View Javadoc

1   /**
2    * This file Copyright (c) 2003-2010 Magnolia International
3    * Ltd.  (http://www.magnolia-cms.com). All rights reserved.
4    *
5    *
6    * This file is dual-licensed under both the Magnolia
7    * Network Agreement and the GNU General Public License.
8    * You may elect to use one or the other of these licenses.
9    *
10   * This file is distributed in the hope that it will be
11   * useful, but AS-IS and WITHOUT ANY WARRANTY; without even the
12   * implied warranty of MERCHANTABILITY or FITNESS FOR A
13   * PARTICULAR PURPOSE, TITLE, or NONINFRINGEMENT.
14   * Redistribution, except as permitted by whichever of the GPL
15   * or MNA you select, is prohibited.
16   *
17   * 1. For the GPL license (GPL), you can redistribute and/or
18   * modify this file under the terms of the GNU General
19   * Public License, Version 3, as published by the Free Software
20   * Foundation.  You should have received a copy of the GNU
21   * General Public License, Version 3 along with this program;
22   * if not, write to the Free Software Foundation, Inc., 51
23   * Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
24   *
25   * 2. For the Magnolia Network Agreement (MNA), this file
26   * and the accompanying materials are made available under the
27   * terms of the MNA which accompanies this distribution, and
28   * is available at http://www.magnolia-cms.com/mna.html
29   *
30   * Any modifications to this file must keep this entire header
31   * intact.
32   *
33   */
34  package info.magnolia.cms.security.auth.login;
35  
36  import info.magnolia.cms.security.auth.callback.CredentialsCallbackHandler;
37  import info.magnolia.cms.security.auth.callback.PlainTextCallbackHandler;
38  
39  import javax.servlet.http.HttpServletRequest;
40  import javax.servlet.http.HttpServletResponse;
41  
42  import org.apache.commons.lang.StringUtils;
43  import org.slf4j.Logger;
44  import org.slf4j.LoggerFactory;
45  
46  /**
47   * Uses the the {@value #PARAMETER_USER_ID} and  {@value #PARAMETER_PSWD} parameters to login.
48   * $Id: FormLogin.java 36890 2010-09-02 11:38:12Z pbaerfuss $
49   */
50  public class FormLogin extends LoginHandlerBase implements LoginHandler {
51  
52      private static final Logger log = LoggerFactory.getLogger(FormLogin.class);
53  
54      public static final String PARAMETER_USER_ID = "mgnlUserId";
55  
56      public static final String PARAMETER_PSWD = "mgnlUserPSWD";
57  
58      public static final String PARAMETER_REALM = "mgnlRealm";
59  
60      /**
61       * The JAAS chain/module to use.
62       */
63  
64      private String jaasChain = "magnolia";
65  
66      public LoginResult handle(HttpServletRequest request, HttpServletResponse response) {
67          String userid = request.getParameter(PARAMETER_USER_ID);
68          if (StringUtils.isNotEmpty(userid)) {
69              String pswd = StringUtils.defaultString(request.getParameter(PARAMETER_PSWD));
70              String realm = StringUtils.defaultString(request.getParameter(PARAMETER_REALM));
71  
72              CredentialsCallbackHandler callbackHandler = new PlainTextCallbackHandler(userid, pswd.toCharArray(), realm);
73              return authenticate(callbackHandler, getJaasChain());
74          }
75          return LoginResult.NOT_HANDLED;
76      }
77  
78      public String getJaasChain() {
79          return this.jaasChain;
80      }
81  
82  
83      public void setJaasChain(String jaasChain) {
84          this.jaasChain = jaasChain;
85      }
86  
87  }