WebServiceBase.java

/*********************************************************************************
 * The contents of this file are subject to the Common Public Attribution
 * License Version 1.0 (the "License"); you may not use this file except in
 * compliance with the License. You may obtain a copy of the License at
 * http://www.openemm.org/cpal1.html. The License is based on the Mozilla
 * Public License Version 1.1 but Sections 14 and 15 have been added to cover
 * use of software over a computer network and provide for limited attribution
 * for the Original Developer. In addition, Exhibit A has been modified to be
 * consistent with Exhibit B.
 * Software distributed under the License is distributed on an "AS IS" basis,
 * WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License for
 * the specific language governing rights and limitations under the License.
 * 
 * The Original Code is OpenEMM.
 * The Original Developer is the Initial Developer.
 * The Initial Developer of the Original Code is AGNITAS AG. All portions of
 * the code written by AGNITAS AG are Copyright (c) 2007 AGNITAS AG. All Rights
 * Reserved.
 * 
 * Contributor(s): AGNITAS AG. 
 ********************************************************************************/

/*
 * WebServiceBase.java
 *
 * Created on 29. Juli 2003, 13:17
 */

package org.agnitas.webservice;

import org.agnitas.util.AgnUtils;
import org.apache.axis.MessageContext;
import org.apache.axis.components.logger.LogFactory;
import org.apache.commons.logging.Log;
import org.springframework.remoting.jaxrpc.ServletEndpointSupport;

import javax.servlet.GenericServlet;
import javax.servlet.http.HttpServletRequest;
import javax.sql.DataSource;

import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.ResultSet;

/**
 *
 * @author  mhe
 */
public class WebServiceBase extends ServletEndpointSupport {
    
    protected DataSource agnDBPool=null;
    protected Log log=LogFactory.getLog("com.agnitas.webservice.LogHandler");
    
    protected Connection getConnection(MessageContext msct) {
        Connection dbConn=null;
        
        GenericServlet aServlet=(GenericServlet)msct.getProperty("transport.http.servlet");
        
        if(agnDBPool==null) {
            agnDBPool=AgnUtils.retrieveDataSource(aServlet.getServletContext());
        }
        
        try {
            dbConn=agnDBPool.getConnection();
        } catch(Exception e) {
            dbConn=null;
        }
        return dbConn;
    }
    
    protected void freeConnection(Connection dbConn) {
        if(dbConn!=null) {
            try {
                dbConn.close();
            } catch(Exception e) {
                // do nothing
                AgnUtils.logger().info("could not close connection");
            }
        }
    }
    
    protected boolean authenticateUser(MessageContext msct, String user, String pwd, int companyID) {

        try {
	        Connection dbConn=this.getConnection(msct);
	        try {
	        	PreparedStatement statement = dbConn.prepareStatement( "SELECT ws_admin_id FROM ws_admin_tbl WHERE username=? AND password=?");
	        	
	        	try {
	        		statement.setString( 1, user);
	        		statement.setString( 2, pwd);
	        		
	        		ResultSet rs = statement.executeQuery();
	        		
	        		try {
	        			if( rs.next()) {
	        				return true;
	        			} else {
	                        HttpServletRequest req=(HttpServletRequest)msct.getProperty("transport.http.servletRequest");
	                        log.info(req.getRemoteAddr()+" -0-l: login failed: "+user+" "+companyID);
	                        
	                        return false;
	        			}
	        		} finally {
	        			rs.close();
	        		}
	        	} finally {
	        		statement.close();
	        	}
	        } finally {
	        	dbConn.close();
	        }
        } catch( Exception e) {
        	logger.error( "Error authenticating user " + user, e);
        	
        	return false;
        }
    }
}