import java.io.IOException;
import java.security.cert.X509Certificate;
+import java.util.HashMap;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
+import org.cacert.gigi.pages.LoginPage;
+import org.cacert.gigi.pages.MainPage;
+
public class Gigi extends HttpServlet {
+ private HashMap<String, Page> pages = new HashMap<String, Page>();
+
+ @Override
+ public void init() throws ServletException {
+ pages.put("/login", new LoginPage());
+ pages.put("/", new MainPage());
+ super.init();
+ }
+
@Override
protected void service(HttpServletRequest req, HttpServletResponse resp)
throws ServletException, IOException {
hs = req.getSession(false);
}
}
+ if (hs != null && ((Boolean) hs.getAttribute("loggedin"))
+ && req.getPathInfo().equals("/login")) {
+ resp.sendRedirect("/");
+ return;
+ }
if (req.getMethod().equals("POST") && req.getPathInfo() != null
&& req.getPathInfo().equals("/login")) {
authWithUnpw(req);
hs.setAttribute("loggedin", false);
hs.invalidate();
}
- authWithUnpw(req);
resp.sendRedirect("/");
return;
}
- if (hs == null || !((Boolean) hs.getAttribute("loggedin"))) {
- resp.setContentType("text/html");
- resp.getWriter().println("Access denied. Sending login form.");
- resp.getWriter()
- .println(
- "<form method='POST' action='/login'>"
- + "<input type='text' name='username'>"
- + "<input type='password' name='password'> <input type='submit' value='login'></form>");
+ if ((hs == null || !((Boolean) hs.getAttribute("loggedin")))
+ && !"/login".equals(req.getPathInfo())) {
+ System.out.println(req.getPathInfo());
+ resp.sendRedirect("/login");
return;
}
- resp.getWriter().println("Access granted.");
+ if (pages.containsKey(req.getPathInfo())) {
+ Page p = pages.get(req.getPathInfo());
+ p.doGet(req, resp);
+ } else {
+ resp.sendError(404, "Page not found.");
+ }
}
+
private void authWithUnpw(HttpServletRequest req) {
String un = req.getParameter("username");
String pw = req.getParameter("password");
HttpSession hs = req.getSession();
hs.setAttribute("loggedin", true);
}
+
private void tryAuthWithCertificate(HttpServletRequest req,
X509Certificate x509Certificate) {
// TODO ckeck if certificate is valid