Java tutorial
/* * To change this license header, choose License Headers in Project Properties. * To change this template file, choose Tools | Templates * and open the template in the editor. */ package com.creativity.security; import com.creativity.util.FacesUtil; import java.io.IOException; import java.util.Collection; import javax.servlet.http.HttpServletRequest; import javax.servlet.http.HttpSession; import org.apache.commons.logging.Log; import org.apache.commons.logging.LogFactory; import org.springframework.security.core.Authentication; import org.springframework.security.core.GrantedAuthority; import org.springframework.security.web.DefaultRedirectStrategy; import org.springframework.security.web.RedirectStrategy; import org.springframework.security.web.WebAttributes; import org.springframework.security.web.authentication.AuthenticationSuccessHandler; import javax.servlet.http.HttpServletResponse; /** * * @author rafael.lima */ public class MySimpleUrlAuthenticationSuccessHandler implements AuthenticationSuccessHandler { protected Log logger = LogFactory.getLog(this.getClass()); private RedirectStrategy redirectStrategy = new DefaultRedirectStrategy(); @Override public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException { handle(request, FacesUtil.getServletResponse(), authentication); clearAuthenticationAttributes(request); } protected void handle(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IOException { String targetUrl = determineTargetUrl(authentication); if (response.isCommitted()) { logger.debug("Response has already been committed. Unable to redirect to " + targetUrl); return; } redirectStrategy.sendRedirect(request, response, targetUrl); } /** * Builds the target URL according to the logic defined in the main class * Javadoc. */ protected String determineTargetUrl(Authentication authentication) { boolean isUser = false; boolean isAdmin = false; boolean isAtendente = false; boolean isFinanceiro = false; Collection<? extends GrantedAuthority> authorities = authentication.getAuthorities(); for (GrantedAuthority grantedAuthority : authorities) { if (grantedAuthority.getAuthority().equals("GESTOR")) { isUser = true; break; } else if (grantedAuthority.getAuthority().equals("ADMINISTRADOR")) { isAdmin = true; break; } else if (grantedAuthority.getAuthority().equals("FINANCEIRO")) { isFinanceiro = true; break; } if (grantedAuthority.getAuthority().equals("ATENDENTE")) { isAtendente = true; break; } else { } } if (isUser) { return "/DashboardGestor.xhtml"; } else if (isAdmin) { return "/DashboardAdmin.xhtml"; } else if (isFinanceiro) { return "/DashboardAdmin.xhtml"; } if (isAtendente) { return "/DashboardAdmin.xhtml"; } else { throw new IllegalStateException(); } } protected void clearAuthenticationAttributes(HttpServletRequest request) { HttpSession session = request.getSession(false); if (session == null) { return; } session.removeAttribute(WebAttributes.AUTHENTICATION_EXCEPTION); } public void setRedirectStrategy(RedirectStrategy redirectStrategy) { this.redirectStrategy = redirectStrategy; } protected RedirectStrategy getRedirectStrategy() { return redirectStrategy; } }