LoginBackingBean.java

package fi.otavanopisto.muikku.auth;

import java.io.IOException;
import java.util.List;
import java.util.Map;
import java.util.logging.Level;
import java.util.logging.Logger;

import javax.ejb.Stateful;
import javax.enterprise.context.RequestScoped;
import javax.faces.context.ExternalContext;
import javax.faces.context.FacesContext;
import javax.inject.Inject;
import javax.inject.Named;

import org.apache.commons.lang3.StringUtils;
import org.ocpsoft.rewrite.annotation.Join;
import org.ocpsoft.rewrite.annotation.Parameter;
import org.ocpsoft.rewrite.annotation.RequestAction;
import org.ocpsoft.rewrite.faces.annotation.Deferred;

import fi.otavanopisto.muikku.auth.AuthSourceController;
import fi.otavanopisto.muikku.auth.AuthenticationProvider;
import fi.otavanopisto.muikku.auth.AuthenticationResult;
import fi.otavanopisto.muikku.auth.LoginSessionBean;
import fi.otavanopisto.muikku.jsf.NavigationRules;
import fi.otavanopisto.muikku.model.security.AuthSource;

@RequestScoped
@Named
@Stateful
@Join (path = "/login", to = "/login.jsf")
public class LoginBackingBean {

  @Parameter
  private Long authSourceId;

  @Parameter
  private String redirectUrl;

  @Inject
  private Logger logger;
  
  @Inject
  private AuthSourceController authSourceController;
  
  @Inject
  private LoginSessionBean loginSessionBean;
  
  @RequestAction
  @Deferred
  public String init() {
    try {
      FacesContext facesContext = FacesContext.getCurrentInstance();
      ExternalContext externalContext = facesContext.getExternalContext();
      Map<String, String[]> requestParameters = externalContext.getRequestParameterValuesMap();

      if (authSourceId == null) {
        authSourceId = loginSessionBean.getAuthSourceId();
      } else {
        loginSessionBean.setAuthSourceId(authSourceId);
      }

      if (StringUtils.isNotBlank(redirectUrl)) {
        loginSessionBean.setPostLoginRedirectUrl(redirectUrl);
      }
      
      if (authSourceId == null) {
        // authentication source id is not defined, which means that we need to ask the user which he or she is 
        // going to use, unless only one source is defined and it's credentialess one, in which case we use that one.
  
        List<AuthSource> credentialAuthSources = authSourceController.listCredentialAuthSources();
        List<AuthSource> credentialessAuthSources = authSourceController.listCredentialessAuthSources();
        
        if (credentialAuthSources.isEmpty() && credentialessAuthSources.size() == 1) {
          authSourceId = credentialessAuthSources.get(0).getId();
        }
      }
      
      if (authSourceId != null) {
        AuthSource authSource = authSourceController.findAuthSourceById(authSourceId);
        if (authSource != null) {
          AuthenticationProvider authenticationProvider = authSourceController.findAuthenticationProvider(authSource);
          if (authenticationProvider != null) {
            
            AuthenticationResult result = authenticationProvider.processLogin(authSource, requestParameters);
            if (StringUtils.isNotBlank(result.getRedirectUrl())) {
              externalContext.redirect(result.getRedirectUrl());
            } else {
              loginSessionBean.setAuthSourceId(null);
              String postLoginRedirectUrl = loginSessionBean.getPostLoginRedirectUrl();
              
              switch (result.getStatus()) {
                case GRANT:
                  // User granted additional scopes in existing authentication source 
                break;
                case LOGIN:
                  // User logged in
                break;
                case NEW_ACCOUNT:
                  // User created new account
                break;
                case CONFLICT:
                  switch (result.getConflictReason()) {
                    case EMAIL_BELONGS_TO_ANOTHER_USER:
                      // Could not login, one or more of the email addresses belong to another user
                    break;
                    case LOGGED_IN_AS_DIFFERENT_USER:
                      // Could not login, user is already logged in as a another user
                    break;
                    case SEVERAL_USERS_BY_EMAILS:
                      // Could not login, several users found by email addresses
                    break;
                  }         

                  logger.log(Level.SEVERE, String.format("Authentication failed on with following message: %s", result.getConflictReason().toString()));
                  return NavigationRules.INTERNAL_ERROR;
                case INVALID_CREDENTIALS:
                  logger.log(Level.SEVERE, "Erroneous authentication provider status: INVALID_CREDENTIALS in external login page");
                  return NavigationRules.INTERNAL_ERROR;
                case NO_EMAIL:
                  return NavigationRules.AUTH_NOEMAIL;
                case PROCESSING:
                  logger.log(Level.SEVERE, "Erroneous authentication provider status: PROCESSING without redirectUrl");
                  return NavigationRules.INTERNAL_ERROR;
                case ERROR:
                  return NavigationRules.INTERNAL_ERROR;
              }
              
              if (StringUtils.isBlank(postLoginRedirectUrl)) {
                postLoginRedirectUrl = externalContext.getRequestContextPath() + "/";
              }
              
              externalContext.redirect(postLoginRedirectUrl);
            }
          } else {
            logger.log(Level.SEVERE, "Invalid authenticationProvider");
            return NavigationRules.INTERNAL_ERROR;
          }
        } else {
          logger.log(Level.SEVERE, "Invalid authSourceId");
          return NavigationRules.INTERNAL_ERROR;
        }
      }
    } catch (IOException e) {
      logger.log(Level.SEVERE, "Login failed because of an internal error", e);
      return NavigationRules.INTERNAL_ERROR;
    }
    
    return null;
  }  
  
  public Long getAuthSourceId() {
    return authSourceId;
  }
  
  public void setAuthSourceId(Long authSourceId) {
    this.authSourceId = authSourceId;
  }
  
  public String getRedirectUrl() {
    return redirectUrl;
  }
  
  public void setRedirectUrl(String redirectUrl) {
    this.redirectUrl = redirectUrl;
  }
  
}