TimetrackingLoginModule.java

package com.javafun.timetracking.security;

import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.util.Map;

import javafun.utils.StringUtils;
import javafun.utils.jdbc.ServerConnectionManager;

import javax.security.auth.Subject;
import javax.security.auth.callback.Callback;
import javax.security.auth.callback.CallbackHandler;
import javax.security.auth.callback.ConfirmationCallback;
import javax.security.auth.callback.NameCallback;
import javax.security.auth.callback.PasswordCallback;
import javax.security.auth.callback.TextOutputCallback;
import javax.security.auth.login.LoginException;

import org.eclipse.rwt.RWT;
import org.eclipse.swt.SWT;
import org.eclipse.swt.widgets.Display;

import com.javafun.timetracking.model.User;

public class TimetrackingLoginModule implements javax.security.auth.spi.LoginModule {

	private CallbackHandler _callbackHandler;
	private boolean _loggedIn;
	private Subject _subject;

	public TimetrackingLoginModule() {
	}

	public void initialize(final Subject subject, final CallbackHandler callbackHandler, final Map<String, ?> sharedState,
			final Map<String, ?> options) {
		_subject = subject;
		_callbackHandler = callbackHandler;
	}

	public boolean login() throws LoginException {
		Callback label = new TextOutputCallback(TextOutputCallback.INFORMATION, "Please login!");
		// TextOutputCallback(TextOutputCallback.INFORMATION, "Please login!");
		NameCallback nameCallback = new NameCallback("Username/email:");
		PasswordCallback passwordCallback = new PasswordCallback("Password:", false);
		ConfirmationCallback confCalback = new ConfirmationCallback(ConfirmationCallback.INFORMATION,
				ConfirmationCallback.OK_CANCEL_OPTION, ConfirmationCallback.OK);
		Callback[] callbacks = new Callback[] { label, nameCallback, passwordCallback, confCalback };
		try {
			_callbackHandler.handle(callbacks);
		} catch (Exception e) {
			e.printStackTrace();
		}
		if (((ConfirmationCallback) callbacks[3]).getSelectedIndex() == ConfirmationCallback.CANCEL) {
			abort();
			throw new LoginException("Login canceled");
		}

		String username = nameCallback.getName();
		String password = "";
		if (passwordCallback.getPassword() != null) {
			password = String.valueOf(passwordCallback.getPassword());
		}
		if (StringUtils.isBlank(password) || StringUtils.isBlank(username)) {
			// _loggedIn = true;
			return true;
		}
		User user = null;
		Connection conn = null;
		try {
			conn = ServerConnectionManager.getDefaultInstance().getConnection();
			PreparedStatement pstmt = conn.prepareStatement("select * from user where user_name = ?");
			pstmt.setString(1, username);
			ResultSet rs = pstmt.executeQuery();
			if (rs.next()) {
				String psw = rs.getString("pswrd");
				if (password.equals(psw)) {
					user = new User(username, psw);
					user.setEmail(rs.getString("email"));
					RWT.getSessionStore().getHttpSession().setAttribute("user", user);
					// this.window.getWorkbench()
				} else {
					RWT.getSessionStore().getHttpSession().removeAttribute("user");
				}
			}
			pstmt.close();
		} catch (SQLException e) {
			e.printStackTrace();
		} finally {
			try {
				ServerConnectionManager.getDefaultInstance().closeConnection(conn);
			} catch (SQLException e) {
				e.printStackTrace();
			}
		}

		if (user != null) {
			_loggedIn = true;
			return true;
		}
		return false;
	}

	public boolean commit() throws LoginException {
		// subject.getPublicCredentials().add(USERS);
		_subject.getPrivateCredentials().add(Display.getCurrent());
		_subject.getPrivateCredentials().add(SWT.getPlatform());
		return _loggedIn;
	}

	public boolean abort() throws LoginException {
		_loggedIn = false;
		return true;
	}

	public boolean logout() throws LoginException {
		_loggedIn = false;
		return true;
	}

}