KickJava   Java API By Example, From Geeks To Geeks.

Java > Open Source Codes > org > jboss > ejb3 > test > dd > web > servlets > UnsecureRunAsServlet


1 /*
2   * JBoss, Home of Professional Open Source
3   * Copyright 2005, JBoss Inc., and individual contributors as indicated
4   * by the @authors tag. See the copyright.txt in the distribution for a
5   * full listing of individual contributors.
6   *
7   * This is free software; you can redistribute it and/or modify it
8   * under the terms of the GNU Lesser General Public License as
9   * published by the Free Software Foundation; either version 2.1 of
10   * the License, or (at your option) any later version.
11   *
12   * This software is distributed in the hope that it will be useful,
13   * but WITHOUT ANY WARRANTY; without even the implied warranty of
14   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15   * Lesser General Public License for more details.
16   *
17   * You should have received a copy of the GNU Lesser General Public
18   * License along with this software; if not, write to the Free
19   * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
20   * 02110-1301 USA, or see the FSF site: http://www.fsf.org.
21   */

22 package org.jboss.ejb3.test.dd.web.servlets;
23
24 import java.io.IOException JavaDoc;
25 import java.io.PrintWriter JavaDoc;
26 import java.security.Principal JavaDoc;
27 import javax.naming.InitialContext JavaDoc;
28 import javax.naming.Context JavaDoc;
29 import javax.servlet.ServletException JavaDoc;
30 import javax.servlet.http.HttpServlet JavaDoc;
31 import javax.servlet.http.HttpServletRequest JavaDoc;
32 import javax.servlet.http.HttpServletResponse JavaDoc;
33
34 import org.jboss.ejb3.test.dd.web.interfaces.RunAsTargetLocal;
35 import org.jboss.logging.Logger;
36
37 /** A servlet deployed under an unrestricted path that invokes the checkRunAs
38  * method on a secured RunAsTargetLocal EJB.
39  *
40  * @author Scott.Stark@jboss.org
41  * @version $Revision: 37459 $
42  */

43 public class UnsecureRunAsServlet extends HttpServlet JavaDoc
44 {
45    Logger log = Logger.getLogger(UnsecureRunAsServlet.class);
46
47    protected void processRequest(HttpServletRequest JavaDoc request, HttpServletResponse JavaDoc response)
48       throws ServletException JavaDoc, IOException JavaDoc
49    {
50       String JavaDoc ejbName = request.getParameter("ejbName");
51       try
52       {
53          InitialContext JavaDoc ctx = new InitialContext JavaDoc();
54          Context JavaDoc enc = (Context JavaDoc) ctx.lookup("java:comp/env");
55          RunAsTargetLocal bean = (RunAsTargetLocal) enc.lookup(ejbName);
56          bean.checkRunAs();
57       }
58       catch(Exception JavaDoc e)
59       {
60          log.error("Access to checkRunAs failed", e);
61          throw new ServletException JavaDoc("Access to checkRunAs failed", e);
62       }
63
64       Principal JavaDoc user = request.getUserPrincipal();
65       PrintWriter JavaDoc out = response.getWriter();
66       response.setContentType("text/html");
67       out.println("<html>");
68       out.println("<head><title>UnsecureRunAsServlet</title></head><body>");
69       out.println("<h1>UnsecureRunAsServlet Accessed</h1>");
70       out.println("<pre>You have accessed this servlet as user: "+user+"<br>");
71       out.println("</pre>");
72       out.println("</pre></body></html>");
73       out.close();
74    }
75
76    protected void doGet(HttpServletRequest JavaDoc request, HttpServletResponse JavaDoc response)
77       throws ServletException JavaDoc, IOException JavaDoc
78    {
79       processRequest(request, response);
80    }
81    
82    protected void doPost(HttpServletRequest JavaDoc request, HttpServletResponse JavaDoc response)
83       throws ServletException JavaDoc, IOException JavaDoc
84    {
85       processRequest(request, response);
86    }
87
88 }
89
Popular Tags