Metacat

/**

 *  '$RCSfile$'

 *    Purpose: A Class that tracks sessions for MetaCatServlet users.

 *  Copyright: 2000 Regents of the University of California and the

 *             National Center for Ecological Analysis and Synthesis

 *    Authors: Matt Jones

 *

 *   '$Author$'

 *     '$Date$'

 * '$Revision$'

 * This program is free software; you can redistribute it and/or modify

 * it under the terms of the GNU General Public License as published by

 * the Free Software Foundation; either version 2 of the License, or

 * (at your option) any later version.

 *

 * This program is distributed in the hope that it will be useful,

 * but WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

 * GNU General Public License for more details.

 *

 * You should have received a copy of the GNU General Public License

 * along with this program; if not, write to the Free Software

 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA

package edu.ucsb.nceas.metacat;

import java.net.ConnectException;

import javax.servlet.http.HttpSession;

import javax.servlet.http.HttpServletRequest;

 * A Class that implements session tracking for MetaCatServlet users.

 * User's login data are stored in the session object.

 * User authentication is done through a dynamically determined AuthInterface.

 */

public class AuthSession {

  private String authClass = null;

  private HttpSession session = null;

  private AuthInterface authService = null;

  private String statusMessage = null;

  /**

   */

    // create an instance of the auth class

    MetaCatUtil util = new MetaCatUtil();

    this.authService = (AuthInterface)createObject(authClass);

   * Get the new session

   */

  public HttpSession getSessions()

  {

    return this.session;

  }

   * determine if the credentials for this session are valid by

   * @param request the request made from the client

   * @param username the username entered when login

   * @param password the password entered when login

                              String username, String password)  {

        // getGroups returns groupname along with their description.

        // hence groups[] is generated from groupsWithDescription[][]

        String[][] groupsWithDescription =

            authService.getGroups(username,password,username);

        String groups[] = new String[groupsWithDescription.length];

          groups[i] = groupsWithDescription[i][0];

        }

        {

          groups = new String[0];

        }

        String[] userInfo =

            authService.getUserInfo(username,password);

        this.session = createSession(request, username, password, groups, userInfo);

        return false;

                "AuthSession.authenticate: " + ce.getMessage();

      message = ise.getMessage();

    // get the current session object, create one if necessary

    HttpSession session = request.getSession(true);

    // if it is still in use invalidate and get a new one

    if ( !session.isNew() ) {

      logMetacat.info("the old session id is : " +

    }

    // in the session obj for use on subsequent calls to Metacat servlet

    session.setAttribute("username", username);

    session.setAttribute("password", password);

    if ( userInfo!=null & userInfo.length == 3 ) {

        session.setAttribute("name", userInfo[0]);

        session.setAttribute("organization", userInfo[1]);

        session.setAttribute("email", userInfo[2]);

    }

  }

   * Get the message associated with authenticating this session. The

   * message is formatted in XML.

   */

    return this.statusMessage;

  }

  /**

   * @param password the user's password

                throws ConnectException

   *

   * @param tag the root element tag for the message (error or success)

   * @param message the message content of the root element

   */

   *

   * @param tag the root element tag for the message (error or success)

   * @param message the message content of the root element

   * @param sessionId the session identifier for a successful login

   */

		  String sessionId, String username, String[] groups,

		  String userInfo[])

    out.append("<" + tag + ">");

        if(userInfo != null && userInfo[0]!=null){

        	out.append("\n<name>\n");

        	out.append(userInfo[0]);

        	out.append("\n</name>\n");

        }

        // insert <isAdministrator> tag if the user is an administrator

            out.append("\n  <isAdministrator></isAdministrator>\n");

        }

        // insert <isModerator> tag if the user is a Moderator

            out.append("\n  <isModerator></isModerator>\n");

        }

  }

  /**

   * Instantiate a class using the name of the class at runtime

   *

   * @param className the fully qualified name of the class to instantiate

   */

    try {

      Class classDefinition = Class.forName(className);

      object = classDefinition.newInstance();

    } catch (InstantiationException e) {

    return object;

  }

}