br.eti.clairton.vraptor.crud.security.SessionController Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of vraptor-crud Show documentation
A crud bootstrap do use VRaptor
The newest version!
package br.eti.clairton.vraptor.crud.security;

import static br.com.caelum.vraptor.view.Results.http;
import static br.com.caelum.vraptor.view.Results.json;
import static java.lang.String.format;

import java.io.IOException;
import java.io.PrintWriter;
import java.io.Serializable;

import javax.inject.Inject;
import javax.security.auth.login.CredentialNotFoundException;
import javax.servlet.http.HttpServletResponse;
import javax.validation.constraints.NotNull;

import br.com.caelum.vraptor.Consumes;
import br.com.caelum.vraptor.Controller;
import br.com.caelum.vraptor.Delete;
import br.com.caelum.vraptor.Post;
import br.com.caelum.vraptor.Result;
import br.com.caelum.vraptor.http.MutableRequest;
import br.eti.clairton.security.Locksmith;
import br.eti.clairton.vraptor.crud.interceptor.ExceptionVerifier;

@Controller
public class SessionController implements Serializable {
	private static final long serialVersionUID = 1L;
	private final Locksmith locksmith;
	private final HttpServletResponse response;
	private final MutableRequest request;
	private final Result result;

	/**
	 * CDI eye only.
	 */
	@Deprecated
	public SessionController() {
		this(null, null, null, null);
	}

	/**
	 * Construtor com parâmetros com parametros.
	 * 
	 * @param locksmith
	 *            manager de tokens
	 * @param response
	 *            resposta http
	 * @param request
	 *            requisicao servlet
	 * @param result
	 *            resultado da respota
	 */
	@Inject
	public SessionController(final Locksmith locksmith,
			final HttpServletResponse response, final MutableRequest request,
			final Result result) {
		this.locksmith = locksmith;
		this.response = response;
		this.result = result;
		this.request = request;
	}

	@Post
	@ExceptionVerifier
	@Consumes(value = "application/json")
	public  void create(@NotNull final String user, @NotNull final String password) throws CredentialNotFoundException {
		final T token = locksmith.create(user, password);
		request.setParameter("Authorization", "Bearer " + token);
		if (token instanceof String) {
			try {
				final PrintWriter writer = response.getWriter();
				response.setStatus(201);
				final String json = format("{\"token\": \"%s\"}", token);
				writer.print(json);
				writer.flush();
				writer.close();
			} catch (final IOException e) {
				throw new RuntimeException(e);
			}
		} else {
			result.use(http()).setStatusCode(201);
			result.use(json()).withoutRoot().from(token).serialize();
		}
	}

	@Delete
	@ExceptionVerifier
	@Consumes("application/json")
	public void destroy(final String key) {
		locksmith.invalidate(key);
		result.use(http()).setStatusCode(204);
	}
}