org.beangle.security.web.auth.LoginUrlEntryPoint Maven / Gradle / Ivy
/*
* Beangle, Agile Java/Scala Development Scaffold and Toolkit
*
* Copyright (c) 2005-2013, Beangle Software.
*
* Beangle is free software: you can redistribute it and/or modify
* it under the terms of the GNU Lesser General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* Beangle is distributed in the hope that it will be useful.
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public License
* along with Beangle. If not, see HTTPS, even if the original intercepted
* request for a resource used the HTTP protocol. When this happens, after a successful
* login (via HTTPS), the original resource will still be accessed as HTTP, via the original request
* URL.
*
* @author chaostone
*/
public class LoginUrlEntryPoint implements UrlEntryPoint, Initializing {
private static final Logger logger = LoggerFactory.getLogger(LoginUrlEntryPoint.class);
private String loginUrl;
private boolean serverSideRedirect = false;
public void init() throws Exception {
Assert.notEmpty(loginUrl, "loginFormUrl must be specified");
}
/**
* Allows subclasses to modify the login form URL that should be applicable
* for a given request.
*
* @param request the request
* @param response the response
* @param exception the exception
* @return the URL (cannot be null or empty)
*/
protected String determineUrlToUseForThisRequest(HttpServletRequest request, HttpServletResponse response,
AuthenticationException exception) {
String originLoginUrl = getLoginUrl();
if (originLoginUrl.contains("${goto}")) {
UrlBuilder builder = new UrlBuilder(request.getContextPath());
builder.scheme(request.getScheme()).serverName(request.getServerName()).port(request.getServerPort())
.queryString(request.getQueryString());
originLoginUrl = Strings.replace(originLoginUrl, "${goto}", builder.buildUrl());
}
return originLoginUrl;
}
/** Performs the redirect (or forward) to the login form URL. */
public void commence(ServletRequest request, ServletResponse response, AuthenticationException authException)
throws IOException, ServletException {
HttpServletRequest httpRequest = (HttpServletRequest) request;
HttpServletResponse httpResponse = (HttpServletResponse) response;
String redirectUrl = null;
if (serverSideRedirect) {
String loginForm = determineUrlToUseForThisRequest(httpRequest, httpResponse, authException);
logger.debug("Server side forward to: {}", loginForm);
RequestDispatcher dispatcher = httpRequest.getRequestDispatcher(loginForm);
dispatcher.forward(request, response);
return;
} else {
// redirect to login page. Use https if forceHttps true
redirectUrl = determineUrlToUseForThisRequest(httpRequest, httpResponse, authException);
}
RedirectUtils.sendRedirect(httpRequest, httpResponse, redirectUrl);
}
/**
* The URL where the AuthenticationProcessingFilter login page
* can be found. Should be relative to the web-app context path, and include
* a leading /
*/
public void setLoginUrl(String loginUrl) {
this.loginUrl = loginUrl;
}
public String getLoginUrl() {
return loginUrl;
}
/**
* Tells if we are to do a server side include of the loginFormUrl instead of a 302
* redirect.
*
* @param serverSideRedirect
*/
public void setServerSideRedirect(boolean serverSideRedirect) {
this.serverSideRedirect = serverSideRedirect;
}
protected boolean isServerSideRedirect() {
return serverSideRedirect;
}
}