Login.java

/*
 * Copyright 2012 Will Benedict, Felix Berger and Roger Kapsi
 * 
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * 
 *  http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */ 

package controllers;

import play.Configuration;
import play.data.DynamicForm;
import play.data.Form;
import play.mvc.Controller;
import play.mvc.Result;
import views.html.login;

import static org.ardverk.gibson.dashboard.Context.injector;

public class Login extends Controller {

  private static final String AUTHENTICATED_KEY = "authenticated";
  
  private static final String USERNAME_KEY = "gibson.admin.username";
  
  private static final String PASSWORD_KEY = "gibson.admin.password";
  
  public static Result index(boolean logout) {
    if (logout) {
      session().remove(AUTHENTICATED_KEY);
      return redirect("/");
    }
    
    return ok(login.render());
  }
  
  public static Result login() {
    if (isAuthenticated()) {
      return redirect("/");
    }

    DynamicForm form = Form.form().bindFromRequest();
    String username = form.get("username");
    String password = form.get("password");
    
    if (username != null && password != null) {
      Configuration configuration = injector().getInstance(Configuration.class);
      String u = configuration.getString(USERNAME_KEY);
      String p = configuration.getString(PASSWORD_KEY);
      
      if (u.equals(username) && p.equals(password)) {
        session(AUTHENTICATED_KEY, "true");
        return redirect("/admin");
      }
    }
    
    return unauthorized("Not Authorized");
  }
  
  public static boolean isAuthenticated() {
    return Boolean.parseBoolean(session(AUTHENTICATED_KEY));
  }
}