X-Git-Url: https://code.wpia.club/?a=blobdiff_plain;ds=inline;f=src%2Forg%2Fcacert%2Fgigi%2FGigi.java;h=ce0d46a52d81674ec2e4ce75828d85b2ec9ba07f;hb=d4892aa6c2fff51ce1a8edde2643cca46b8f0d29;hp=0cf0c62cc8739dfc8cc37bb85aef2ef52ba8bb0b;hpb=7e979cc57595d265f750ac2076a34a3565b1197d;p=gigi.git diff --git a/src/org/cacert/gigi/Gigi.java b/src/org/cacert/gigi/Gigi.java index 0cf0c62c..ce0d46a5 100644 --- a/src/org/cacert/gigi/Gigi.java +++ b/src/org/cacert/gigi/Gigi.java @@ -5,7 +5,6 @@ import java.io.File; import java.io.FileInputStream; import java.io.IOException; import java.io.InputStreamReader; -import java.security.cert.X509Certificate; import java.util.Calendar; import java.util.HashMap; @@ -18,9 +17,13 @@ import javax.servlet.http.HttpSession; import org.cacert.gigi.pages.LoginPage; import org.cacert.gigi.pages.MainPage; import org.cacert.gigi.pages.Page; +import org.cacert.gigi.pages.TestSecure; +import org.cacert.gigi.pages.main.RegisterPage; import org.eclipse.jetty.util.log.Log; public class Gigi extends HttpServlet { + public static final String LOGGEDIN = "loggedin"; + public static final String USER = "user"; private static final long serialVersionUID = -6386785421902852904L; private String[] baseTemplate; private HashMap pages = new HashMap(); @@ -29,6 +32,8 @@ public class Gigi extends HttpServlet { public void init() throws ServletException { pages.put("/login", new LoginPage("CACert - Login")); pages.put("/", new MainPage("CACert - Home")); + pages.put("/secure", new TestSecure()); + pages.put(RegisterPage.PATH, new RegisterPage()); String templ = ""; try { BufferedReader reader = new BufferedReader(new InputStreamReader( @@ -44,52 +49,35 @@ public class Gigi extends HttpServlet { super.init(); } - @Override protected void service(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { - X509Certificate[] cert = (X509Certificate[]) req - .getAttribute("javax.servlet.request.X509Certificate"); - HttpSession hs = req.getSession(false); - if (hs == null || !((Boolean) hs.getAttribute("loggedin"))) { - if (cert != null) { - tryAuthWithCertificate(req, cert[0]); - hs = req.getSession(false); - } - } - if (hs != null && ((Boolean) hs.getAttribute("loggedin")) - && req.getPathInfo().equals("/login")) { - resp.sendRedirect("/"); - return; - } - if (req.getMethod().equals("POST") && req.getPathInfo() != null - && req.getPathInfo().equals("/login")) { - authWithUnpw(req); - resp.sendRedirect("/"); - return; - } + HttpSession hs = req.getSession(); if (req.getPathInfo() != null && req.getPathInfo().equals("/logout")) { if (hs != null) { - hs.setAttribute("loggedin", false); + hs.setAttribute(LOGGEDIN, null); hs.invalidate(); } resp.sendRedirect("/"); return; } - if ((hs == null || !((Boolean) hs.getAttribute("loggedin"))) - && !"/login".equals(req.getPathInfo())) { - System.out.println(req.getPathInfo()); - resp.sendRedirect("/login"); - return; - } if (pages.containsKey(req.getPathInfo())) { - String b0 = baseTemplate[0]; Page p = pages.get(req.getPathInfo()); + if (p.needsLogin() && hs.getAttribute("loggedin") == null) { + resp.sendRedirect("/login"); + return; + } + + String b0 = baseTemplate[0]; b0 = makeDynTempl(b0, p); - resp.setContentType("text/html"); + resp.setContentType("text/html; charset=utf-8"); resp.getWriter().print(b0); - p.doGet(req, resp); + if (req.getMethod().equals("POST")) { + p.doPost(req, resp); + } else { + p.doGet(req, resp); + } String b1 = baseTemplate[1]; b1 = makeDynTempl(b1, p); resp.getWriter().print(b1); @@ -98,25 +86,11 @@ public class Gigi extends HttpServlet { } } - private String makeDynTempl(String in, Page p) { int year = Calendar.getInstance().get(Calendar.YEAR); in = in.replaceAll("\\$title\\$", p.getTitle()); in = in.replaceAll("\\$year\\$", year + ""); return in; } - private void authWithUnpw(HttpServletRequest req) { - String un = req.getParameter("username"); - String pw = req.getParameter("password"); - // TODO dummy password check if (un.equals(pw)) { - HttpSession hs = req.getSession(); - hs.setAttribute("loggedin", true); - } - private void tryAuthWithCertificate(HttpServletRequest req, - X509Certificate x509Certificate) { - // TODO ckeck if certificate is valid - HttpSession hs = req.getSession(); - hs.setAttribute("loggedin", true); - } }