|
1
16 package org.mortbay.http;
17
18 import java.io.IOException  ;
19 import java.security.Principal ;
20 import java.sql.Connection ;
21 import java.sql.DriverManager ;
22 import java.sql.PreparedStatement ;
23 import java.sql.ResultSet ;
24 import java.sql.SQLException ;
25 import java.util.Properties ;
26
27 import org.apache.commons.logging.Log;
28 import org.mortbay.log.LogFactory;
29 import org.mortbay.util.Loader;
30 import org.mortbay.util.Resource;
31
32
33
55
56 public class JDBCUserRealm extends HashUserRealm
57 {
58 private static Log log = LogFactory.getLog(JDBCUserRealm.class);
59
60 private String _jdbcDriver;
61 private String _url;
62 private String _userName;
63 private String _password;
64 private String _userTable;
65 private String _userTableKey;
66 private String _userTableUserField;
67 private String _userTablePasswordField;
68 private String _roleTable;
69 private String _roleTableKey;
70 private String _roleTableRoleField;
71 private String _userRoleTable;
72 private String _userRoleTableUserKey;
73 private String _userRoleTableRoleKey;
74 private int _cacheTime;
75
76 private long _lastHashPurge;
77 private Connection _con;
78 private String _userSql;
79 private String _roleSql;
80
81
82
85 public JDBCUserRealm(String name)
86 {
87 super(name);
88 }
89
90
91
97 public JDBCUserRealm(String name, String config)
98 throws IOException ,
99 ClassNotFoundException ,
100 InstantiationException ,
101 IllegalAccessException
102 {
103 super(name);
104 loadConfig(config);
105 Loader.loadClass(this.getClass(),_jdbcDriver).newInstance();
106 connectDatabase();
107 }
108
109
110
115 public void loadConfig(String config)
116 throws IOException
117 {
118 Properties properties = new Properties ();
119 Resource resource=Resource.newResource(config);
120 properties.load(resource.getInputStream());
121
122 _jdbcDriver = properties.getProperty("jdbcdriver");
123 _url = properties.getProperty("url");
124 _userName = properties.getProperty("username");
125 _password = properties.getProperty("password");
126 _userTable = properties.getProperty("usertable");
127 _userTableKey = properties.getProperty("usertablekey");
128 _userTableUserField = properties.getProperty("usertableuserfield");
129 _userTablePasswordField = properties.getProperty("usertablepasswordfield");
130 _roleTable = properties.getProperty("roletable");
131 _roleTableKey = properties.getProperty("roletablekey");
132 _roleTableRoleField = properties.getProperty("roletablerolefield");
133 _userRoleTable = properties.getProperty("userroletable");
134 _userRoleTableUserKey = properties.getProperty("userroletableuserkey");
135 _userRoleTableRoleKey = properties.getProperty("userroletablerolekey");
136 _cacheTime = new Integer (properties.getProperty("cachetime")).intValue();
137
138 if (_jdbcDriver == null || _jdbcDriver.equals("")
139 || _url == null || _url.equals("")
140 || _userName == null || _userName.equals("")
141 || _password == null
142 || _cacheTime < 0)
143 {
144 if(log.isDebugEnabled())log.debug("UserRealm " + getName()
145 + " has not been properly configured");
146 }
147 _cacheTime *= 1000;
148 _lastHashPurge = 0;
149 _userSql = "select " + _userTableKey + ","
150 + _userTablePasswordField + " from "
151 + _userTable + " where "
152 + _userTableUserField + " = ?";
153 _roleSql = "select r." + _roleTableRoleField
154 + " from " + _roleTable + " r, "
155 + _userRoleTable + " u where u."
156 + _userRoleTableUserKey + " = ?"
157 + " and r." + _roleTableKey + " = u."
158 + _userRoleTableRoleKey;
159 }
160
161
162 public void logout(Principal user)
163 {
164 remove(user.getName());
165 }
166
167
168
170 public void connectDatabase()
171 {
172 try
173 {
174 _con = DriverManager.getConnection(_url, _userName, _password);
175 }
176 catch(SQLException e)
177 {
178 log.warn("UserRealm " + getName()
179 + " could not connect to database; will try later", e);
180 }
181 }
182
183
184 public Principal authenticate(String username,
185 Object credentials,
186 HttpRequest request)
187 {
188
189 synchronized(this)
190 {
191 long now = System.currentTimeMillis();
192 if (now - _lastHashPurge > _cacheTime || _cacheTime == 0)
193 {
194 super.clear();
195 _roles.clear();
196 _lastHashPurge = now;
197 }
198 Principal user = (Principal )super.get(username);
199 if (user == null)
200 {
201 loadUser(username);
202 user = (Principal )super.get(username);
203 }
204 }
205 return super.authenticate(username, credentials, request);
206 }
207
208
209
210
211 private void loadUser(String username)
212 {
213 try
214 {
215 if (null==_con)
216 connectDatabase();
217
218 if (null==_con)
219 throw new SQLException ("Can't connect to database");
220
221 PreparedStatement stat = _con.prepareStatement(_userSql);
222 stat.setObject(1, username);
223 ResultSet rs = stat.executeQuery();
224
225 if (rs.next())
226 {
227 Object key = rs.getObject(_userTableKey);
228 put(username, rs.getString(_userTablePasswordField));
229 stat.close();
230
231 stat = _con.prepareStatement(_roleSql);
232 stat.setObject(1, key);
233 rs = stat.executeQuery();
234
235 while (rs.next())
236 addUserToRole(username, rs.getString(_roleTableRoleField));
237
238 stat.close();
239 }
240 }
241 catch (SQLException e)
242 {
243 log.warn("UserRealm " + getName()
244 + " could not load user information from database", e);
245 connectDatabase();
246 }
247 }
248 }
249 |
Popular Tags |
Java API By Example, From Geeks To Geeks.