de.appsolve.padelcampus.filter.AdminFilter.java Source code

Introduction

Here is the source code for de.appsolve.padelcampus.filter.AdminFilter.java

Source

/*
 * To change this license header, choose License Headers in Project Properties.
 * To change this template file, choose Tools | Templates
 * and open the template in the editor.
 */
package de.appsolve.padelcampus.filter;

import de.appsolve.padelcampus.constants.Privilege;
import de.appsolve.padelcampus.db.dao.AdminGroupDAOI;
import de.appsolve.padelcampus.db.model.Player;
import de.appsolve.padelcampus.utils.SessionUtil;
import org.apache.commons.lang.StringUtils;
import org.apache.http.HttpStatus;
import org.apache.log4j.Logger;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;

import javax.servlet.*;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.IOException;
import java.util.Enumeration;
import java.util.Set;

@Component("adminFilter")
public class AdminFilter implements Filter {

    private static final Logger LOG = Logger.getLogger(AdminFilter.class);

    @Autowired
    AdminGroupDAOI adminGroupDAO;

    @Autowired
    SessionUtil sessionUtil;

    /**
     * @param config
     * @throws javax.servlet.ServletException
     * @see Filter#init(FilterConfig)
     */
    @Override
    public void init(FilterConfig config) throws ServletException {
        //
    }

    /**
     * @param request
     * @param response
     * @param chain
     * @throws java.io.IOException
     * @throws javax.servlet.ServletException
     * @see Filter#doFilter(ServletRequest, ServletResponse, FilterChain)
     */
    @Override
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
            throws IOException, ServletException {
        if (request instanceof HttpServletRequest && response instanceof HttpServletResponse) {
            HttpServletRequest httpRequest = (HttpServletRequest) request;
            HttpServletResponse httpResponse = (HttpServletResponse) response;
            Player player = sessionUtil.getUser(httpRequest);
            if (player == null) {
                sessionUtil.setLoginRedirectPath(httpRequest, httpRequest.getRequestURI());
                httpResponse.sendRedirect(httpResponse.encodeRedirectURL("/login"));
                return;
            }
            Set<Privilege> privileges = sessionUtil.getPrivileges(httpRequest);
            String pathInfo = httpRequest.getRequestURI().substring(httpRequest.getContextPath().length());
            for (Privilege privilege : privileges) {
                if (privilege.getPathPattern().matcher(pathInfo).matches()) {
                    chain.doFilter(request, response);
                    if (!StringUtils.isEmpty(httpRequest.getMethod())
                            && httpRequest.getMethod().equalsIgnoreCase("POST")) {
                        LOG.info(String.format("AUDIT: %s executed %s %s", player, httpRequest.getMethod(),
                                httpRequest.getRequestURI()));
                        Enumeration<String> parameterNames = request.getParameterNames();
                        while (parameterNames.hasMoreElements()) {
                            String paramName = parameterNames.nextElement();
                            String paramValue = request.getParameter(paramName);
                            LOG.info(String.format("%s: %s", paramName, paramValue));
                        }
                    }
                    return;
                }
            }

            httpResponse.sendError(HttpStatus.SC_FORBIDDEN);
        } else {
            chain.doFilter(request, response);
        }
    }

    /**
     * @see Filter#destroy()
     */
    @Override
    public void destroy() {
        //
    }
}