Metacat

/**

 *  '$RCSfile$'

 *  Copyright: 2010 Regents of the University of California and the

 *              National Center for Ecological Analysis and Synthesis

 *  Purpose: To test the Access Controls in metacat by JUnit

 *

 *   '$Author: berkley $'

 *     '$Date: 2010-05-03 14:26:08 -0700 (Fri, 14 Aug 2009) $'

 * '$Revision: 5027 $'

 *

 * This program is free software; you can redistribute it and/or modify

 * it under the terms of the GNU General Public License as published by

 * the Free Software Foundation; either version 2 of the License, or

 * (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful,

 * but WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 * GNU General Public License for more details.

 *

 * You should have received a copy of the GNU General Public License

 * along with this program; if not, write to the Free Software

 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA

 */

package edu.ucsb.nceas.metacat.restservice;

import java.io.ByteArrayInputStream;

import java.io.ByteArrayOutputStream;

import java.io.File;

import java.io.FileInputStream;

import java.io.IOException;

import java.io.InputStream;

import java.io.OutputStream;

import java.util.Date;

import junit.framework.Test;

import junit.framework.TestSuite;

import org.apache.commons.io.IOUtils;

import org.dataone.service.exceptions.BaseException;

import org.dataone.service.exceptions.InvalidSystemMetadata;

import org.dataone.service.exceptions.ServiceFailure;

import org.dataone.service.types.v1.SystemMetadata;

import org.jibx.runtime.BindingDirectory;

import org.jibx.runtime.IBindingFactory;

import org.jibx.runtime.IMarshallingContext;

import edu.ucsb.nceas.MCTestCase;

/**

 * @author berkley

 * class to test ResourceHandler

 */

public class ResourceHandlerTest extends MCTestCase

{

    public ResourceHandlerTest(String name)

    {

        super(name);

    }

    /**

     * Create a suite of tests to be run together

     */

    public static Test suite() 

    {

        TestSuite suite = new TestSuite();

        //suite.addTest(new ResourceHandlerTest("testFindBoundary"));        

        //suite.addTest(new ResourceHandlerTest("testProcessMMP"));

        suite.addTest(new ResourceHandlerTest("testReplicate"));

        return suite;

    }

    public void testReplicate()

    {

    }

    public void testFindBoundary()

    {

        try

        {

            File f = new File("test/testMimeInput.txt");

            FileInputStream fis = new FileInputStream(f);

            String[] s = ResourceHandler.findBoundaryString(fis);

            assertEquals(s[0], "--1288304583346");

            //System.out.println("r: " + s[1].trim());

            assertTrue(s[1].trim().startsWith(s[0]));

        }

        catch(Exception e)

        {

            fail("unexpected error in testFindBoundary: " + e.getMessage());

        }

    }

    public void testProcessMMP()

    {

        try

        {

            runTestProccessMMP("test/testMimeInput.txt", "test/testMimeInput-object.txt");

            runTestProccessMMP("test/testMimeInput2.txt", "test/testMimeInput2-object.txt");

            runTestProccessMMP("test/testMimeInput3.txt", "test/testMimeInput3-object.txt");

        }

        catch(Exception e)

        {

            e.printStackTrace();

            fail("Unexpected error in testProcessMMP: " + e.getMessage());

        }

    }

    /**

     * create a mime multipart message from object and sysmeta and write it to out

     */

    private void createMimeMultipart(OutputStream out, InputStream object,

            SystemMetadata sysmeta) throws IOException, BaseException

    {

        if (sysmeta == null) {

            throw new InvalidSystemMetadata("1000",

                    "System metadata was null.  Can't create multipart form.");

        }

        Date d = new Date();

        String boundary = d.getTime() + "";

        String mime = "MIME-Version:1.0\n";

        mime += "Content-type:multipart/mixed; boundary=\"" + boundary + "\"\n";

        boundary = "--" + boundary + "\n";

        mime += boundary;

        mime += "Content-Disposition: attachment; filename=systemmetadata\n\n";

        out.write(mime.getBytes());

        out.flush();

        //write the sys meta

        try

        {

            ByteArrayInputStream bais = serializeSystemMetadata(sysmeta);

            IOUtils.copy(bais, out);

        }

        catch(Exception e)

        {

            throw new ServiceFailure("1000",

                    "Could not serialize the system metadata to multipart: "

                            + e.getMessage());

        }

        out.write("\n".getBytes()); 

        if (object != null) 

        {    

            out.write(boundary.getBytes());

            out.write("Content-Disposition: attachment; filename=object\n\n".getBytes());

            try {

                mime += IOUtils.copy(object, out);

            } 

            catch (IOException ioe) 

            {

                throw new ServiceFailure("1000",

                        "Error serializing object to multipart: "

                                + ioe.getMessage());

            }

            out.write("\n".getBytes());

        }

        out.write((boundary + "--").getBytes());        

    }

    protected ByteArrayInputStream serializeSystemMetadata(SystemMetadata sysmeta)

        throws Exception 

    {

        ByteArrayOutputStream sysmetaOut = new ByteArrayOutputStream();

        serializeServiceType(SystemMetadata.class, sysmeta, sysmetaOut);

        ByteArrayInputStream sysmetaStream = new ByteArrayInputStream(

                sysmetaOut.toByteArray());

        return sysmetaStream;

    }

    protected void serializeServiceType(Class type, Object object,

            OutputStream out) throws Exception {

        IBindingFactory bfact = BindingDirectory.getFactory(type);

        IMarshallingContext mctx = bfact.createMarshallingContext();

        mctx.marshalDocument(object, "UTF-8", null, out);

    }

    private void runTestProccessMMP(String filename, String answerFilename)

        throws Exception

    {

        /*PropertyService propServ = PropertyService.getInstance("/Users/berkley/tools/tomcat/webapps/knb/WEB-INF");

        System.out.println("*****************************************");

        System.out.println("running process test on file " + filename);

        File f = new File(filename);

        File fObject = new File(answerFilename);

        FileInputStream fobjectis = new FileInputStream(fObject);

        FileInputStream fis = new FileInputStream(f);

        ResourceHandler rh = new ResourceHandler(null, null, null);

        Hashtable<String, File> h = rh.processMMP(fis);

        FileInputStream smFis = new FileInputStream(h.get("sysmeta"));

        FileInputStream objFis = new FileInputStream(h.get("object"));

        String sm = IOUtils.toString(smFis);

        String obj = IOUtils.toString(objFis);

        //System.out.println("sm: " + sm);

        //System.out.println("obj: " + obj);

        String fObjectStr = IOUtils.toString(fobjectis);

        assertTrue(fObjectStr.trim().equals(obj.trim()));

        assertTrue(sm.indexOf("<d1:systemMetadata") != -1);

        assertTrue(sm.indexOf("</d1:systemMetadata>") != -1);*/

    }

}

/**

 *  '$RCSfile$'

 *  Copyright: 2000 Regents of the University of California and the

 *              National Center for Ecological Analysis and Synthesis

 *

 *   '$Author: Serhan AKIN $'

 *     '$Date: 2009-06-13 13:28:21 +0300  $'

 *

 * This program is free software; you can redistribute it and/or modify

 * it under the terms of the GNU General Public License as published by

 * the Free Software Foundation; either version 2 of the License, or

 * (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful,

 * but WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 * GNU General Public License for more details.

 *

 * You should have received a copy of the GNU General Public License

 * along with this program; if not, write to the Free Software

 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA

 */

package edu.ucsb.nceas.metacat.restservice;

import java.io.IOException;

import javax.servlet.ServletConfig;

import javax.servlet.ServletException;

import javax.servlet.http.HttpServlet;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import org.apache.log4j.Logger;

/**

 * Metacat implemantation of Earthgrid (Ecogrid) REST API as a servlet. In each request

 * REST Servlet initialize a ResourceHandler object and then ResourceHandler object 

 * handles with request and writes approriate response. 

 *  

 *  @deprecated Only keeping this for reference in case we want to implement

 *  older Metacat API with REST

 */

public class RestServlet extends HttpServlet {

    protected Logger logMetacat;

    protected ResourceHandler handler;

    /**

     * Subclasses should override this method to provide the appropriate handler subclass

     * @param request

     * @param response

     * @return

     * @throws ServletException

     * @throws IOException

     */

    protected ResourceHandler createHandler(HttpServletRequest request, HttpServletResponse response) 

		throws ServletException, IOException {

	    ResourceHandler handler = new ResourceHandler(getServletContext(), request, response);

	    return handler;

	}

    /**

     * Initalize servlet by setting logger

     */

    @Override

    public void init(ServletConfig config) throws ServletException {

        logMetacat = Logger.getLogger(this.getClass());

        super.init(config);

    }

    /** Handle "GET" method requests from HTTP clients */

    @Override

    protected void doGet(HttpServletRequest request,

            HttpServletResponse response) throws ServletException, IOException {

        System.out.println("HTTP Verb: GET");

        handler = createHandler(request, response);

        handler.handle(ResourceHandler.GET);

    }

    /** Handle "POST" method requests from HTTP clients */

    @Override

    protected void doPost(HttpServletRequest request,

            HttpServletResponse response) throws ServletException, IOException {

        System.out.println("HTTP Verb: POST");

        handler = createHandler(request, response);

        handler.handle(ResourceHandler.POST);

    }

    /** Handle "DELETE" method requests from HTTP clients */

    @Override

    protected void doDelete(HttpServletRequest request,

            HttpServletResponse response) throws ServletException, IOException {

        System.out.println("HTTP Verb: DELETE");

        handler = createHandler(request, response);

        handler.handle(ResourceHandler.DELETE);

    }

    /** Handle "PUT" method requests from HTTP clients */

    @Override

    protected void doPut(HttpServletRequest request,

            HttpServletResponse response) throws ServletException, IOException {

        System.out.println("HTTP Verb: PUT");

        handler = createHandler(request, response);

        handler.handle(ResourceHandler.PUT);

    }

    /** Handle "PUT" method requests from HTTP clients */

    @Override

    protected void doHead(HttpServletRequest request,

            HttpServletResponse response) throws ServletException, IOException {

        System.out.println("HTTP Verb: HEAD");

        handler = createHandler(request, response);

        handler.handle(ResourceHandler.HEAD);

    }

}

/**

 *  '$RCSfile$'

 *  Copyright: 2011 Regents of the University of California and the

 *              National Center for Ecological Analysis and Synthesis

 *

 *   '$Author: Serhan AKIN $'

 *     '$Date: 2009-06-13 15:28:13 +0300  $'

 *

 * This program is free software; you can redistribute it and/or modify

 * it under the terms of the GNU General Public License as published by

 * the Free Software Foundation; either version 2 of the License, or

 * (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful,

 * but WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 * GNU General Public License for more details.

 *

 * You should have received a copy of the GNU General Public License

 * along with this program; if not, write to the Free Software

 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA

 */

package edu.ucsb.nceas.metacat.restservice;

import java.io.ByteArrayInputStream;

import java.io.File;

import java.io.FileInputStream;

import java.io.FileOutputStream;

import java.io.IOException;

import java.io.InputStream;

import java.io.OutputStream;

import java.io.PrintWriter;

import java.io.StringReader;

import java.net.URL;

import java.text.DateFormat;

import java.text.ParseException;

import java.text.SimpleDateFormat;

import java.util.Date;

import java.util.Enumeration;

import java.util.Hashtable;

import java.util.Iterator;

import java.util.List;

import java.util.Map;

import java.util.TimeZone;

import java.util.Timer;

import javax.servlet.ServletContext;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import org.apache.commons.io.IOUtils;

import org.apache.log4j.Logger;

import org.dataone.client.MNode;

import org.dataone.client.ObjectFormatCache;

import org.dataone.client.auth.CertificateManager;

import org.dataone.mimemultipart.MultipartRequest;

import org.dataone.mimemultipart.MultipartRequestResolver;

import org.dataone.service.exceptions.BaseException;

import org.dataone.service.exceptions.IdentifierNotUnique;

import org.dataone.service.exceptions.InsufficientResources;

import org.dataone.service.exceptions.InvalidRequest;

import org.dataone.service.exceptions.InvalidSystemMetadata;

import org.dataone.service.exceptions.InvalidToken;

import org.dataone.service.exceptions.NotAuthorized;

import org.dataone.service.exceptions.NotFound;

import org.dataone.service.exceptions.NotImplemented;

import org.dataone.service.exceptions.ServiceFailure;

import org.dataone.service.exceptions.UnsupportedType;

import org.dataone.service.types.v1.AccessPolicy;

import org.dataone.service.types.v1.Checksum;

import org.dataone.service.types.v1.DescribeResponse;

import org.dataone.service.types.v1.Event;

import org.dataone.service.types.v1.Identifier;

import org.dataone.service.types.v1.Log;

import org.dataone.service.types.v1.Node;

import org.dataone.service.types.v1.NodeList;

import org.dataone.service.types.v1.NodeReference;

import org.dataone.service.types.v1.NodeType;

import org.dataone.service.types.v1.ObjectFormat;

import org.dataone.service.types.v1.ObjectFormatIdentifier;

import org.dataone.service.types.v1.ObjectFormatList;

import org.dataone.service.types.v1.ObjectList;

import org.dataone.service.types.v1.Service;

import org.dataone.service.types.v1.Services;

import org.dataone.service.types.v1.Session;

import org.dataone.service.types.v1.SystemMetadata;

import org.dataone.service.types.v1.util.ChecksumUtil;

import org.dataone.service.types.v1.util.NodelistUtil;

import org.dataone.service.util.TypeMarshaller;

import org.jibx.runtime.BindingDirectory;

import org.jibx.runtime.IBindingFactory;

import org.jibx.runtime.IUnmarshallingContext;

import org.jibx.runtime.JiBXException;

import edu.ucsb.nceas.metacat.DBUtil;

import edu.ucsb.nceas.metacat.IdentifierManager;

import edu.ucsb.nceas.metacat.McdbDocNotFoundException;

import edu.ucsb.nceas.metacat.MetacatHandler;

import edu.ucsb.nceas.metacat.dataone.CNodeService;

import edu.ucsb.nceas.metacat.dataone.MNodeService;

import edu.ucsb.nceas.metacat.properties.PropertyService;

import edu.ucsb.nceas.metacat.service.SessionService;

import edu.ucsb.nceas.metacat.util.RequestUtil;

import edu.ucsb.nceas.metacat.util.SessionData;

import edu.ucsb.nceas.metacat.util.SystemUtil;

import edu.ucsb.nceas.utilities.PropertyNotFoundException;

/**

 * 

 * Implements Earthgrid REST API to Metacat <br/><br/> 

 * 

 * <ul>

 * <li>

 * <h3> EarthGrid Query Service</h3>

 * <ul><li>

 * <h3>Get & Authenticated Get:</h3> 

 * is equal to Metacat's read action and returns a data file having

 * the specified <doc-id> in the resource path. For authenticated Get service, a session id must be provided 

 * in the query string. <br/><br/>

 * 

 * <b>REST URL:</b> <code>GET, [context-root]/object/[doc-id]?sessionid=[sessionid] </code><br/>

 * <b>Returns:</b> data file <br/><br/>

 * </li>

 * 

 * <li>

 * <h3>Query & Authenticated Query:</h3> 

 * Metacat's equivalent is squery action but this function 

 * receives a Earthgrid query document and returns Earthgrid resultset document by transforming those documents

 * to Metacat's equivalents by the means of Metacat Implementation in Earthgrid library. For authenticated Query service 

 * a session id must be provided in the query string. See Earthgrid (a.k.a. Ecogrid) project for XSD files of 

 * query and resultset documents<br/><br/>

 * 

 * <b>REST URL:</b> <code>POST, [context-root]/object?sessionid=[sessionid]</code>    <br/>

 * <b>POST Data:</b> Earthgrid query document , Content-type: <code>text/xml</code><br/>

 * <b>Returns:</b> Earthgrid resultset document<br/><br/>

 * 

 * </li>

 * </ul>

 * 

 * </li>

 * 

 * <li>

 * <h3> EarthGrid Authentication Service</h3>

 * <ul><li>

 * <h3>Login: </h3> 

 * Receives username and password parameters in POST data and 

 * returns SessionId (in XML format) or failure message and uses MetacatHandler's handleLoginAction function<br/><br/>

 *  

 * <b>REST URL:</b> <code>POST, [context-root]/session?op=login</code> <br/>

 * <b>POST Data:</b> username=[username]&password=[password], Content-type: <code>application/x-www-form-urlencoded</code>

 * <b>Returns:</b> sessionId in XML format<br/><br/>

 * </li>

 * 

 * <li>

 * <h3>Logout: </h3> 

 * Receives session Id parameters in querystring and returns xml message, calls 

 * MetacatHandler's handleLogoutAction function<br/><br/>

 *  

 * <b>REST URL:</b> <code>GET, [context-root]/session?op=logout&sessionid=[sessionid]</code>   <br/>

 * <b>Returns:</b> message in XML format<br/><br/>

 * </li>

 * </ul>

 * 

 * <li>

 * <h3>EarthGrid Put Service</h3>

 * 

 * <ul>

 * <li><h3>Update/Insert: </h3>     

 * <br/>

 * <b>REST URL:</b> <code>PUT, [context-root]/object/[doc-id]?op={update|insert}&sessionid=[sessionid]</code>   <br/>

 * <b>POST Data:</b> document object, Content-type: <code>text/xml</code><br/>

 * <b>Returns:</b> message in XML format<br/><br/>

 * </li>

 * 

 * <li><h3>Delete: </h3>        

 * <br/>

 * <b>REST URL:</b> <code>DELETE, [context-root]/object/[doc-id]?sessionid=[sessionid]</code>   <br/>

 * <b>Returns:</b> message in XML format<br/><br/>

 * </li>

 * </ul>

 * </li>

 * 

 * <li>

 * <h3>EarthGrid Identifier Service</h3><br/>

 * 

 * <ul>

 * <li><h3>isRegistered: </h3>      <br/>

 * <b>REST URL:</b> <code>GET, [context-root]/identifier/[doc-id]?op=isregistered</code>   <br/>

 * <b>Returns:</b> message in XML format<br/><br/>

 * </li>

 * <li><h3>getAllDocIds:</h3>       <br/>       

 * <b>REST URL:</b> <code>GET, [context-root]/identifier?op=getalldocids</code>   <br/>

 * <b>Returns:</b> document id list in XML format<br/><br/>

 * </li>

 * 

 * <li><h3>addLSID Function:</h3> 

 * Metacat does not support this function       <br/>

 * <b>REST URL:</b> <code>PUT, [context-root]/identifier/[doc-id]</code>   <br/>

 * <b>Returns:</b> error message in XML format<br/><br/>

 * </li>

 * 

 * <li><h3>getNextRevision:</h3>        <br/>

 * <b>REST URL:</b> <code>GET, [context-root]/identifier/[doc-id]?op=getnextrevision</code>   <br/>

 * <b>Returns:</b> message in XML format<br/><br/>

 * </li>

 * 

 * <li><h3>getNextObject:</h3>      <br/>

 * <b>REST URL:</b> <code>GET, [context-root]/identifier?op=getnextobject&scope=[scope]</code>   <br/>

 * <b>Returns:</b> message in XML format<br/><br/>

 * </li>

 * 

 * </li>

 * </ul>

 * 

 * @deprecated Only keeping this for reference in case we want to continue developing

 * REST interface for old Metacat API

 */

public class ResourceHandler {

    /**HTTP Verb GET*/

    public static final byte GET = 1;

    /**HTTP Verb POST*/

    public static final byte POST = 2;

    /**HTTP Verb PUT*/

    public static final byte PUT = 3;

    /**HTTP Verb DELETE*/

    public static final byte DELETE = 4;

    /**HTTP Verb HEAD*/

    public static final byte HEAD = 5;

    /*

     * API Resources

     */

    protected static final String RESOURCE_OBJECTS = "object";

    protected static final String RESOURCE_FORMATS = "formats";

    protected static final String RESOURCE_META = "meta";

    protected static final String RESOURCE_SESSION = "session";

    protected static final String RESOURCE_IDENTIFIER = "identifier";

    protected static final String RESOURCE_LOG = "log";

    protected static final String RESOURCE_CHECKSUM = "checksum";

    protected static final String RESOURCE_MONITOR = "monitor";

    protected static final String RESOURCE_BASE_URL = "d1";

    protected static final String RESOURCE_REPLICATE = "replicate";

    protected static final String RESOURCE_IS_AUTHORIZED = "isAuthorized";

    protected static final String RESOURCE_ACCESS_RULES = "accessRules";

    /*

     * API Functions used as URL parameters

     */

    protected static final String FUNCTION_KEYWORD = "op";

    protected static final String FUNCTION_NAME_LOGIN = "login";

    protected static final String FUNCTION_NAME_LOGOUT = "logout";

    protected static final String FUNCTION_NAME_SET_ACCESS = "setaccess";

    protected static final String FUNCTION_NAME_ISREGISTERED = "isregistered";

    protected static final String FUNCTION_NAME_GETALLDOCS = "getalldocids";

    protected static final String FUNCTION_NAME_GETNEXTREV = "getnextrevision";

    protected static final String FUNCTION_NAME_GETNEXTOBJ = "getnextobject";

    protected static final String FUNCTION_NAME_INSERT = "insert";

    protected static final String FUNCTION_NAME_UPDATE = "update";

    protected static final String FUNCTION_NAME_GENERATE_MISSING_SYSTEM_METADATA = "generatemissingsystemmetadata";

    protected static final DateFormat dateFormat = new SimpleDateFormat("yyyy-MM-dd'T'HH:mm:ss.SSSZ");

    protected ServletContext servletContext;

    protected Logger logMetacat;

    protected MetacatHandler handler;

    protected HttpServletRequest request;

    protected HttpServletResponse response;

    protected String username;

    protected String password;

    protected String sessionId;

    protected String[] groupNames;

    protected Hashtable<String, String[]> params;

    // D1 certificate-based authentication

    protected Session session;

    /**Initializes new instance by setting servlet context,request and response*/

    public ResourceHandler(ServletContext servletContext,

            HttpServletRequest request, HttpServletResponse response) {

        this.servletContext = servletContext;

        this.request = request;

        this.response = response;

    }

    /**

     * This function is called from REST APU servlet and handles each request to the servlet 

     * 

     * @param httpVerb (GET, POST, PUT or DELETE)

     */

    public void handle(byte httpVerb) {

        logMetacat = Logger.getLogger(ResourceHandler.class);

        try {

            String resource = request.getServletPath();

            if(resource.endsWith("d1/") || resource.endsWith("d1"))

            {

                resource = RESOURCE_BASE_URL;

            }

            else

            {

                //substring off the /d1/

                resource = resource.substring(resource.indexOf("d1/") + 3, resource.length());

                resource = resource.trim();

            }

            String verb = "";

            System.out.println("handling verb " + httpVerb + " request with resource '" + resource + "'");

            System.out.println("resource: '" + resource + "'");

            System.out.println("resource_monitor: '" + RESOURCE_MONITOR + "'");

            boolean status = false;

            // load session the old way

            loadSessionData();

            // load session from certificate in request

            session = CertificateManager.getInstance().getSession(request);

            if (resource != null) {

                //resource = request.getServletPath().substring(1);

                params = new Hashtable<String, String[]>();

                initParams();

                Timer timer = new Timer();

                handler = new MetacatHandler(timer);

                if(resource.equals(RESOURCE_BASE_URL)) {

                    //node registry response

                    System.out.println("Using resource 'd1' (node registry response)");

                    createNodeResponse();

                    status = true;

                } else if (resource.equals(RESOURCE_SESSION) && 

                        httpVerb == POST && 

                        params.get(FUNCTION_KEYWORD) != null) {

                    System.out.println("Using resource 'session'");

                    //System.out.println("function_keyword: " + params.get(FUNCTION_KEYWORD)[0]);

                    if (params.get(FUNCTION_KEYWORD)[0].equals(FUNCTION_NAME_LOGIN)) {

                        login();

                        status = true;

                    } else if (params.get(FUNCTION_KEYWORD)[0].equals(FUNCTION_NAME_LOGOUT)) {

                        logout();

                        status = true;

                    } else if (params.get(FUNCTION_KEYWORD)[0].equals(FUNCTION_NAME_SET_ACCESS)) {

                        setaccess();

                        status = true;

                        System.out.println("done setting access");

                    }

                } else if (resource.equals(RESOURCE_META)) {

                    System.out.println("Using resource 'meta'");

                    if (params != null && params.get(FUNCTION_KEYWORD) != null &&

                            params.get(FUNCTION_KEYWORD)[0].equals(FUNCTION_NAME_GENERATE_MISSING_SYSTEM_METADATA))

                    { 

                        status = true;

                    }

                    else

                    {

                        String objectId = request.getPathInfo();

                        if (objectId != null && objectId.length() > 1) 

                        {

                            objectId = request.getPathInfo().substring(1);

                        }

                        // get

                        if (httpVerb == GET) {

	                        getSystemMetadataObject(objectId);

	                        status = true;

                        }

                        // post to register system metadata

                        if (httpVerb == POST) {

                        	registerSystemMetadata(objectId);

                        	status = true;

                        }

                    }

                } else if (resource.equals(RESOURCE_OBJECTS)) {

                    System.out.println("Using resource 'object'");

                    logMetacat.debug("D1 Rest: Starting resource processing...");

                    loadSessionData();

                    String objectId = request.getPathInfo();

                    if (objectId != null && objectId.length() > 1) 

                    {

                        objectId = request.getPathInfo().substring(1);

                    }

                    else

                    {

                        objectId = null;

                    }

                    System.out.println("objectId in ReasourceHandler.handle: " + objectId);

                    logMetacat.debug("verb:" + httpVerb);

                    if (httpVerb == GET) {

                        getObject(objectId);

                        status = true;

                    } else if (httpVerb == POST) {

                        putObject(objectId, FUNCTION_NAME_INSERT);

                        status = true;

                    } else if (httpVerb == PUT) {

                        putObject(objectId, FUNCTION_NAME_UPDATE);

                        status = true;

                    } else if (httpVerb == DELETE) {

                        deleteObject(objectId);

                        status = true;

                    } else if (httpVerb == HEAD) {

                        describeObject(objectId);

                        status = true;

                    }

                } else if (resource.equals(RESOURCE_FORMATS)) {

                  System.out.println("Using resource 'formats'");

                  // check for a format identifier

                  String fmtid = request.getPathInfo();

                  if ( fmtid != null && fmtid.length() > 1 ) {

                  	fmtid = request.getPathInfo().substring(1);

                  } else {

                  	fmtid = null;

                  }

                  // handle each verb

                  if ( httpVerb == GET ) {

                  	if ( fmtid == null ) {

                      // list the formats collection

                  		listFormats();

                  	} else {

                  		// get the specified format

                  		getFormat(fmtid);

                  	}

                  	status = true;

                  } else if ( httpVerb == PUT ) {

                  	status = true;

                  } else if ( httpVerb == POST ) {

                  	status = true;

                  } else if ( httpVerb == DELETE ) {

                  	status = true;

                  } else if ( httpVerb == HEAD ) {

                  	status = true;

                  }

                } else if (resource.equals(RESOURCE_IDENTIFIER)) {

                    System.out.println("Using resource 'identifier'");

                    String identifierId = request.getPathInfo();

                    if (identifierId != null && identifierId.length() > 1)

                        identifierId = request.getPathInfo().substring(1); //trim the slash

                    if (httpVerb == GET) {

                        String op = params.get(FUNCTION_KEYWORD)[0];

                        if (op.equals(FUNCTION_NAME_ISREGISTERED)) {

                            isRegistered(identifierId);

                            status = true;

                        } else if (op.equals(FUNCTION_NAME_GETALLDOCS)) {

                            getAllDocIds();

                            status = true;

                        } else if (op.equals(FUNCTION_NAME_GETNEXTREV)) {

                            getNextRevision(identifierId);

                            status = true;

                        } else if (op.equals(FUNCTION_NAME_GETNEXTOBJ)) {

                            getNextObject();

                            status = true;

                        } 

                    } else if (httpVerb == PUT) {

                        //Earthgrid API > Identifier Service > addLSID Function 

                        response.setStatus(501);

                        printError(

                                "This method is not supported by metacat.  To "

                                + "add a new LSID, add a document to metacat.",

                                response);

                        status = true;

                    }

                } else if (resource.equals(RESOURCE_LOG)) {

                    System.out.println("Using resource 'log'");

                    //handle log events

                    if(httpVerb == GET)

                    {

                        getLog();

                        status = true;

                    }

                    else

                    {

                        //change to D1 spec for specifying which http methods are allowed for a resource

                        response.setStatus(501);

                        printError("POST, PUT, DELETE is not supported for logs.", response);

                        status = true;

                    }

                } else if(resource.equals(RESOURCE_CHECKSUM)) {

                    System.out.println("Using resource 'checksum'");

                    //handle checksum requests

                    if(httpVerb == GET)

                    {

                        String checksumAlgorithm = "MD5";

                        String guid = request.getPathInfo();

                        if (guid != null && guid.length() > 1)

                            guid = request.getPathInfo().substring(1); //trim the slash

                        Identifier guidid = new Identifier();

                        guidid.setValue(guid);

                        try

                        {

                            checksumAlgorithm = params.get("checksumAlgorithm")[0];

                        }

                        catch(Exception e)

                        {

                            //do nothing.  default to MD5

                        }

                        System.out.println("getting checksum for object " + guid +

                                " with algorithm " + checksumAlgorithm);

                        try

                        {

                            Checksum c = MNodeService.getInstance().getChecksum(session, guidid, checksumAlgorithm);

                            System.out.println("got checksum " + c.getValue());

                            response.setStatus(200);

                            System.out.println("serializing response");

                            serializeServiceType(Checksum.class, c, response.getOutputStream());

                            System.out.println("done serializing response.");

                        }

                        catch(NotAuthorized na)

                        {

                            na.setDetail_code("1400");

                            serializeException(na, response.getOutputStream());

                        }

                        catch(NotFound nf)

                        {

                            nf.setDetail_code("1420");

                            serializeException(nf, response.getOutputStream());

                        }

                        catch(InvalidRequest ir)

                        {

                            ir.setDetail_code("1402");

                            serializeException(ir, response.getOutputStream());

                        }

                        catch(ServiceFailure sf)

                        {

                            sf.setDetail_code("1410");

                            serializeException(sf, response.getOutputStream());

                        }

                        catch(InvalidToken it)

                        {

                            it.setDetail_code("1430");

                            serializeException(it, response.getOutputStream());

                        }

                        status = true;

                    }

                } else if(resource.equals(RESOURCE_MONITOR)) {

                    //health monitoring calls

                    System.out.println("processing monitor request");

                    String pathInfo = request.getPathInfo();

                    if(httpVerb == GET)

                    {

                        System.out.println("verb is GET");

                        System.out.println("pathInfo is " + pathInfo);

                        pathInfo = pathInfo.substring(1);

                        // removed HealthService - BRL 20110727

                    }

                    status = true;

                } else if(resource.equals(RESOURCE_REPLICATE)) {

                    System.out.println("processing replicate request");

                    replicate(httpVerb, request, response);

                    status = true;

                }

                if (!status)

                {

                    response.setStatus(400);

                    printError("Incorrect parameters!", response);

                }

            } else {

                response.setStatus(400);

                printError("Incorrect resource!", response);

            }

        } catch (Exception e) {

            logMetacat.error(e.getClass() + ": " + e.getMessage());

            System.out.println("Error in ResourceHandler.handle(): " + e.getClass() + ": " + e.getMessage());

            e.printStackTrace();

        }

    }

		/**

     * handle the /replicate action

     * @param httpVerb

     * @param request

     * @param response

     * @throws Exception

     */

    private void replicate(int httpVerb, HttpServletRequest request, HttpServletResponse response)

        throws Exception

    {

        if(httpVerb == POST)

        {

            System.out.println("in POST replicate()");

            /*InputStream is = request.getInputStream();

            String input = IOUtils.toString(is);

            System.out.println("input: " + input);

            is = IOUtils.toInputStream(input);*/

            File tmpDir = getTempDirectory();

            File tmpSMFile = new File(tmpDir + 

                    ".sysmeta." + new Date().getTime() + ".tmp");

            System.out.println("temp dir: " + tmpDir.getAbsolutePath());

            MultipartRequestResolver mrr = new MultipartRequestResolver(

                    tmpDir.getAbsolutePath(), 1000000000, 0);

            MultipartRequest mr = mrr.resolveMultipart(request);

            Map<String, File> files = mr.getMultipartFiles();

            Iterator keys = files.keySet().iterator();

            while(keys.hasNext())

            {

                String key = (String)keys.next();

                System.out.println("files key: " + key);

                System.out.println("files value: " + files.get(key));

            }

            Map<String, List<String>> params = mr.getMultipartParameters();

            keys = params.keySet().iterator();

            while(keys.hasNext())

            {

                String key = (String)keys.next();

                System.out.println("params key: " + key);

                System.out.println("params value: " + params.get(key));

            }

            //File f = files.get("sysmeta");

            //the files are not being keyed by the part name, but rather the filename

            File f = files.get(files.keySet().iterator().next());

            System.out.println("file: " + f.getAbsolutePath());

            String sourceNode = params.get("sourceNode").get(0);

            System.out.println("sourceNode: " + sourceNode);

            FileInputStream fis = new FileInputStream(f);

            //lookup the id in the registry

            URL url = new URL("http://cn.dataone.org/cn/node");

            InputStream urlis = url.openStream();

            Map<String,String> m = NodelistUtil.mapNodeList(urlis);

            String nodeUrl = m.get(sourceNode);

            System.out.println("sourceNodeId: " + sourceNode);

            System.out.println("resolved sourceNodeUrl: " + nodeUrl);

            if(nodeUrl == null)

            {

                response.setStatus(500);

                response.getOutputStream().write(("Member Node id " + 

                        sourceNode + " not found in node registry.").getBytes());

                response.getOutputStream().close();

            }

            //respond to cn with 200/OK

            //String s;

            //s = "sysmeta: " + IOUtils.toString(fis);

            //s += "\n\n";

            response.setStatus(200);

            //response.getOutputStream().write(("sourceNode: " + sourceNode + "\n\n").getBytes());

            //response.getOutputStream().write(("s: " + s).getBytes());

            OutputStream out = response.getOutputStream();

            out.write("OK\n".getBytes());

            out.write(("sourceNodeId: " + sourceNode + "\n").getBytes());

            out.write(("sourceNodeUrl: " + nodeUrl + "\n").getBytes());

            out.close();

            //parse the systemMetadata

            SystemMetadata sm = (SystemMetadata)deserializeServiceType(SystemMetadata.class, fis);

            NodeReference nr = sm.getOriginMemberNode();

            nr.setValue(sourceNode);

            sm.setOriginMemberNode(nr);

            //get the document

            MNode mnode = new MNode(nodeUrl);

            //get the doc from the remote host

            InputStream docStream = mnode.get(session, sm.getIdentifier());

            File outputTmpFile = getTempFile();

            System.out.println("wrote xml file to " + outputTmpFile.getAbsolutePath());

            FileOutputStream outputTmpFileStream = new FileOutputStream(outputTmpFile);

            IOUtils.copy(docStream, outputTmpFileStream);

            //verify checksum

            System.out.println("verifying checksum");

            Checksum sourceFileChecksum = ChecksumUtil.checksum(new FileInputStream(outputTmpFile), 

                    sm.getChecksum().getAlgorithm());

            String cs1 = sm.getChecksum().getValue();

            String cs2 = sourceFileChecksum.getValue();

            System.out.println("original checksum: " + cs1);

            System.out.println(" created checksum: " + cs2);

            if(!cs1.equals(cs2))

            {

                System.out.println("ERROR: Checksums do not match!");

            }

        }

    }

    /**

     * create the root node registry response.  

     * @throws JiBXException

     * @throws IOException

     */

    private void createNodeResponse() 

        throws JiBXException, IOException

    {

        String nodeName = null;

        String nodeId = null;

        String nodeUrl = null;

        String nodeDesc = null;

        String nodeType = null;

        try

        {

            nodeId = PropertyService.getProperty("dataone.memberNodeId");

            nodeName = PropertyService.getProperty("dataone.nodeName");

            nodeUrl = SystemUtil.getContextURL() + "/d1/";

            nodeDesc = PropertyService.getProperty("dataone.nodeDescription");

            nodeType = PropertyService.getProperty("dataone.nodeType");

        }

        catch(PropertyNotFoundException pnfe)

        {

            logMetacat.error("createNodeResponse: " +

                    "property not found: " + pnfe.getMessage());

        }

        NodeList nl = new NodeList();

        Node n = new Node();

        NodeReference nr = new NodeReference();

        nr.setValue(nodeId);

        n.setIdentifier(nr);

        n.setBaseURL(nodeUrl);

        n.setDescription(nodeDesc);

        n.setName(nodeName + " -- WAR version WARVERSION");

        n.setType(NodeType.convert(nodeType));

        //create the services

        Service mnCrud03 = new Service();

        mnCrud03.setName("Metacat MN_Crud Services Version 0.3");

        mnCrud03.setVersion("0.3");

        Service mnCrud04 = new Service();

        mnCrud04.setName("Metacat MN_Crud Services Version 0.4");

        mnCrud04.setVersion("0.4");

        Service mnCrud09 = new Service();

        mnCrud09.setName("Metacat MN_Crud Services Version 0.9");

        mnCrud09.setVersion("0.9");

        Service mnReplication03 = new Service();

        mnReplication03.setName("Metcat MN_Replication Version 0.3");

        mnReplication03.setVersion("0.3");

        Service mnHealth04 = new Service();

        mnHealth04.setName("Metacat MN_Health Version 0.4");

        mnHealth04.setVersion("0.4");

        Service mnHealth06 = new Service();

        mnHealth06.setName("Metacat MN_Health Version 0.6");

        mnHealth06.setVersion("0.6");

        Service mnAuthentication07 = new Service();

        mnAuthentication07.setName("Metacat MN_Authentication Version 0.7");

        mnAuthentication07.setVersion("0.7");

        Service mnAuthorization07 = new Service();

        mnAuthorization07.setName("Metacat MN_Authorization Version 0.7");

        mnAuthorization07.setVersion("0.7");

        Services ss = new Services();

        ss.addService(mnCrud03);

        ss.addService(mnCrud04);

        ss.addService(mnCrud09);

        ss.addService(mnReplication03);

        ss.addService(mnHealth04);

        ss.addService(mnHealth06);

        ss.addService(mnAuthentication07);

        ss.addService(mnAuthorization07);

        nl.addNode(n);

        response.setContentType("text/xml");

        response.setStatus(200);

        serializeServiceType(NodeList.class, nl, response.getOutputStream());

    }

    /**

     * MN_crud.describe()

     * http://mule1.dataone.org/ArchitectureDocs/mn_api_crud.html#MN_crud.describe

     * @param guid

     */

    private void describeObject(String guid)

    {

        Logger logMetacat = Logger.getLogger(ResourceHandler.class);

        OutputStream out = null;

        try

        {

            out = response.getOutputStream();

        }

        catch(Exception e)

        {

            logMetacat.error("Error getting output stream in ResourceHandler.describeObject: " + e.getClass() + ": " + e.getMessage());

            return;

        }

        response.setStatus(200);

        response.setContentType("text/xml");

        Identifier id = new Identifier();

        id.setValue(guid);

        try

        {

            DescribeResponse dr = MNodeService.getInstance().describe(session, id);

            DateFormat dateFormat = new SimpleDateFormat("yyyy-MM-dd'T'hh:mm:ss.SZ");

            response.addHeader("guid", guid);

            response.addHeader("checksum", dr.getDataONE_Checksum().getValue());

            response.addHeader("checksum_algorithm", dr.getDataONE_Checksum().getAlgorithm());

            response.addHeader("content_length", dr.getContent_Length() + "");

            response.addHeader("last_modified", dateFormat.format(dr.getLast_Modified()));

            response.addHeader("format", dr.getDataONE_ObjectFormatIdentifier().getValue());

        }

        catch(InvalidRequest ir)

        {

            serializeException(ir, out);

        }

        catch(NotImplemented ni)

        {

            serializeException(ni, out);

        }

        catch(NotAuthorized na)

        {

            serializeException(na, out);

        }

        catch(ServiceFailure sf)

        {

            serializeException(sf, out);

        }

        catch(NotFound nf)

        {

            serializeException(nf, out);

        }

        catch(InvalidToken it)

        {

            serializeException(it, out);

        }

    }

    /**

     * get the logs from the CrudService based on passed params.  Available 

     * params are token, fromDate, toDate, event.  See 

     * http://mule1.dataone.org/ArchitectureDocs/mn_api_crud.html#MN_crud.getLogRecords

     * for more info

     */

    private void getLog()

    {

        OutputStream out = null;

        try

        {

            out = response.getOutputStream();

            response.setStatus(200);

            response.setContentType("text/xml");

            String fromDateS = params.get("fromDate")[0];

            System.out.println("param fromDateS: " + fromDateS);

            Date fromDate = null;

            String toDateS = params.get("toDate")[0];

            System.out.println("param toDateS: " + toDateS);

            Date toDate = null;

            String eventS = params.get("event")[0];

            Event event = null;

            if(fromDateS != null)

            {

                //fromDate = dateFormat.parse(fromDateS);

                fromDate = parseDateAndConvertToGMT(fromDateS);

            }

            if(toDateS != null)

            {

                //toDate = dateFormat.parse(toDateS);

                toDate = parseDateAndConvertToGMT(toDateS);

            }

            if(eventS != null)

            {

                event = Event.convert(eventS);

            }

            System.out.println("fromDate: " + fromDate + " toDate: " + toDate);

            Integer start = null;

            Integer count = null;

            try {

            	start =  Integer.parseInt(params.get("start")[0]);

            } catch (Exception e) {

				logMetacat.warn("Could not parse start: " + e.getMessage());

			}

            try {

            	count =  Integer.parseInt(params.get("count")[0]);

            } catch (Exception e) {

				logMetacat.warn("Could not count start: " + e.getMessage());

			}

            System.out.println("calling crudservice.getLogRecords");

            Log log = MNodeService.getInstance().getLogRecords(session, fromDate, toDate, event, start, count);

            serializeServiceType(Log.class, log, out);

        }

        catch(Exception e)

        {

            String msg = "Could not get logs from CrudService: " + e.getClass() + ": " + e.getMessage();

            response.setStatus(500);

            ServiceFailure sf = new ServiceFailure("1490", msg);

            logMetacat.error(msg);

            e.printStackTrace();

            serializeException(sf, out);

        }

    }

    /**

     *  copies request parameters to a hashtable which is given as argument to native metacathandler functions  

     */

    protected void initParams() {

        String name = null;

        String[] value = null;

        Enumeration paramlist = request.getParameterNames();

        while (paramlist.hasMoreElements()) {

            name = (String) paramlist.nextElement();

            value = request.getParameterValues(name);

            params.put(name, value);

        }

    }

    /**

     * 

     * Load user details of metacat session from the request 

     * 

     */

    private void loadSessionData()

      throws Exception

    {

        SessionData sessionData = RequestUtil.getSessionData(request);

        try

        {

            username = null;

            password = null;

            groupNames = null;

            sessionId = null;

            boolean validSession = false;

            SessionService ss = SessionService.getInstance();

            System.out.println("sessionData: " + sessionData);

            if(sessionData == null)

            {

                username = "public";

                sessionId = "0";

                System.out.println("sessiondata is null.  Creating a public session.");

                return;

            }

            System.out.println("username: " + sessionData.getUserName());

            System.out.println("sessionid: " + sessionData.getId());

            //validate the session

            if(ss.isSessionRegistered(sessionData.getId()) && 

               !(sessionData.getUserName().equals("public") || sessionData.getId().equals("0")))

            {

                validSession = true;

            }

            if(validSession)

            {

                //if the session is valid, set these variables

                username = sessionData.getUserName();

                password = sessionData.getPassword();

                groupNames = sessionData.getGroupNames();

                sessionId = sessionData.getId();

                System.out.println("setting sessionid to " + sessionId);

                System.out.println("username: " + username);

            }

            //if the session is not valid or the username is null, set

            //username to public

            if (username == null) 

            {

                System.out.println("setting username to public.");

                username = "public";

            }

        }

        catch(Exception e)

        {

            e.printStackTrace();

            throw new Exception("Could not load the session data: " + e.getClass() + ": " + e.getMessage());

        }

    }

    /**

     *  Earthgrid API > Identifier Service > isRegistered Function : 

     *  calls MetacatHandler > handleIdIsRegisteredAction

     * @param guid

     * @throws IOException

     */

    private void isRegistered(String guid) throws IOException

    {

        // Look up the localId for this guid

        IdentifierManager im = IdentifierManager.getInstance();

        String localId = "";

        try {

            localId = im.getLocalId(guid);

        } catch (McdbDocNotFoundException e) {

            // TODO: Need to return the proper DataONE exception

        }

        params.put("docid", new String[] { localId });

        PrintWriter out = response.getWriter();

        response.setStatus(200);

        response.setContentType("text/xml");

        handler.handleIdIsRegisteredAction(out, params, response);

        out.close();

    }

    /**

     * Earthgrid API > Identifier Service > getAllDocIds Function : 

     * calls MetacatHandler > handleGetAllDocidsAction

     * @throws IOException

     */

    private void getAllDocIds() throws IOException {

        PrintWriter out = response.getWriter();

        response.setStatus(200);

        response.setContentType("text/xml");

        handler.handleGetAllDocidsAction(out, params, response);

        out.close();

    }

    /**

     * Earthgrid API > Identifier Service > getNextRevision Function : 

     * calls MetacatHandler > handleGetRevisionAndDocTypeAction

     * @param guid

     * @throws IOException

     */

    private void getNextRevision(String guid) throws IOException 

    {

        params.put("docid", new String[] { guid });

        PrintWriter out = response.getWriter();

        response.setStatus(200);

        response.setContentType("text/xml");

        //handler.handleGetRevisionAndDocTypeAction(out, params);

        try {

            // Make sure there is a docid

            if (guid == null || guid.equals("")) {

                throw new Exception("User didn't specify docid!");

            }

            // Look up the localId for this guid

            IdentifierManager im = IdentifierManager.getInstance();

            String localId = "";

            try {

                localId = im.getLocalId(guid);

            } catch (McdbDocNotFoundException e) {

                // TODO: Need to return the proper DataONE exception

            }

            // Create a DBUtil object

            DBUtil dbutil = new DBUtil();

            // Get a rev and doctype

            String revAndDocType = dbutil

                    .getCurrentRevisionAndDocTypeForGivenDocument(localId);

            int revision = Integer.parseInt(revAndDocType.split(";")[0]) + 1;

            out.println("<?xml version=\"1.0\"?>");

            out.print("<next-revision>");

            out.print(revision);

            out.print("</next-revision>");

        } catch (Exception e) {

            // Handle exception

            response.setStatus(500);

            out.println("<?xml version=\"1.0\"?>");

            out.println("<error>");

            out.println(e.getClass() + ": " + e.getMessage());

            out.println("</error>");

        }

        out.close();

    }

    /**

     * Earthgrid API > Identifier Service > getNextObject Function : 

     * calls MetacatHandler > handleGetMaxDocidAction

     * @throws IOException

     */

    private void getNextObject() throws IOException {

        PrintWriter out = response.getWriter();

        response.setStatus(200);

        response.setContentType("text/xml");

        handler.handleGetMaxDocidAction(out, params, response);

        out.close();

    }

    /**

     * Implements REST version of DataONE CRUD API --> get

     * @param guid ID of data object to be read

     */

    protected void getObject(String guid) {

        OutputStream out = null;

        try {

            out = response.getOutputStream();

            response.setStatus(200);

            if(guid != null)

            { //get a specific document                

                Identifier id = new Identifier();

                id.setValue(guid);

                try

                {

                    SystemMetadata sm = MNodeService.getInstance().getSystemMetadata(session, id);

                    //set the content type

                    if(sm.getFmtid().getValue().trim().equals(

                    		ObjectFormatCache.getInstance().getFormat("text/csv").getFmtid().getValue()))

                    {

                        response.setContentType("text/csv");

                        response.setHeader("Content-Disposition", "inline; filename=" + id.getValue() + ".csv");

                    }

                    else if(sm.getFmtid().getValue().trim().equals(

                    		ObjectFormatCache.getInstance().getFormat("text/plain").getFmtid().getValue()))

                    {

                        response.setContentType("text/plain");

                        response.setHeader("Content-Disposition", "inline; filename=" + id.getValue() + ".txt");

                    } 

                    else if(sm.getFmtid().getValue().trim().equals(

                    		ObjectFormatCache.getInstance().getFormat("application/octet-stream").getFmtid().getValue()))

                    {

                        response.setContentType("application/octet-stream");

                    }

                    else

                    {

                        response.setContentType("text/xml");

                        response.setHeader("Content-Disposition", "inline; filename=" + id.getValue() + ".xml");

                    }

                    InputStream data = MNodeService.getInstance().get(session, id);

                    IOUtils.copyLarge(data, response.getOutputStream());

                }

                catch(InvalidToken it)

                {

                    response.setStatus(500);

                    serializeException(it, out);