1 package org.cacert.gigi;
3 import java.io.IOException;
4 import java.security.cert.X509Certificate;
5 import java.util.HashMap;
7 import javax.servlet.ServletException;
8 import javax.servlet.http.HttpServlet;
9 import javax.servlet.http.HttpServletRequest;
10 import javax.servlet.http.HttpServletResponse;
11 import javax.servlet.http.HttpSession;
13 public class Gigi extends HttpServlet {
14 private HashMap<String, Page> pages = new HashMap<String, Page>();
16 public void init() throws ServletException {
17 pages.put("login", new LoginPage());
22 protected void service(HttpServletRequest req, HttpServletResponse resp)
23 throws ServletException, IOException {
24 X509Certificate[] cert = (X509Certificate[]) req
25 .getAttribute("javax.servlet.request.X509Certificate");
26 HttpSession hs = req.getSession(false);
27 if (hs == null || !((Boolean) hs.getAttribute("loggedin"))) {
29 tryAuthWithCertificate(req, cert[0]);
30 hs = req.getSession(false);
33 if (req.getMethod().equals("POST") && req.getPathInfo() != null
34 && req.getPathInfo().equals("/login")) {
36 resp.sendRedirect("/");
39 if (req.getPathInfo() != null && req.getPathInfo().equals("/logout")) {
41 hs.setAttribute("loggedin", false);
44 resp.sendRedirect("/");
48 if (hs == null || !((Boolean) hs.getAttribute("loggedin"))) {
49 resp.getWriter().println("Access denied. Sending login form.");
50 pages.get("login").doGet(req, resp);
53 resp.getWriter().println("Access granted.");
56 private void authWithUnpw(HttpServletRequest req) {
57 String un = req.getParameter("username");
58 String pw = req.getParameter("password");
59 // TODO dummy password check if (un.equals(pw)) {
60 HttpSession hs = req.getSession();
61 hs.setAttribute("loggedin", true);
63 private void tryAuthWithCertificate(HttpServletRequest req,
64 X509Certificate x509Certificate) {
65 // TODO ckeck if certificate is valid
66 HttpSession hs = req.getSession();
67 hs.setAttribute("loggedin", true);