X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=org.argeo.cms.ee%2Fsrc%2Forg%2Fargeo%2Fcms%2Fintegration%2FCmsPrivateServletContext.java;fp=org.argeo.cms.ee%2Fsrc%2Forg%2Fargeo%2Fcms%2Fintegration%2FCmsPrivateServletContext.java;h=0000000000000000000000000000000000000000;hb=d17531647e0649199b3adf961be7fe81b34a4fd6;hp=09f17ae02cea7274d0fc5e116505f0c6ee250934;hpb=c53ac559b0d2855f499dfb340560895f17621e91;p=lgpl%2Fargeo-commons.git

diff --git a/org.argeo.cms.ee/src/org/argeo/cms/integration/CmsPrivateServletContext.java b/org.argeo.cms.ee/src/org/argeo/cms/integration/CmsPrivateServletContext.java
deleted file mode 100644
index 09f17ae02..000000000
--- a/org.argeo.cms.ee/src/org/argeo/cms/integration/CmsPrivateServletContext.java
+++ /dev/null
@@ -1,80 +0,0 @@
-package org.argeo.cms.integration;
-
-import java.io.IOException;
-import java.security.AccessControlContext;
-import java.util.Map;
-
-import javax.security.auth.login.LoginContext;
-import javax.security.auth.login.LoginException;
-import javax.servlet.http.HttpServletRequest;
-import javax.servlet.http.HttpServletResponse;
-
-import org.argeo.api.cms.CmsAuth;
-import org.argeo.cms.auth.RemoteAuthCallbackHandler;
-import org.argeo.cms.auth.RemoteAuthUtils;
-import org.argeo.cms.servlet.ServletHttpRequest;
-import org.argeo.cms.servlet.ServletHttpResponse;
-import org.osgi.service.http.context.ServletContextHelper;
-
-/** Manages security access to servlets. */
-public class CmsPrivateServletContext extends ServletContextHelper {
-	public final static String LOGIN_PAGE = "argeo.cms.integration.loginPage";
-	public final static String LOGIN_SERVLET = "argeo.cms.integration.loginServlet";
-	private String loginPage;
-	private String loginServlet;
-
-	public void init(Map<String, String> properties) {
-		loginPage = properties.get(LOGIN_PAGE);
-		loginServlet = properties.get(LOGIN_SERVLET);
-	}
-
-	/**
-	 * Add the {@link AccessControlContext} as a request attribute, or redirect to
-	 * the login page.
-	 */
-	@Override
-	public boolean handleSecurity(final HttpServletRequest req, HttpServletResponse resp) throws IOException {
-		LoginContext lc = null;
-		ServletHttpRequest request = new ServletHttpRequest(req);
-		ServletHttpResponse response = new ServletHttpResponse(resp);
-
-		String pathInfo = req.getPathInfo();
-		String servletPath = req.getServletPath();
-		if ((pathInfo != null && (servletPath + pathInfo).equals(loginPage)) || servletPath.contentEquals(loginServlet))
-			return true;
-		try {
-			lc = CmsAuth.USER.newLoginContext(new RemoteAuthCallbackHandler(request, response));
-			lc.login();
-		} catch (LoginException e) {
-			lc = processUnauthorized(req, resp);
-			if (lc == null)
-				return false;
-		}
-//		Subject.doAs(lc.getSubject(), new PrivilegedAction<Void>() {
-//
-//			@Override
-//			public Void run() {
-//				// TODO also set login context in order to log out ?
-//				RemoteAuthUtils.configureRequestSecurity(request);
-//				return null;
-//			}
-//
-//		});
-
-		return true;
-	}
-
-//	@Override
-//	public void finishSecurity(HttpServletRequest req, HttpServletResponse resp) {
-//		RemoteAuthUtils.clearRequestSecurity(new ServletHttpRequest(req));
-//	}
-
-	protected LoginContext processUnauthorized(HttpServletRequest request, HttpServletResponse response) {
-		try {
-			response.sendRedirect(loginPage);
-		} catch (IOException e) {
-			throw new RuntimeException("Cannot redirect to login page", e);
-		}
-		return null;
-	}
-}