X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=org.argeo.cms.ui%2Fsrc%2Forg%2Fargeo%2Fcms%2Fui%2FAbstractCmsEntryPoint.java;h=529061e92f0f96229a646cae83a9d7057140adb8;hb=1e5faff835877a2fc08c1c91f43f45c92aed0696;hp=2d83f8ded0ab2c60f80fcb9641c2f09e53b8edbc;hpb=d66d81530f1da58e2e2c5d25e0a5dc30ad32b848;p=lgpl%2Fargeo-commons.git

diff --git a/org.argeo.cms.ui/src/org/argeo/cms/ui/AbstractCmsEntryPoint.java b/org.argeo.cms.ui/src/org/argeo/cms/ui/AbstractCmsEntryPoint.java
index 2d83f8ded..529061e92 100644
--- a/org.argeo.cms.ui/src/org/argeo/cms/ui/AbstractCmsEntryPoint.java
+++ b/org.argeo.cms.ui/src/org/argeo/cms/ui/AbstractCmsEntryPoint.java
@@ -1,5 +1,8 @@
 package org.argeo.cms.ui;
 
+import static org.argeo.naming.SharedSecret.X_SHARED_SECRET;
+
+import java.io.IOException;
 import java.security.PrivilegedAction;
 import java.util.HashMap;
 import java.util.Map;
@@ -12,6 +15,8 @@ import javax.jcr.RepositoryException;
 import javax.jcr.Session;
 import javax.jcr.nodetype.NodeType;
 import javax.security.auth.Subject;
+import javax.security.auth.callback.Callback;
+import javax.security.auth.callback.UnsupportedCallbackException;
 import javax.security.auth.login.LoginContext;
 import javax.security.auth.login.LoginException;
 import javax.servlet.http.HttpServletRequest;
@@ -20,9 +25,12 @@ import org.apache.commons.logging.Log;
 import org.apache.commons.logging.LogFactory;
 import org.argeo.cms.CmsException;
 import org.argeo.cms.auth.CurrentUser;
+import org.argeo.cms.auth.HttpRequestCallback;
 import org.argeo.cms.auth.HttpRequestCallbackHandler;
 import org.argeo.eclipse.ui.specific.UiContext;
 import org.argeo.jcr.JcrUtils;
+import org.argeo.naming.AuthPassword;
+import org.argeo.naming.SharedSecret;
 import org.argeo.node.NodeConstants;
 import org.eclipse.rap.rwt.RWT;
 import org.eclipse.rap.rwt.application.AbstractEntryPoint;
@@ -54,7 +62,6 @@ public abstract class AbstractCmsEntryPoint extends AbstractEntryPoint implement
 	private Node node;
 	private String nodePath;// useful when changing auth
 	private String state;
-	private String page;
 	private Throwable exception;
 
 	// Client services
@@ -133,17 +140,17 @@ public abstract class AbstractCmsEntryPoint extends AbstractEntryPoint implement
 	 * The node to return when no node was found (for authenticated users and
 	 * anonymous)
 	 */
-	protected Node getDefaultNode(Session session) throws RepositoryException {
-		if (!session.hasPermission(defaultPath, "read")) {
-			String userId = session.getUserID();
-			if (userId.equals(NodeConstants.ROLE_ANONYMOUS))
-				// TODO throw a special exception
-				throw new CmsException("Login required");
-			else
-				throw new CmsException("Unauthorized");
-		}
-		return session.getNode(defaultPath);
-	}
+//	private Node getDefaultNode(Session session) throws RepositoryException {
+//		if (!session.hasPermission(defaultPath, "read")) {
+//			String userId = session.getUserID();
+//			if (userId.equals(NodeConstants.ROLE_ANONYMOUS))
+//				// TODO throw a special exception
+//				throw new CmsException("Login required");
+//			else
+//				throw new CmsException("Unauthorized");
+//		}
+//		return session.getNode(defaultPath);
+//	}
 
 	protected String getBaseTitle() {
 		return factoryProperties.get(WebClient.PAGE_TITLE);
@@ -248,8 +255,8 @@ public abstract class AbstractCmsEntryPoint extends AbstractEntryPoint implement
 	protected synchronized String setState(String newState) {
 		String previousState = this.state;
 
-		Node node = null;
-		page = null;
+		String newNodePath = null;
+		String prefix = null;
 		this.state = newState;
 		if (newState.equals("~"))
 			this.state = "";
@@ -257,25 +264,54 @@ public abstract class AbstractCmsEntryPoint extends AbstractEntryPoint implement
 		try {
 			int firstSlash = state.indexOf('/');
 			if (firstSlash == 0) {
-				node = session.getNode(state);
-				page = "";
+				newNodePath = state;
+				prefix = "";
 			} else if (firstSlash > 0) {
-				String prefix = state.substring(0, firstSlash);
-				String path = state.substring(firstSlash);
-				if (session.nodeExists(path))
-					node = session.getNode(path);
-				else
-					throw new CmsException("Data " + path + " does not exist");
-				page = prefix;
+				prefix = state.substring(0, firstSlash);
+				newNodePath = state.substring(firstSlash);
+			} else {
+				newNodePath = defaultPath;
+				prefix = state;
+
+			}
+
+			// auth
+			int colonIndex = prefix.indexOf('$');
+			if (colonIndex > 0) {
+				SharedSecret token = new SharedSecret(new AuthPassword(X_SHARED_SECRET + '$' + prefix)) {
+
+					@Override
+					public void handle(Callback[] callbacks) throws IOException, UnsupportedCallbackException {
+						super.handle(callbacks);
+						// handle HTTP context
+						for (Callback callback : callbacks) {
+							if (callback instanceof HttpRequestCallback) {
+								((HttpRequestCallback) callback).setRequest(UiContext.getHttpRequest());
+								((HttpRequestCallback) callback).setResponse(UiContext.getHttpResponse());
+							}
+						}
+					}
+				};
+				LoginContext lc = new LoginContext(NodeConstants.LOGIN_CONTEXT_USER, token);
+				lc.login();
+				authChange(lc);// sets the node as well
+				// } else {
+				// // TODO check consistency
+				// }
 			} else {
-				node = getDefaultNode(session);
-				page = state;
+				Node newNode = null;
+				if (session.nodeExists(newNodePath))
+					newNode = session.getNode(newNodePath);
+				else {
+//					throw new CmsException("Data " + newNodePath + " does not exist");
+					newNode = null;
+				}
+				setNode(newNode);
 			}
-			setNode(node);
-			String title = publishMetaData(node);
+			String title = publishMetaData(getNode());
 
 			if (log.isTraceEnabled())
-				log.trace("node=" + node + ", state=" + state + " (page=" + page + ")");
+				log.trace("node=" + newNodePath + ", state=" + state + " (prefix=" + prefix + ")");
 
 			return title;
 		} catch (Exception e) {
@@ -292,7 +328,7 @@ public abstract class AbstractCmsEntryPoint extends AbstractEntryPoint implement
 	private String publishMetaData(Node node) throws RepositoryException {
 		// Title
 		String title;
-		if (node.isNodeType(NodeType.MIX_TITLE) && node.hasProperty(Property.JCR_TITLE))
+		if (node!=null && node.isNodeType(NodeType.MIX_TITLE) && node.hasProperty(Property.JCR_TITLE))
 			title = node.getProperty(Property.JCR_TITLE).getString() + " - " + getBaseTitle();
 		else
 			title = getBaseTitle();