Commit 66ef9bc6 by Tuomas Riihimäki

Created hostname filter

1 parent b22ca1de
......@@ -4,8 +4,11 @@ import java.util.HashSet;
import java.util.List;
import java.util.Set;
import javax.annotation.Resource;
import javax.ejb.EJB;
import javax.ejb.SessionContext;
import javax.ejb.Stateless;
import javax.servlet.http.HttpSession;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
......@@ -24,6 +27,11 @@ public class SessionHandlerBean implements SessionHandlerBeanLocal {
@EJB
private UserFacade userfacade;
private static final Logger logger = LoggerFactory.getLogger(SessionHandlerBean.class);
@Resource
private SessionContext sctx;
/**
* Default constructor.
*/
......@@ -31,6 +39,7 @@ public class SessionHandlerBean implements SessionHandlerBeanLocal {
// TODO Auto-generated constructor stub
}
@Override
public boolean hasPermission(String target, User user, RolePermission permission) {
User dbusr = userfacade.find(user.getId());
......@@ -41,7 +50,7 @@ public class SessionHandlerBean implements SessionHandlerBeanLocal {
}
}
return false;
}
......
......@@ -9,4 +9,5 @@ public interface SessionHandlerBeanLocal {
boolean hasPermission(String target, User user, RolePermission permission);
}
......@@ -59,6 +59,7 @@
<to-view-id>/modulePossibleReturnValues.xhtml</to-view-id>
</navigation-case>
</navigation-rule>
</faces-config>
......
......@@ -17,13 +17,14 @@
<servlet-name>Faces Servlet</servlet-name>
<url-pattern>*.jsf</url-pattern>
</servlet-mapping>
<filter>
<display-name>EventI18nFilter</display-name>
<filter-name>EventI18nFilter</filter-name>
<filter-class>fi.insomnia.bortal.i18n.EventI18nFilter</filter-class>
<display-name>HostnameFilter</display-name>
<filter-name>HostnameFilter</filter-name>
<filter-class>fi.insomnia.bortal.HostnameFilter</filter-class>
</filter>
<filter-mapping>
<filter-name>EventI18nFilter</filter-name>
<url-pattern>/EventI18nFilter</url-pattern>
<filter-name>HostnameFilter</filter-name>
<servlet-name>Faces Servlet</servlet-name>
</filter-mapping>
</web-app>
\ No newline at end of file
......@@ -16,8 +16,8 @@
<ui:define name="header">Edit user</ui:define>
<ui:define name="content">
<users:list />
<users:list />
</ui:define>
<ui:define name="footer">footer</ui:define>
</ui:composition>
......
package fi.insomnia.bortal;
import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
/**
* Servlet Filter implementation class HostnameFilter
*/
public class HostnameFilter implements Filter {
private static final String HTTP_URL_HOSTNAME = "HTTP_URL_HOSTNAME";
private static final Logger logger = LoggerFactory.getLogger(HostnameFilter.class);
/**
* Default constructor.
*/
public HostnameFilter() {
// TODO Auto-generated constructor stub
}
/**
* @see Filter#destroy()
*/
public void destroy() {
// Nothing...
}
/**
* @see Filter#doFilter(ServletRequest, ServletResponse, FilterChain)
*/
public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
if (request != null && request instanceof HttpServletRequest) {
HttpServletRequest httpRequest = ((HttpServletRequest) request);
StringBuffer url = httpRequest.getRequestURL();
logger.warn("request URL: {}", url);
int beginindex = 7; // Let's skip http://
int slashindex = url.indexOf("/", beginindex); // Find the first
// / from URL
// after http://
int colonindex = url.indexOf(":", beginindex);
int lastindex = slashindex;
if (slashindex > colonindex) {
lastindex = colonindex;
}
if (lastindex < 0) {
lastindex = url.length() - 1;
}
logger.warn("begin: {}, last {}", beginindex, lastindex);
String hostname = url.substring(beginindex, lastindex);
logger.info("Setting hostname to {} ", hostname);
httpRequest.getSession().setAttribute(HTTP_URL_HOSTNAME, hostname);
}
// pass the request along the filter chain
chain.doFilter(request, response);
}
/**
* @see Filter#init(FilterConfig)
*/
public void init(FilterConfig fConfig) throws ServletException {
// Nothing...
}
public static String getHostname(HttpSession sess) {
String ret = null;
if (sess != null) {
Object retObj = sess.getAttribute(HTTP_URL_HOSTNAME);
if (retObj != null)
ret = retObj.toString();
}
return ret;
}
}
......@@ -7,9 +7,12 @@
package fi.insomnia.bortal.handler;
import javax.ejb.EJB;
import javax.enterprise.context.SessionScoped;
import javax.faces.bean.ManagedBean;
import javax.faces.bean.SessionScoped;
import javax.faces.context.FacesContext;
import javax.servlet.http.HttpSession;
import fi.insomnia.bortal.HostnameFilter;
import fi.insomnia.bortal.beans.RolePermission;
import fi.insomnia.bortal.beans.SessionHandlerBeanLocal;
import fi.insomnia.bortal.model.User;
......@@ -18,16 +21,16 @@ import fi.insomnia.bortal.model.User;
*
* @author tuukka
*/
@ManagedBean(name = "sessionHandler")
@ManagedBean(name = "bortalSessionHandler")
@SessionScoped
public class SessionHandler {
public class BortalSessionHandler {
@EJB
private SessionHandlerBeanLocal handlerbean;
private User user;
/** Creates a new instance of SessionHandler */
public SessionHandler() {
public BortalSessionHandler() {
}
public boolean hasPermission(String target, String permission) {
......@@ -41,6 +44,13 @@ public class SessionHandler {
return hasPermission(target, perm);
}
public String getHostname()
{
FacesContext ctx = FacesContext.getCurrentInstance();
HttpSession sess =(HttpSession) ctx.getExternalContext().getSession(false);
return HostnameFilter.getHostname(sess);
}
public boolean hasPermission(String target, RolePermission permission) {
return true;
......@@ -68,4 +78,6 @@ public class SessionHandler {
return user;
}
}
......@@ -6,24 +6,30 @@ import javax.ejb.EJB;
import javax.faces.bean.ManagedBean;
import javax.faces.bean.ManagedProperty;
import javax.faces.bean.SessionScoped;
import javax.faces.context.FacesContext;
import javax.faces.model.ListDataModel;
import javax.servlet.http.HttpSession;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import fi.insomnia.bortal.HostnameFilter;
import fi.insomnia.bortal.beans.SecurityBeanLocal;
import fi.insomnia.bortal.beans.SessionHandlerBeanLocal;
import fi.insomnia.bortal.beans.UserBeanLocal;
import fi.insomnia.bortal.exceptions.PermissionDeniedException;
import fi.insomnia.bortal.handler.SessionHandler;
import fi.insomnia.bortal.handler.BortalSessionHandler;
import fi.insomnia.bortal.model.User;
@ManagedBean(name = "userView")
@SessionScoped
public class UserView {
@ManagedProperty("#{sessionHandler}")
private SessionHandler sessionhandler;
@ManagedProperty("#{bortalSessionHandler}")
private BortalSessionHandler sessionhandler;
@EJB
private SessionHandlerBeanLocal sessionbean;
@EJB
private UserBeanLocal userBean;
......@@ -40,14 +46,16 @@ public class UserView {
return "userEdit";
}
public String getLocale() {
return "en_IN_XII";
}
public String createUser() {
if (!sessionhandler.canWrite("userManagement")) {
if (!getSessionhandler().canWrite("userManagement")) {
// Give message to administration what happened here.
throw new PermissionDeniedException("User " + sessionhandler.getUser() + " does not have permission to create user!",securitybean);
throw new PermissionDeniedException("User " + getSessionhandler().getUser() + " does not have permission to create user!",securitybean);
}
logger.info("Saving user");
......@@ -103,4 +111,11 @@ public class UserView {
public User getUser() {
return user;
}
public void setSessionhandler(BortalSessionHandler sessionhandler) {
this.sessionhandler = sessionhandler;
}
public BortalSessionHandler getSessionhandler() {
return sessionhandler;
}
}
Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!