com.groiss.org
Class AuthUtil

java.lang.Object
  com.groiss.org.AuthUtil

public class AuthUtil
extends java.lang.Object

Utilities for writing an authorization class.

Constructor Summary

AuthUtil()

Method Summary

static java.lang.String	authorizeBrowser(javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse res, User u) This function can be called from the client to instantiate a session.
static void	authorizeBrowser(javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse res, User u, java.lang.String nextUrl) This function can be called from the client to instantiate a session and send the session cookie to the browser.
static void	checkSysadmPasswd(java.lang.String passwd)
static java.security.Principal	checkUser(java.lang.String userId, java.lang.String passwd, java.lang.String clientAddr) Checks the user.
static java.security.Principal	checkUser(java.lang.String userId, java.lang.String passwd, java.lang.String clientAddr, boolean ignoreUnsuccessfulLogin) Checks the user.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthUtil

public AuthUtil()

Method Detail

authorizeBrowser

public static java.lang.String authorizeBrowser(javax.servlet.http.HttpServletRequest req,
                                                javax.servlet.http.HttpServletResponse res,
                                                User u)
                                         throws java.io.IOException

This function can be called from the client to instantiate a session.

Parameters:

req - the HttpServletRequest

res - the HttpServletResponse

u - the user

Returns:

null, if no error condition occurred, or a string containing the error message which should be written back to the client; via res.getWriter().println(result);

Throws:

java.io.IOException

authorizeBrowser

public static void authorizeBrowser(javax.servlet.http.HttpServletRequest req,
                                    javax.servlet.http.HttpServletResponse res,
                                    User u,
                                    java.lang.String nextUrl)
                             throws java.io.IOException

This function can be called from the client to instantiate a session and send the session cookie to the browser.

Parameters:

req - the HttpServletRequest

res - the HttpServletResponse

u - the user

nextUrl - the url for redirection

Throws:

java.io.IOException

checkUser

public static java.security.Principal checkUser(java.lang.String userId,
                                                java.lang.String passwd,
                                                java.lang.String clientAddr)
                                         throws java.lang.Exception

Checks the user. Compares the password and checks whether the user is active. If one of the check fails an Exception is thrown. If the password is not correct an unsuccessful login will be recorded.

Parameters:

userId - the id of the user

passwd - the passwd

clientAddr - the ip address of the client

Returns:

the user with the given id, if found.

Throws:

java.lang.Exception

checkUser

public static java.security.Principal checkUser(java.lang.String userId,
                                                java.lang.String passwd,
                                                java.lang.String clientAddr,
                                                boolean ignoreUnsuccessfulLogin)
                                         throws java.lang.Exception

Checks the user. Compares the password and checks whether the user is active. If one of the check fails an Exception is thrown. If the password is not correct an unsuccessful login will be recorded but only if parameter ignoreUnsuccessfulLogin ist not true.

Parameters:

userId - the id of the user

passwd - the passwd

clientAddr - the ip address of the client

ignoreUnsuccessfulLogin - if true unsuccessful logins will not be recorded

Returns:

the user with the given id, if found.

Throws:

java.lang.Exception

checkSysadmPasswd

public static void checkSysadmPasswd(java.lang.String passwd)