SecurityServlet.java
1.32 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
package security;
import static org.apache.http.HttpStatus.SC_FORBIDDEN;
import static org.apache.http.HttpStatus.SC_OK;
import java.io.IOException;
import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import br.gov.frameworkdemoiselle.security.AuthenticationException;
import br.gov.frameworkdemoiselle.security.Credentials;
import br.gov.frameworkdemoiselle.security.SecurityContext;
import br.gov.frameworkdemoiselle.util.Beans;
@WebServlet("/login")
public class SecurityServlet extends HttpServlet {
private static final long serialVersionUID = 1L;
@Override
protected void doGet(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
String result = request.getHeader("Authorization");
result = (result == null ? request.getHeader("authorization") : result);
Credentials credentials = Beans.getReference(Credentials.class);
credentials.setUsername(request.getParameter("username"));
credentials.setPassword(request.getParameter("password"));
try {
Beans.getReference(SecurityContext.class).login();
response.setStatus(SC_OK);
} catch (AuthenticationException e) {
response.setStatus(SC_FORBIDDEN);
}
}
}