src/org/cacert/gigi/Gigi.java

   1 package org.cacert.gigi;
   2
   3 import java.io.IOException;
   4 import java.security.cert.X509Certificate;
   5 import java.util.HashMap;
   6
   7 import javax.servlet.ServletException;
   8 import javax.servlet.http.HttpServlet;
   9 import javax.servlet.http.HttpServletRequest;
  10 import javax.servlet.http.HttpServletResponse;
  11 import javax.servlet.http.HttpSession;
  12
  13 import org.cacert.gigi.pages.LoginPage;
  14 import org.cacert.gigi.pages.MainPage;
  15 import org.cacert.gigi.pages.Page;
  16
  17 public class Gigi extends HttpServlet {
  18         private static final long serialVersionUID = -6386785421902852904L;
  19
  20         private HashMap<String, Page> pages = new HashMap<String, Page>();
  21
  22         @Override
  23         public void init() throws ServletException {
  24                 pages.put("/login", new LoginPage("CACert - Login"));
  25                 pages.put("/", new MainPage("CACert - Home"));
  26                 super.init();
  27         }
  28
  29         @Override
  30         protected void service(HttpServletRequest req, HttpServletResponse resp)
  31                         throws ServletException, IOException {
  32                 X509Certificate[] cert = (X509Certificate[]) req
  33                                 .getAttribute("javax.servlet.request.X509Certificate");
  34                 HttpSession hs = req.getSession(false);
  35                 if (hs == null || !((Boolean) hs.getAttribute("loggedin"))) {
  36                         if (cert != null) {
  37                                 tryAuthWithCertificate(req, cert[0]);
  38                                 hs = req.getSession(false);
  39                         }
  40                 }
  41                 if (hs != null && ((Boolean) hs.getAttribute("loggedin"))
  42                                 && req.getPathInfo().equals("/login")) {
  43                         resp.sendRedirect("/");
  44                         return;
  45                 }
  46                 if (req.getMethod().equals("POST") && req.getPathInfo() != null
  47                                 && req.getPathInfo().equals("/login")) {
  48                         authWithUnpw(req);
  49                         resp.sendRedirect("/");
  50                         return;
  51                 }
  52                 if (req.getPathInfo() != null && req.getPathInfo().equals("/logout")) {
  53                         if (hs != null) {
  54                                 hs.setAttribute("loggedin", false);
  55                                 hs.invalidate();
  56                         }
  57                         resp.sendRedirect("/");
  58                         return;
  59                 }
  60
  61                 if ((hs == null || !((Boolean) hs.getAttribute("loggedin")))
  62                                 && !"/login".equals(req.getPathInfo())) {
  63                         System.out.println(req.getPathInfo());
  64                         resp.sendRedirect("/login");
  65                         return;
  66                 }
  67                 if (pages.containsKey(req.getPathInfo())) {
  68                         Page p = pages.get(req.getPathInfo());
  69                         p.doGet(req, resp);
  70                 } else {
  71                         resp.sendError(404, "Page not found.");
  72                 }
  73
  74         }
  75
  76         private void authWithUnpw(HttpServletRequest req) {
  77                 String un = req.getParameter("username");
  78                 String pw = req.getParameter("password");
  79                 // TODO dummy password check if (un.equals(pw)) {
  80                 HttpSession hs = req.getSession();
  81                 hs.setAttribute("loggedin", true);
  82         }
  83
  84         private void tryAuthWithCertificate(HttpServletRequest req,
  85                         X509Certificate x509Certificate) {
  86                 // TODO ckeck if certificate is valid
  87                 HttpSession hs = req.getSession();
  88                 hs.setAttribute("loggedin", true);
  89         }
  90 }