Examples with InvalidLoginException fi.internetix.smvc.InvalidLoginException used on opensource projects

Example 1 with InvalidLoginException

use of fi.internetix.smvc.InvalidLoginException in project pyramus by otavanopisto.

the class LoginJSONRequestController method process.

/**
 * Processes the request to log in. Authorizes the given credentials and if they match a user,
 * stores the user into the session (keys <code>loggedUserId</code>, <code>loggedUserName</code>,
 * and <code>loggedUserRole</code>).
 * <p/>
 * If the session contains a <code>loginRedirectUrl</code> key, redirects the user to that URL.
 * Otherwise, redirects back to the index page of the application.
 * <p/>
 * If the user is already logged in or the authentication fails, a <code>PyramusRuntimeException</code>
 * is thrown with a localized message stating so.
 *
 * @param jsonRequestContext The JSON request context
 */
public void process(JSONRequestContext jsonRequestContext) {
    // Fields submitted from the web page
    String username = jsonRequestContext.getRequest().getParameter("username");
    String password = jsonRequestContext.getRequest().getParameter("password");
    Locale locale = jsonRequestContext.getRequest().getLocale();
    // Ensure that the user trying to login isn't already logged in
    HttpSession session = jsonRequestContext.getRequest().getSession(true);
    if (!session.isNew() && session.getAttribute("loggedUserId") != null) {
        String msg = Messages.getInstance().getText(locale, "users.login.alreadyLoggedIn");
        throw new AlreadyLoggedInException(PyramusStatusCode.ALREADY_LOGGED_IN, msg);
    }
    for (InternalAuthenticationProvider provider : AuthenticationProviderVault.getInstance().getInternalAuthenticationProviders()) {
        try {
            User user = provider.getUser(username, password);
            if (user != null && !user.getArchived() && !Role.CLOSED.equals(user.getRole())) {
                // User has been authorized, so store him in the session
                session.setAttribute("loggedUserId", user.getId());
                session.setAttribute("loggedUserName", user.getFullName());
                session.setAttribute("authenticationProvider", provider.getName());
                if (user instanceof StaffMember) {
                    session.setAttribute("loggedUserRole", UserRole.valueOf(((StaffMember) user).getRole().name()));
                }
                try {
                    DAOFactory.getInstance().getLoginLogDAO().create(user, new Date());
                } catch (Exception ex) {
                    ex.printStackTrace();
                }
                if (session.getAttribute("loginRedirectUrl") != null) {
                    String url = (String) session.getAttribute("loginRedirectUrl");
                    session.removeAttribute("loginRedirectUrl");
                    jsonRequestContext.setRedirectURL(url);
                } else {
                    jsonRequestContext.setRedirectURL(jsonRequestContext.getRequest().getContextPath() + "/index.page");
                }
                return;
            }
        } catch (LocalUserMissingException lume) {
            throw new SmvcRuntimeException(PyramusStatusCode.LOCAL_USER_MISSING, Messages.getInstance().getText(locale, "users.login.localUserMissing", new String[] { lume.getExternalUser() }));
        } catch (AuthenticationException ae) {
            throw new SmvcRuntimeException(ae);
        }
    }
    // Reaching this point means no authentication provider authorized the user, so throw a login exception
    String msg = Messages.getInstance().getText(jsonRequestContext.getRequest().getLocale(), "users.login.loginFailed");
    throw new InvalidLoginException(msg);
}

Example 2 with InvalidLoginException

use of fi.internetix.smvc.InvalidLoginException in project pyramus by otavanopisto.

the class Servlet method doService.

private void doService(HttpServletRequest request, HttpServletResponse response) throws ServletException {
    try {
        userTransaction.begin();
    } catch (Exception e) {
        Logging.logException(e);
        throw new ServletException(e);
    }
    RequestContext requestContext = null;
    RequestController requestController;
    RequestDispatchContext dispatchContext;
    if (requestDispatcher != null && requestDispatcher.canHandle(request, response)) {
        dispatchContext = requestDispatcher.getContext(request, response);
        requestController = dispatchContext.getRequestController();
    } else {
        String uri = request.getRequestURI();
        String ctxPath = request.getContextPath();
        String controllerName = uri.substring(ctxPath.length() + 1);
        if (StringUtils.isNotBlank(applicationPath)) {
            controllerName = controllerName.substring(applicationPath.length());
        }
        requestController = RequestControllerMapper.getRequestController(controllerName);
        dispatchContext = new RequestDispatchContext(requestController, new DefaultParameterHandlerImpl(request, decodeGETUtf));
    }
    int statusCode = StatusCode.OK;
    try {
        if (requestController == null) {
            requestContext = new PageRequestContext(dispatchContext, request, response, getServletContext(), errorJspPage);
            throw new PageNotFoundException(request.getLocale());
        } else if (requestController instanceof PageController) {
            requestContext = new PageRequestContext(dispatchContext, request, response, getServletContext(), errorJspPage);
        } else if (requestController instanceof JSONRequestController) {
            requestContext = new JSONRequestContext(dispatchContext, request, response, getServletContext());
        } else if (requestController instanceof BinaryRequestController) {
            requestContext = new BinaryRequestContext(dispatchContext, request, response, getServletContext());
        }
        // Let the controller authorize the request. Most common exceptions thrown include
        // LoginRequiredException and AccessDeniedException
        requestController.authorize(requestContext);
        if (requestController instanceof PageController) {
            ((PageController) requestController).process((PageRequestContext) requestContext);
        } else if (requestController instanceof JSONRequestController) {
            ((JSONRequestController) requestController).process((JSONRequestContext) requestContext);
        } else if (requestController instanceof BinaryRequestController) {
            ((BinaryRequestController) requestController).process((BinaryRequestContext) requestContext);
        }
    } catch (LoginRequiredException lre) {
        if (platformErrorListener != null)
            platformErrorListener.onLoginRequiredException(request, response, lre);
        Logging.logInfo("Login required for " + getCurrentUrl(request, true));
        if (requestController instanceof PageController) {
            HttpSession session = requestContext.getRequest().getSession(true);
            session.setAttribute("loginRedirectUrl", lre.getRedirectUrl());
            if (lre.getContextType() != null && lre.getContextId() != null) {
                session.setAttribute("loginContextType", lre.getContextType());
                session.setAttribute("loginContextId", lre.getContextId());
            }
            requestContext.setRedirectURL(loginUrl);
        } else {
            // TODO LoginRequiredException for requests other than pages?
            statusCode = lre.getStatusCode();
            requestContext.addMessage(Severity.WARNING, lre.getMessage());
        }
    } catch (PageNotFoundException pnfe) {
        if (platformErrorListener != null)
            platformErrorListener.onPageNotFoundException(request, response, pnfe);
        Logging.logInfo("404 - " + getCurrentUrl(request, true));
        statusCode = pnfe.getStatusCode();
        if (requestContext != null) {
            requestContext.getResponse().setStatus(HttpServletResponse.SC_NOT_FOUND);
            requestContext.addMessage(Severity.WARNING, pnfe.getMessage());
        } else {
            response.setStatus(HttpServletResponse.SC_INTERNAL_SERVER_ERROR);
        }
    } catch (AccessDeniedException ade) {
        if (platformErrorListener != null)
            platformErrorListener.onAccessDeniedException(request, response, ade);
        Logging.logInfo("403 - " + getCurrentUrl(request, true) + " - " + requestContext.getLoggedUserId());
        statusCode = ade.getStatusCode();
        requestContext.getResponse().setStatus(HttpServletResponse.SC_FORBIDDEN);
        requestContext.addMessage(Severity.WARNING, ade.getMessage());
    } catch (InvalidLoginException ile) {
        Logging.logInfo("Invalid login credentials");
        statusCode = ile.getStatusCode();
        requestContext.addMessage(Severity.ERROR, ile.getMessage());
    } catch (AlreadyLoggedInException ile) {
        Logging.logInfo("Already logged in");
        statusCode = ile.getStatusCode();
        requestContext.addMessage(Severity.ERROR, ile.getMessage());
    } catch (SmvcRuntimeException pre) {
        if (platformErrorListener != null)
            platformErrorListener.onSmvcRuntimeException(request, response, pre);
        Logging.logException(pre);
        statusCode = pre.getStatusCode();
        requestContext.addMessage(Severity.ERROR, pre.getMessage());
    } catch (Exception e) {
        if (platformErrorListener != null)
            platformErrorListener.onUncontrolledException(request, response, e);
        // All other exceptions are considered to be fatal and unexpected, so the request
        // transaction is rolled back, the stack trace of the exception is printed out, and
        // an error view is shown
        Logging.logException(e);
        statusCode = StatusCode.UNDEFINED;
        requestContext.addMessage(Severity.CRITICAL, e.getMessage());
    } finally {
        try {
            // Pre-commit response
            requestContext.writePreCommitResponse(statusCode);
            if (statusCode == StatusCode.OK) {
                userTransaction.commit();
            } else {
                userTransaction.rollback();
            }
            // Post-commit response
            requestContext.writePostCommitResponse(statusCode);
        } catch (Exception e) {
            if (platformErrorListener != null)
                platformErrorListener.onTransactionCommitException(request, response, e);
            Logging.logException(e);
            throw new ServletException(e);
        }
    }
}