Package edu.cornell.mannlib.vitro.webapp.controller.authenticate

Class LoginExternalAuthReturn

java.lang.Object

javax.servlet.GenericServlet

javax.servlet.http.HttpServlet

edu.cornell.mannlib.vitro.webapp.controller.authenticate.BaseLoginServlet

edu.cornell.mannlib.vitro.webapp.controller.authenticate.LoginExternalAuthReturn

All Implemented Interfaces:

Serializable, javax.servlet.Servlet, javax.servlet.ServletConfig

@WebServlet(name="loginExternalAuthReturn",
            urlPatterns="/loginExternalAuthReturn")
public class LoginExternalAuthReturn
extends BaseLoginServlet

Handle the return from the external authorization login server. If we are successful, record the login. Otherwise, display the failure.

See Also:

Serialized Form

Constructor Summary

Constructors

Constructor	Description
LoginExternalAuthReturn()

Method Summary

Modifier and Type	Method	Description
protected void	complainAndReturnToReferrer(javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse resp, String sessionAttributeForReferrer, LoginProcessBean.Message message)	Store an error message in the login bean and go back where we came from.
protected void	doGet(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response)
protected void	doPost(javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse resp)	Returning from the external authorization server.

Methods inherited from class edu.cornell.mannlib.vitro.webapp.controller.authenticate.BaseLoginServlet

figureHomePageUrl, getAuthenticator, messageLoginDisabled, messageLoginFailed

Methods inherited from class javax.servlet.http.HttpServlet

doDelete, doHead, doOptions, doPut, doTrace, getLastModified, service, service

Methods inherited from class javax.servlet.GenericServlet

destroy, getInitParameter, getInitParameterNames, getServletConfig, getServletContext, getServletInfo, getServletName, init, init, log, log

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

LoginExternalAuthReturn

public LoginExternalAuthReturn()

Method Detail

doPost

protected void doPost(javax.servlet.http.HttpServletRequest req,
                      javax.servlet.http.HttpServletResponse resp)
               throws javax.servlet.ServletException,
                      IOException

 Returning from the external authorization server. If we were successful,
 the header will contain the name of the user who just logged in.

 Deal with these possibilities:
 - The header name was not configured in runtime.properties. Complain.
 - No username: the login failed. Complain
 - User corresponds to a User acocunt. Record the login.
 - User corresponds to an Individual (self-editor).
 - User is not recognized.

 On entry, we expect to find:
 - A LoginProcessBean, which will give us the afterLoginUrl if the login
      succeeds.
 - A referrer URL, to which we will redirect if the login fails.
      TODO: is this equal to LoginProcessBean.getLoginPageUrl()?
 These are removed on exit.
 

Overrides:

doPost in class javax.servlet.http.HttpServlet

Throws:

javax.servlet.ServletException

IOException

complainAndReturnToReferrer

protected void complainAndReturnToReferrer(javax.servlet.http.HttpServletRequest req,
                                           javax.servlet.http.HttpServletResponse resp,
                                           String sessionAttributeForReferrer,
                                           LoginProcessBean.Message message)
                                    throws IOException

Description copied from class: BaseLoginServlet

Store an error message in the login bean and go back where we came from. Remove the referring URL from the session after using it.

Overrides:

complainAndReturnToReferrer in class BaseLoginServlet

Throws:

IOException

doGet

protected void doGet(javax.servlet.http.HttpServletRequest request,
                     javax.servlet.http.HttpServletResponse response)
              throws javax.servlet.ServletException,
                     IOException

Overrides:

doGet in class javax.servlet.http.HttpServlet

Throws:

javax.servlet.ServletException

IOException