|
1
25
26 package org.snipsnap.container;
27
28 import org.radeox.util.logging.Logger;
29 import org.snipsnap.app.Application;
30 import org.snipsnap.config.Configuration;
31 import org.snipsnap.snip.Snip;
32 import org.snipsnap.snip.SnipSpace;
33 import org.snipsnap.snip.storage.UserStorage;
34 import org.snipsnap.user.AuthenticationService;
35 import org.snipsnap.user.Digest;
36 import org.snipsnap.user.User;
37 import org.snipsnap.util.Base64;
38
39 import javax.servlet.http.Cookie  ;
40 import javax.servlet.http.HttpServletRequest ;
41 import javax.servlet.http.HttpServletResponse ;
42 import javax.servlet.http.HttpSession ;
43 import java.io.BufferedReader ;
44 import java.io.StringReader ;
45 import java.net.MalformedURLException ;
46 import java.net.URL ;
47 import java.util.HashMap ;
48 import java.util.Iterator ;
49 import java.util.Map ;
50
51 public class DefaultSessionService implements SessionService {
52 private final static String COOKIE_NAME = "SnipSnapUser";
53 private final static String ATT_USER = "user";
54 private final static int SECONDS_PER_YEAR = 60 * 60 * 24 * 365;
55 private final static int HTTP_UNAUTHORIZED = 401;
56
57 private Map authHash = new HashMap ();
58 private Map robots = new HashMap ();
59 private Map robotIds = new HashMap ();
60
61 private UserStorage storage;
62 private AuthenticationService authService;
63
64 public DefaultSessionService(SnipSpace space, UserStorage storage, AuthenticationService authService) {
65 this.storage = storage;
66 this.authService = authService;
67
68 try {
69 Snip robots = space.load(Configuration.SNIPSNAP_CONFIG_ROBOTS);
70 if (robots != null) {
71 BufferedReader crawler = new BufferedReader (new StringReader (robots.getContent()));
72 String line = null;
73 int ln = 0;
74 while ((line = crawler.readLine()) != null) {
75 ln++;
76 if (line.length() > 0 && !line.startsWith("#")) {
77 try {
78 String id = line.substring(0, line.indexOf(' '));
79 String url = line.substring(line.indexOf(' ') + 1);
80 if (url.indexOf("IGNORE") != -1) {
81 robotIds.put(id, "IGNORE");
82 } else {
83 robotIds.put(id, url);
84 }
85 } catch (Exception e) {
86 Logger.warn("SessionService: " + Configuration.SNIPSNAP_CONFIG_ROBOTS + " line " + ln + ": syntax error", e);
87 }
88 }
89 }
90 }
91 } catch (Exception e) {
92 Logger.warn("SessionService: unable to read " + Configuration.SNIPSNAP_CONFIG_ROBOTS, e);
93 }
94 }
95
96 private void updateAuthHash() {
98 authHash.clear();
99 Iterator users = storage.storageAll().iterator();
100 while (users.hasNext()) {
101 User user = (User) users.next();
102 authHash.put(getCookieDigest(user), user);
103 }
104 }
105
106
109 public static String getCookieDigest(User user) {
110 String tmp = user.getLogin() + user.getPasswd() + user.getLastLogin().toString();
111 return Digest.getDigest(tmp);
112 }
113
114 public void setUser(HttpServletRequest request, HttpServletResponse response, User user) {
115 HttpSession session = request.getSession();
116 session.setAttribute(ATT_USER, user);
117 setCookie(request, response, user);
118 }
119
120
123 public User getUser(HttpServletRequest request, HttpServletResponse response) {
124 HttpSession session = request.getSession();
125 User user = (User) session.getAttribute(ATT_USER);
126 String appOid = (String )Application.get().getObject(Application.OID);
127 if (null != user && !appOid.equals(user.getApplication())) {
128 user = null;
129 }
130
131 if (null == user) {
132 if ("Cookie".equals(Application.get().getConfiguration().getAuth())) {
133 Cookie cookie = getCookie(request, COOKIE_NAME);
134 if (cookie != null) {
135 String auth = cookie.getValue();
136 if (!authHash.containsKey(auth)) {
137 updateAuthHash();
138 }
139
140 user = (User) authHash.get(auth);
141 if (user != null && appOid.equals(user.getApplication())) {
142 user = authService.authenticate(user.getLogin(), user.getPasswd(), AuthenticationService.ENCRYPTED);
143 if (null != user) {
144 setCookie(request, response, user);
145 }
146 } else {
147 Logger.warn("SessionService: invalid hash: " + auth);
148 user = null;
149 }
150 }
151 } else if ("Basic".equals(Application.get().getConfiguration().getAuth())) {
152 String auth = request.getHeader("Authorization");
154 String login = "", password = "";
155
156 if (auth != null) {
157 auth = new String (Base64.decode(auth.substring(auth.indexOf(' ') + 1)));
158 login = auth.substring(0, auth.indexOf(':'));
159 password = auth.substring(auth.indexOf(':') + 1);
160 }
161
162 user = authService.authenticate(login, password);
163 if (user == null) {
164 response.setHeader("WWW-Authenticate", "Basic realm=\""+Application.get().getConfiguration().getName()+"\"");
165 response.setStatus(HTTP_UNAUTHORIZED);
166 return null;
167 }
168 }
169
170 if (null == user) {
171 String agent = request.getHeader("User-Agent");
172 Iterator it = robotIds.keySet().iterator();
173 while (agent != null && user == null && it.hasNext()) {
174 String key = (String ) it.next();
175 if (agent.toLowerCase().indexOf(key.toLowerCase()) != -1) {
176 user = (User) robots.get(key);
177 if (null == user) {
178 user = new User(key, key, (String ) robotIds.get(key));
179 user.setNonUser(true);
180 robots.put(key, user);
181 }
182 break;
183 }
184 }
185
186 if (user != null) {
187 Logger.debug("Found robot: " + user);
188 } else {
189 Logger.debug("User agent of unknown user: '" + agent + "'");
190 user = new User("Guest", "Guest", "");
191 user.setApplication(appOid);
192 user.setGuest(true);
193 }
194 removeCookie(request, response);
195 }
196 session.setAttribute(ATT_USER, user);
197 }
198 return user;
199 }
200
201
204 public void setCookie(HttpServletRequest request, HttpServletResponse response, User user) {
205 String auth = getCookieDigest(user);
206 updateAuthHash();
208
209 authHash.put(auth, user);
210 Cookie cookie = new Cookie (COOKIE_NAME, auth);
211 cookie.setMaxAge(SECONDS_PER_YEAR);
212 cookie.setPath(getCookiePath());
213 cookie.setComment("SnipSnap User");
214 response.addCookie(cookie);
215 }
216
217
218 public void removeCookie(HttpServletRequest request, HttpServletResponse response) {
219 Cookie cookie = getCookie(request, COOKIE_NAME);
220 if (cookie != null) {
221 cookie.setPath(getCookiePath());
222 cookie.setMaxAge(0);
223 response.addCookie(cookie);
224 }
225 }
226
227 private String getCookiePath() {
228 String path;
229 Configuration config = Application.get().getConfiguration();
230 try {
231 path = new URL (config.getUrl()).getPath();
232 if (path == null || path.length() == 0) {
233 path = "/";
234 }
235 } catch (MalformedURLException e) {
236 Logger.warn("Malformed URL: " + Application.get().getConfiguration().getUrl(), e);
237 path = "/";
238 }
239 return path;
241 }
242
243
249 public Cookie getCookie(HttpServletRequest request, String name) {
250 Cookie cookies[] = request.getCookies();
251 for (int i = 0; cookies != null && i < cookies.length; i++) {
252 if (cookies[i].getName().equals(name)) {
253 return cookies[i];
254 }
255 }
256 return null;
257 }
258 }
259 |
Popular Tags |
Java API By Example, From Geeks To Geeks.