Roberto Sánchez
2013-12-19 4362922ba00a22d9177df1731673b5fb4db03fb5
securis/src/main/java/net/curisit/securis/services/BasicServices.java
....@@ -3,6 +3,7 @@
33 import java.io.IOException;
44 import java.net.URI;
55
6
+import javax.annotation.security.RolesAllowed;
67 import javax.servlet.http.HttpServletRequest;
78 import javax.ws.rs.FormParam;
89 import javax.ws.rs.GET;
....@@ -40,8 +41,8 @@
4041 @GET
4142 @Produces(
4243 { MediaType.TEXT_HTML })
43
- public Response index() {
44
-
44
+ public Response index(@Context HttpServletRequest request) {
45
+ log.info("index session: " + request.getSession());
4546 URI uri = UriBuilder.fromUri("/login").build();
4647 return Response.seeOther(uri).build();
4748 // return Response.ok().entity("License server").build();
....@@ -51,7 +52,8 @@
5152 @Path("/login")
5253 @Produces(
5354 { MediaType.TEXT_HTML })
54
- public Response login() {
55
+ public Response login(@Context HttpServletRequest request) {
56
+ log.info("index login: " + request.getSession());
5557 try {
5658 String index = IOUtils.toString(this.getClass().getResourceAsStream("/static/login.html"));
5759 return Response.ok().entity(index).build();
....@@ -67,9 +69,11 @@
6769 @Produces(
6870 { MediaType.TEXT_HTML })
6971 public Response login(@FormParam("user") String user, @FormParam("password") String password, @Context HttpServletRequest request) {
72
+ log.info("index session: " + request.getSession());
7073 log.info("Request: " + request.getParameter("user"));
71
- log.info("user/pass: {} == {} ? ", user, password);
74
+ log.info("is user in role: {} == {} ? ", "advance", request.isUserInRole("advance"));
7275 // log.info("user: {} == {} ? " + request.getParameter("user"), user);
76
+ request.getSession().setAttribute("user", user);
7377 URI uri = UriBuilder.fromUri("/main").build();
7478 return Response.seeOther(uri).build();
7579 }
....@@ -81,8 +85,10 @@
8185 @Path("/main")
8286 @Produces(
8387 { MediaType.TEXT_HTML })
84
- public Response main() {
88
+ @RolesAllowed("advance")
89
+ public Response main(@Context HttpServletRequest request) {
8590 try {
91
+ log.info("Is user in role advance: {}", request.isUserInRole("advance"));
8692 String index = IOUtils.toString(this.getClass().getResourceAsStream("/static/main.html"));
8793 return Response.ok().entity(index).build();
8894 } catch (IOException e) {
....@@ -92,6 +98,18 @@
9298 return Response.status(Status.FORBIDDEN).build();
9399
94100 }
101
+
102
+ @GET
103
+ @Path("/logout")
104
+ @Produces(
105
+ { MediaType.TEXT_HTML })
106
+ public Response logout(@Context HttpServletRequest request) {
107
+ request.getSession().setAttribute("user", null);
108
+ URI uri = UriBuilder.fromUri("/login").build();
109
+ return Response.seeOther(uri).build();
110
+
111
+ }
112
+
95113 //
96114 // private <T> ServiceResponse<T> buildErrorResponse(ServiceResponse<T> response, String msgErrorCode) {
97115 // response.setSuccess(false);