de.lemo.apps.services.security.BasicSecurityRealm.java Source code

Introduction

Here is the source code for de.lemo.apps.services.security.BasicSecurityRealm.java

Source

/**
 * File ./src/main/java/de/lemo/apps/services/security/BasicSecurityRealm.java
 * Lemo-Application-Server for learning analytics.
 * Copyright (C) 2015
 * Leonard Kappe, Andreas Pursian, Sebastian Schwarzrock, Boris Wenzlaff
 * 
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * any later version.
 * 
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU General Public License for more details.
 * 
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 **/

package de.lemo.apps.services.security;

import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.AuthenticationInfo;
import org.apache.shiro.authc.AuthenticationToken;
import org.apache.shiro.authc.ExpiredCredentialsException;
import org.apache.shiro.authc.LockedAccountException;
import org.apache.shiro.authc.SimpleAuthenticationInfo;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.apache.shiro.authz.AuthorizationInfo;
import org.apache.shiro.authz.SimpleAuthorizationInfo;
import org.apache.shiro.realm.AuthorizingRealm;
import org.apache.shiro.subject.PrincipalCollection;
import org.apache.tapestry5.annotations.Log;
import org.apache.tapestry5.ioc.annotations.Inject;
import org.slf4j.Logger;
import de.lemo.apps.entities.User;
import de.lemo.apps.integration.UserDAO;

/**
 * Helper for user authentication
 *
 */
public class BasicSecurityRealm extends AuthorizingRealm {

    @Inject
    private UserDAO userDAO;

    @Inject
    private Logger logger;

    @Override
    @Log
    protected AuthorizationInfo doGetAuthorizationInfo(final PrincipalCollection principals) {
        return new SimpleAuthorizationInfo();
    }

    @Override
    @Log
    protected AuthenticationInfo doGetAuthenticationInfo(final AuthenticationToken token)
            throws AuthenticationException {

        final UsernamePasswordToken userToken = (UsernamePasswordToken) token;
        final String username = userToken.getUsername();
        final String password = String.copyValueOf(userToken.getPassword());

        final User loginUser = userDAO.getUser(userToken.getUsername());

        AuthenticationInfo authInfo = null;

        if (loginUser == null) {
            logger.debug("Login: The user " + username + " doesn't exist.");
            throw new AuthenticationException("The user " + username + " doesn't exist.");
        } else if (loginUser.checkPassword(password)) {
            logger.debug("Login: User " + username + " logged in successfully.");
            authInfo = new SimpleAuthenticationInfo(userToken.getUsername(), userToken.getPassword(), "basic");
        }

        return authInfo;
    }

}