary.Base64)) 8 | 9 | (defn serialize-mysql [value] 10 | (nippy/freeze value)) 11 | 12 | (defn serialize-postgres [value] 13 | (nippy/freeze value)) 14 | 15 | (defn serialize-oracle [value] 16 | (-> value nippy/freeze Base64/encodeBase64)) 17 | 18 | (defn serialize-h2 [value] 19 | (nippy/freeze value)) 20 | 21 | (defn serialize-sqlite [value] 22 | (nippy/freeze value)) 23 | 24 | (defn serialize-sqlserver [value] 25 | (nippy/freeze value)) 26 | 27 | (defn deserialize-mysql [value] 28 | (when value 29 | (nippy/thaw value))) 30 | 31 | (defn deserialize-postgres [value] 32 | (when value 33 | (nippy/thaw value))) 34 | 35 | (defn deserialize-oracle [blob] 36 | (when blob 37 | (-> blob (.getBytes 1 (.length blob)) Base64/decodeBase64 nippy/thaw))) 38 | 39 | (defn deserialize-h2 [value] 40 | (when value 41 | (nippy/thaw value))) 42 | 43 | (defn deserialize-sqlserver [value] 44 | (when value 45 | (nippy/thaw value))) 46 | 47 | (defn deserialize-sqlite [value] 48 | (when value 49 | (nippy/thaw value))) 50 | 51 | (def serializers 52 | {:mysql serialize-mysql 53 | :postgres serialize-postgres 54 | :oracle serialize-oracle 55 | :h2 serialize-h2 56 | :sqlserver serialize-sqlserver 57 | :sqlite serialize-sqlite}) 58 | 59 | (def deserializers 60 | {:mysql deserialize-mysql 61 | :postgres deserialize-postgres 62 | :oracle deserialize-oracle 63 | :h2 deserialize-h2 64 | :sqlserver deserialize-sqlserver 65 | :sqlite deserialize-sqlite}) 66 | 67 | (defn detect-db [db-spec] 68 | (let [db-name (with-open [conn (jdbc/get-connection db-spec)] 69 | (.. conn getMetaData getDatabaseProductName toLowerCase))] 70 | (cond 71 | (.contains db-name "oracle") :oracle 72 | (.contains db-name "postgres") :postgres 73 | (.contains db-name "mysql") :mysql 74 | (.contains db-name "mariadb") :mysql 75 | (.contains db-name "h2") :h2 76 | (.contains db-name "sql server") :sqlserver 77 | (.contains db-name "sqlite") :sqlite 78 | :else (throw (Exception. (str "unrecognized DB: " db-name)))))) 79 | 80 | (defn read-session-value [datasource table deserialize key] 81 | (jdbc/with-transaction [tx datasource] 82 | (-> (jdbc/execute-one! tx [(str "select value from " (name table) " where session_id = ?") key]) 83 | (vals) 84 | (first) 85 | deserialize))) 86 | 87 | (defn update-session-value! [tx table serialize key value] 88 | (let [data {:idle_timeout (:ring.middleware.session-timeout/idle-timeout value) 89 | :absolute_timeout (:ring.middleware.session-timeout/absolute-timeout value) 90 | :value (serialize value)} 91 | updated (jdbc.sql/update! tx (name table) data {:session_id key})] 92 | (when (zero? (:next.jdbc/update-count updated)) 93 | (jdbc.sql/insert! tx table (assoc data :session_id key))) 94 | key)) 95 | 96 | (defn insert-session-value! [tx table serialize value] 97 | (let [key (str (UUID/randomUUID)) 98 | data {:session_id key 99 | :idle_timeout (:ring.middleware.session-timeout/idle-timeout value) 100 | :absolute_timeout (:ring.middleware.session-timeout/absolute-timeout value) 101 | :value (serialize value)}] 102 | (jdbc.sql/insert! tx table data) 103 | key)) 104 | 105 | (deftype JdbcStore [datasource table serialize deserialize] 106 | SessionStore 107 | (read-session 108 | [_ key] 109 | (read-session-value datasource table deserialize key)) 110 | (write-session 111 | [_ key value] 112 | (next.jdbc/with-transaction [tx datasource] 113 | (if key 114 | (update-session-value! tx table serialize key value) 115 | (insert-session-value! tx table serialize value)))) 116 | (delete-session 117 | [_ key] 118 | (next.jdbc/with-transaction [tx datasource] 119 | (jdbc.sql/delete! tx table {:session_id key})) 120 | nil)) 121 | 122 | (ns-unmap *ns* '->JdbcStore) 123 | 124 | (defn jdbc-store 125 | "" 126 | [db-spec & [{:keys [table serialize deserialize] 127 | :or {table :session_store}}]] 128 | (let [db-type (detect-db db-spec) 129 | serialize (or serialize (serializers db-type)) 130 | deserialize (or deserialize (deserializers db-type))] 131 | (JdbcStore. db-spec table serialize deserialize))) 132 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # jdbc-ring-session 2 | 3 | A Clojure library for JDBC backed Ring sessions. 4 | 5 | [![Clojars Project](http://clojars.org/jdbc-ring-session/latest-version.svg)](http://clojars.org/jdbc-ring-session) 6 | 7 | ## Usage 8 | 9 | Use the `jdbc-ring-session.core/jdbc-store` function to create a new store. The function accepts 10 | a `next.jdbc` datasource definition: 11 | 12 | ```clojure 13 | (ns db.core 14 | (:require [jdbc-ring-session.core :refer [jdbc-store]])) 15 | 16 | (def db 17 | {:dbtype "postgresql" 18 | :dbname "session" 19 | :user "admin" 20 | :password "admin"}) 21 | 22 | (def store (jdbc-store db)) 23 | ``` 24 | 25 | The function also accepts an existing datasource, e.g. the connection pool of your application. 26 | 27 | ### database configuration 28 | 29 | The session will be stored as a byte array serialized using [nippy](https://github.com/ptaoussanis/nippy). The table formats are shown below. 30 | 31 | 32 | PostgeSQL: 33 | 34 | ```sql 35 | CREATE TABLE session_store 36 | ( 37 | session_id VARCHAR(36) NOT NULL PRIMARY KEY, 38 | idle_timeout BIGINT, 39 | absolute_timeout BIGINT, 40 | value BYTEA 41 | ) 42 | ``` 43 | 44 | Oracle: 45 | 46 | ```sql 47 | CREATE TABLE SESSION_STORE 48 | ( 49 | session_id VARCHAR2(100 BYTE) NOT NULL PRIMARY KEY, 50 | absolute_timeout NUMBER, 51 | idle_timeout NUMBER, 52 | value BLOB 53 | ) 54 | ``` 55 | 56 | MySQL: 57 | 58 | ```sql 59 | CREATE TABLE `session_store` ( 60 | `session_id` VARCHAR(36) NOT NULL, 61 | `idle_timeout` DOUBLE DEFAULT NULL, 62 | `absolute_timeout` DOUBLE DEFAULT NULL, 63 | `value` BLOB, 64 | PRIMARY KEY (`session_id`) 65 | ) 66 | ``` 67 | 68 | H2: 69 | 70 | ```h2 71 | CREATE TABLE session_store ( 72 | session_id VARCHAR(36) NOT NULL, 73 | idle_timeout BIGINT DEFAULT NULL, 74 | absolute_timeout BIGINT DEFAULT NULL, 75 | value BINARY(10000), 76 | PRIMARY KEY (session_id) 77 | ) 78 | ``` 79 | 80 | SQL Server: 81 | 82 | ```sql 83 | CREATE TABLE session_store ( 84 | session_id VARCHAR(36) NOT NULL, 85 | idle_timeout BIGINT DEFAULT NULL, 86 | absolute_timeout BIGINT DEFAULT NULL, 87 | value VARBINARY(max), 88 | PRIMARY KEY (session_id) 89 | ) 90 | ``` 91 | 92 | SQLite: 93 | 94 | ```sql 95 | CREATE TABLE session_store 96 | ( 97 | session_id VARCHAR NOT NULL PRIMARY KEY, 98 | idle_timeout INTEGER, 99 | absolute_timeout INTEGER, 100 | value BLOB 101 | ) 102 | ``` 103 | 104 | ### session store initialization 105 | 106 | The `jdbc-store` function accepts an optional map with the keys called `:table`, `:serializer` and `:deserializer`. The `:table` defaults to `:session_store`, while the `:serializer` and `:deserializer` keys are used to specify how the session data should be serialized and deserialized for the specific database. The library will attempt to figure out the appropriate serializer/deserializer based on the connection type. MySQL, PostgeSQL and Oracle BLOB formats are supported out of the box. 107 | 108 | ```clojure 109 | (jdbc-store db {:table :sessions}) 110 | ``` 111 | 112 | ### custom serialization 113 | 114 | The serializer function accepts the session map and returns the serialized value that will be inserted 115 | in the table, eg: 116 | 117 | ```clojure 118 | (defn serialize-postgres [value] 119 | (nippy/freeze value)) 120 | ``` 121 | 122 | The deserializer function receives the session value in the database and returns the deserialized session, eg: 123 | 124 | ```clojure 125 | (defn deserialize-postgres [value] 126 | (when value 127 | (nippy/thaw value))) 128 | ``` 129 | 130 | 131 | ### stale session cleanup 132 | 133 | A cleaner thread is provided in the `ring-jdbc-session.cleaner` for removing expired sessions from the database. The `idle_timeout` and `absolute_timeout` keys are expected to be populated by the [ring-session-timeout](https://github.com/ring-clojure/ring-session-timeout) library. These keys are used by the cleaner to remove stale sessions. The cleaner can be started and stopped as follows: 134 | 135 | ```clojure 136 | (ns db.core 137 | (:require [jdbc-ring-session.cleaner :refer [start-cleaner stop-cleaner]])) 138 | 139 | (start-cleaner db) 140 | 141 | (stop-cleaner session-cleaner) 142 | ``` 143 | 144 | The `start-cleaner` function accepts an optional map with the `:interval` key that defaults to 60. This is the number of seconds to sleep between runs. 145 | 146 | ```clojure 147 | (start-cleaner {:interval 120}) 148 | ``` 149 | 150 | ## Troubleshooting 151 | 152 | ### Running a database on a non standard port 153 | 154 | Note that when running a database on a non-standard port, the jdbc datasource definition must be formatted as follows ([from jdbc source](https://github.com/clojure/java.jdbc/blob/master/src/main/clojure/clojure/java/jdbc.clj#L195)): 155 | 156 | ``` 157 | DriverManager (alternative): 158 | :dbtype (required) a String, the type of the database (the jdbc subprotocol) 159 | :dbname (required) a String, the name of the database 160 | :host (optional) a String, the host name/IP of the database 161 | (defaults to 127.0.0.1) 162 | :port (optional) a Long, the port of the database 163 | (defaults to 3306 for mysql, 1433 for mssql/jtds, else nil) 164 | (others) (optional) passed to the driver as properties. 165 | ``` 166 | 167 | Adding a `:port` key to the standard DriverManager map will result in the database connection failing with a `org.postgresql.util.PSQLException: FATAL: password authentication failed for user`, and it can be difficult to trace it back to the DriverManager format. 168 | 169 | Using a string `subprotocol://user:password@host:post/subname`, instead of a DriverManager map will also work. 170 | 171 | ## License 172 | 173 | Copyright © 2015 Yogthos 174 | 175 | Distributed under the Eclipse Public License either version 1.0 or (at 176 | your option) any later version. 177 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | THE ACCOMPANYING PROGRAM IS PROVIDED UNDER THE TERMS OF THIS ECLIPSE PUBLIC 2 | LICENSE ("AGREEMENT"). ANY USE, REPRODUCTION OR DISTRIBUTION OF THE PROGRAM 3 | CONSTITUTES RECIPIENT'S ACCEPTANCE OF THIS AGREEMENT. 4 | 5 | 1. DEFINITIONS 6 | 7 | "Contribution" means: 8 | 9 | a) in the case of the initial Contributor, the initial code and 10 | documentation distributed under this Agreement, and 11 | 12 | b) in the case of each subsequent Contributor: 13 | 14 | i) changes to the Program, and 15 | 16 | ii) additions to the Program; 17 | 18 | where such changes and/or additions to the Program originate from and are 19 | distributed by that particular Contributor. A Contribution 'originates' from 20 | a Contributor if it was added to the Program by such Contributor itself or 21 | anyone acting on such Contributor's behalf. Contributions do not include 22 | additions to the Program which: (i) are separate modules of software 23 | distributed in conjunction with the Program under their own license 24 | agreement, and (ii) are not derivative works of the Program. 25 | 26 | "Contributor" means any person or entity that distributes the Program. 27 | 28 | "Licensed Patents" mean patent claims licensable by a Contributor which are 29 | necessarily infringed by the use or sale of its Contribution alone or when 30 | combined with the Program. 31 | 32 | "Program" means the Contributions distributed in accordance with this 33 | Agreement. 34 | 35 | "Recipient" means anyone who receives the Program under this Agreement, 36 | including all Contributors. 37 | 38 | 2. GRANT OF RIGHTS 39 | 40 | a) Subject to the terms of this Agreement, each Contributor hereby grants 41 | Recipient a non-exclusive, worldwide, royalty-free copyright license to 42 | reproduce, prepare derivative works of, publicly display, publicly perform, 43 | distribute and sublicense the Contribution of such Contributor, if any, and 44 | such derivative works, in source code and object code form. 45 | 46 | b) Subject to the terms of this Agreement, each Contributor hereby grants 47 | Recipient a non-exclusive, worldwide, royalty-free patent license under 48 | Licensed Patents to make, use, sell, offer to sell, import and otherwise 49 | transfer the Contribution of such Contributor, if any, in source code and 50 | object code form. This patent license shall apply to the combination of the 51 | Contribution and the Program if, at the time the Contribution is added by the 52 | Contributor, such addition of the Contribution causes such combination to be 53 | covered by the Licensed Patents. The patent license shall not apply to any 54 | other combinations which include the Contribution. No hardware per se is 55 | licensed hereunder. 56 | 57 | c) Recipient understands that although each Contributor grants the licenses 58 | to its Contributions set forth herein, no assurances are provided by any 59 | Contributor that the Program does not infringe the patent or other 60 | intellectual property rights of any other entity. Each Contributor disclaims 61 | any liability to Recipient for claims brought by any other entity based on 62 | infringement of intellectual property rights or otherwise. As a condition to 63 | exercising the rights and licenses granted hereunder, each Recipient hereby 64 | assumes sole responsibility to secure any other intellectual property rights 65 | needed, if any. For example, if a third party patent license is required to 66 | allow Recipient to distribute the Program, it is Recipient's responsibility 67 | to acquire that license before distributing the Program. 68 | 69 | d) Each Contributor represents that to its knowledge it has sufficient 70 | copyright rights in its Contribution, if any, to grant the copyright license 71 | set forth in this Agreement. 72 | 73 | 3. REQUIREMENTS 74 | 75 | A Contributor may choose to distribute the Program in object code form under 76 | its own license agreement, provided that: 77 | 78 | a) it complies with the terms and conditions of this Agreement; and 79 | 80 | b) its license agreement: 81 | 82 | i) effectively disclaims on behalf of all Contributors all warranties and 83 | conditions, express and implied, including warranties or conditions of title 84 | and non-infringement, and implied warranties or conditions of merchantability 85 | and fitness for a particular purpose; 86 | 87 | ii) effectively excludes on behalf of all Contributors all liability for 88 | damages, including direct, indirect, special, incidental and consequential 89 | damages, such as lost profits; 90 | 91 | iii) states that any provisions which differ from this Agreement are offered 92 | by that Contributor alone and not by any other party; and 93 | 94 | iv) states that source code for the Program is available from such 95 | Contributor, and informs licensees how to obtain it in a reasonable manner on 96 | or through a medium customarily used for software exchange. 97 | 98 | When the Program is made available in source code form: 99 | 100 | a) it must be made available under this Agreement; and 101 | 102 | b) a copy of this Agreement must be included with each copy of the Program. 103 | 104 | Contributors may not remove or alter any copyright notices contained within 105 | the Program. 106 | 107 | Each Contributor must identify itself as the originator of its Contribution, 108 | if any, in a manner that reasonably allows subsequent Recipients to identify 109 | the originator of the Contribution. 110 | 111 | 4. COMMERCIAL DISTRIBUTION 112 | 113 | Commercial distributors of software may accept certain responsibilities with 114 | respect to end users, business partners and the like. While this license is 115 | intended to facilitate the commercial use of the Program, the Contributor who 116 | includes the Program in a commercial product offering should do so in a 117 | manner which does not create potential liability for other Contributors. 118 | Therefore, if a Contributor includes the Program in a commercial product 119 | offering, such Contributor ("Commercial Contributor") hereby agrees to defend 120 | and indemnify every other Contributor ("Indemnified Contributor") against any 121 | losses, damages and costs (collectively "Losses") arising from claims, 122 | lawsuits and other legal actions brought by a third party against the 123 | Indemnified Contributor to the extent caused by the acts or omissions of such 124 | Commercial Contributor in connection with its distribution of the Program in 125 | a commercial product offering. The obligations in this section do not apply 126 | to any claims or Losses relating to any actual or alleged intellectual 127 | property infringement. In order to qualify, an Indemnified Contributor must: 128 | a) promptly notify the Commercial Contributor in writing of such claim, and 129 | b) allow the Commercial Contributor tocontrol, and cooperate with the 130 | Commercial Contributor in, the defense and any related settlement 131 | negotiations. The Indemnified Contributor may participate in any such claim 132 | at its own expense. 133 | 134 | For example, a Contributor might include the Program in a commercial product 135 | offering, Product X. That Contributor is then a Commercial Contributor. If 136 | that Commercial Contributor then makes performance claims, or offers 137 | warranties related to Product X, those performance claims and warranties are 138 | such Commercial Contributor's responsibility alone. Under this section, the 139 | Commercial Contributor would have to defend claims against the other 140 | Contributors related to those performance claims and warranties, and if a 141 | court requires any other Contributor to pay any damages as a result, the 142 | Commercial Contributor must pay those damages. 143 | 144 | 5. NO WARRANTY 145 | 146 | EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, THE PROGRAM IS PROVIDED ON 147 | AN "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER 148 | EXPRESS OR IMPLIED INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OR 149 | CONDITIONS OF TITLE, NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A 150 | PARTICULAR PURPOSE. Each Recipient is solely responsible for determining the 151 | appropriateness of using and distributing the Program and assumes all risks 152 | associated with its exercise of rights under this Agreement , including but 153 | not limited to the risks and costs of program errors, compliance with 154 | applicable laws, damage to or loss of data, programs or equipment, and 155 | unavailability or interruption of operations. 156 | 157 | 6. DISCLAIMER OF LIABILITY 158 | 159 | EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, NEITHER RECIPIENT NOR ANY 160 | CONTRIBUTORS SHALL HAVE ANY LIABILITY FOR ANY DIRECT, INDIRECT, INCIDENTAL, 161 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION 162 | LOST PROFITS), HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 163 | CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 164 | ARISING IN ANY WAY OUT OF THE USE OR DISTRIBUTION OF THE PROGRAM OR THE 165 | EXERCISE OF ANY RIGHTS GRANTED HEREUNDER, EVEN IF ADVISED OF THE POSSIBILITY 166 | OF SUCH DAMAGES. 167 | 168 | 7. GENERAL 169 | 170 | If any provision of this Agreement is invalid or unenforceable under 171 | applicable law, it shall not affect the validity or enforceability of the 172 | remainder of the terms of this Agreement, and without further action by the 173 | parties hereto, such provision shall be reformed to the minimum extent 174 | necessary to make such provision valid and enforceable. 175 | 176 | If Recipient institutes patent litigation against any entity (including a 177 | cross-claim or counterclaim in a lawsuit) alleging that the Program itself 178 | (excluding combinations of the Program with other software or hardware) 179 | infringes such Recipient's patent(s), then such Recipient's rights granted 180 | under Section 2(b) shall terminate as of the date such litigation is filed. 181 | 182 | All Recipient's rights under this Agreement shall terminate if it fails to 183 | comply with any of the material terms or conditions of this Agreement and 184 | does not cure such failure in a reasonable period of time after becoming 185 | aware of such noncompliance. If all Recipient's rights under this Agreement 186 | terminate, Recipient agrees to cease use and distribution of the Program as 187 | soon as reasonably practicable. However, Recipient's obligations under this 188 | Agreement and any licenses granted by Recipient relating to the Program shall 189 | continue and survive. 190 | 191 | Everyone is permitted to copy and distribute copies of this Agreement, but in 192 | order to avoid inconsistency the Agreement is copyrighted and may only be 193 | modified in the following manner. The Agreement Steward reserves the right to 194 | publish new versions (including revisions) of this Agreement from time to 195 | time. No one other than the Agreement Steward has the right to modify this 196 | Agreement. The Eclipse Foundation is the initial Agreement Steward. The 197 | Eclipse Foundation may assign the responsibility to serve as the Agreement 198 | Steward to a suitable separate entity. Each new version of the Agreement will 199 | be given a distinguishing version number. The Program (including 200 | Contributions) may always be distributed subject to the version of the 201 | Agreement under which it was received. In addition, after a new version of 202 | the Agreement is published, Contributor may elect to distribute the Program 203 | (including its Contributions) under the new version. Except as expressly 204 | stated in Sections 2(a) and 2(b) above, Recipient receives no rights or 205 | licenses to the intellectual property of any Contributor under this 206 | Agreement, whether expressly, by implication, estoppel or otherwise. All 207 | rights in the Program not expressly granted under this Agreement are 208 | reserved. 209 | 210 | This Agreement is governed by the laws of the State of New York and the 211 | intellectual property laws of the United States of America. No party to this 212 | Agreement will bring a legal action under this Agreement more than one year 213 | after the cause of action arose. Each party waives its rights to a jury trial 214 | in any resulting litigation. 215 | --------------------------------------------------------------------------------