View Javadoc
1   /**
2    * This file Copyright (c) 2003-2015 Magnolia International
3    * Ltd.  (http://www.magnolia-cms.com). All rights reserved.
4    *
5    *
6    * This file is dual-licensed under both the Magnolia
7    * Network Agreement and the GNU General Public License.
8    * You may elect to use one or the other of these licenses.
9    *
10   * This file is distributed in the hope that it will be
11   * useful, but AS-IS and WITHOUT ANY WARRANTY; without even the
12   * implied warranty of MERCHANTABILITY or FITNESS FOR A
13   * PARTICULAR PURPOSE, TITLE, or NONINFRINGEMENT.
14   * Redistribution, except as permitted by whichever of the GPL
15   * or MNA you select, is prohibited.
16   *
17   * 1. For the GPL license (GPL), you can redistribute and/or
18   * modify this file under the terms of the GNU General
19   * Public License, Version 3, as published by the Free Software
20   * Foundation.  You should have received a copy of the GNU
21   * General Public License, Version 3 along with this program;
22   * if not, write to the Free Software Foundation, Inc., 51
23   * Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
24   *
25   * 2. For the Magnolia Network Agreement (MNA), this file
26   * and the accompanying materials are made available under the
27   * terms of the MNA which accompanies this distribution, and
28   * is available at http://www.magnolia-cms.com/mna.html
29   *
30   * Any modifications to this file must keep this entire header
31   * intact.
32   *
33   */
34  package info.magnolia.cms.security.auth.callback;
35  
36  import info.magnolia.cms.beans.config.MIMEMapping;
37  import info.magnolia.cms.i18n.Messages;
38  import info.magnolia.cms.i18n.MessagesManager;
39  import info.magnolia.cms.security.auth.login.LoginResult;
40  import info.magnolia.cms.util.SimpleFreemarkerHelper;
41  import info.magnolia.context.MgnlContext;
42  import info.magnolia.init.MagnoliaConfigurationProperties;
43  
44  import java.util.HashMap;
45  import java.util.Map;
46  
47  import javax.inject.Inject;
48  import javax.security.auth.login.LoginException;
49  import javax.servlet.http.HttpServletRequest;
50  import javax.servlet.http.HttpServletResponse;
51  
52  import org.apache.commons.lang3.ClassUtils;
53  import org.slf4j.Logger;
54  import org.slf4j.LoggerFactory;
55  
56  /**
57   * Renders a login form using Freemarker and the template configured with {@link #loginForm}.
58   * This is using {@link SimpleFreemarkerUtil}, which means the configured {@link #loginForm} will only be loaded through
59   * the classpath loader and won't have access to shared variables etc. For a more complex login form template,
60   * re-implement a {@link HttpClientCallback} which uses {@link info.magnolia.freemarker.FreemarkerHelper} or the
61   * {@link info.magnolia.rendering.engine.RenderingEngine}
62   */
63  public class FormClientCallback extends AbstractHttpClientCallback {
64  
65      private static final Logger log = LoggerFactory.getLogger(FormClientCallback.class);
66  
67      public static final String ERROR_STRING = "errorString";
68      public static final String SERVICE_CONTACT = "serviceContact";
69      private final SimpleFreemarkerHelper freemarkerHelper;
70  
71      private MagnoliaConfigurationProperties configurationProperties;
72      private String loginForm;
73  
74      @Inject
75      public FormClientCallback(MagnoliaConfigurationProperties configurationProperties) {
76          this.configurationProperties = configurationProperties;
77          this.freemarkerHelper = new SimpleFreemarkerHelper(getClass(), false);
78      }
79  
80      @Override
81      public void handle(HttpServletRequest request, HttpServletResponse response) {
82          try {
83              if (!response.isCommitted()) {
84                  response.setContentType("text/html");
85                  if (null == request.getCharacterEncoding()) {
86                      response.setCharacterEncoding(MIMEMapping.getContentEncodingOrDefault("text/html"));
87                  }
88              }
89              freemarkerHelper.render(getLoginForm(), getTemplateContext(), response.getWriter());
90          } catch (Throwable t) {
91              log.error("exception while writing login template", t);
92          }
93      }
94  
95      public String getLoginForm() {
96          return loginForm;
97      }
98  
99      public void setLoginForm(String loginForm) {
100         this.loginForm = loginForm;
101     }
102 
103     /**
104      * @deprecated since 5.4, use {@link #getTemplateContext}
105      */
106     @Deprecated
107     protected Map<String, Object> getMessages() {
108         return new HashMap<>();
109     }
110 
111     /**
112      * Simply sets "errorString" in case of login exception.
113      * Override this to pass more objects to the freemarker template.
114      *
115      * @return a map containing translated messages
116      */
117     protected Map<String, Object> getTemplateContext() {
118         LoginResult loginResult = LoginResult.getCurrentLoginResult();
119         LoginException exception = loginResult.getLoginException();
120         Map<String, Object> tplCtx = new HashMap<String, Object>();
121         if (null != exception) {
122             final String exName = ClassUtils.getShortClassName(exception, null);
123             final Messages mm = MessagesManager.getMessages();
124             final String defaultMessage = mm.get("login.defaultError");
125             tplCtx.put(ERROR_STRING, mm.getWithDefault("login." + exName, defaultMessage));
126         }
127         tplCtx.put("loginError", Boolean.valueOf(loginResult.getStatus() == LoginResult.STATUS_FAILED));
128 
129         String serviceContact = this.configurationProperties.getProperty("magnolia.service.contact");
130         if (serviceContact != null) {
131             tplCtx.put(SERVICE_CONTACT, serviceContact);
132         }
133 
134         tplCtx.put("contextPath", MgnlContext.getContextPath());
135 
136         // In case someone extended getMessages()
137         final Map<String, Object> deprecatedMethodResult = getMessages();
138         tplCtx.putAll(deprecatedMethodResult);
139         // TODO but what if they extended handle() and use getMessages there ?
140 
141         return tplCtx;
142     }
143 
144 }