com.groiss.org
Class AuthUtil

java.lang.Object
  com.groiss.org.AuthUtil

public class AuthUtil
extends Object

Utilities for writing an authorization class.

Constructor Summary

AuthUtil()

Method Summary

static void	authorizeBrowser(HttpServletRequest req, HttpServletResponse res, User u, String nextUrl) This function can be called from the client to instantiate a session and send the session cookie to the browser.
static void	checkSysadmPasswd(String passwd)
static Principal	checkUser(String userId, String passwd, String clientAddr) Checks the user.
static Principal	checkUser(String userId, String passwd, String clientAddr, boolean ignoreUnsuccessfulLogin) Checks the user.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthUtil

public AuthUtil()

Method Detail

authorizeBrowser

public static void authorizeBrowser(HttpServletRequest req,
                                    HttpServletResponse res,
                                    User u,
                                    String nextUrl)
                             throws IOException

This function can be called from the client to instantiate a session and send the session cookie to the browser.

Parameters:

req - the HttpServletRequest

res - the HttpServletResponse

u - the user

nextUrl - the url for redirection

Throws:

IOException

checkUser

public static Principal checkUser(String userId,
                                  String passwd,
                                  String clientAddr)
                           throws Exception

Checks the user. Compares the password and checks whether the user is active. If one of the check fails an Exception is thrown. If the password is not correct an unsuccessful login will be recorded.

Parameters:

userId - the id of the user

passwd - the passwd

clientAddr - the ip address of the client

Returns:

the user with the given id, if found.

Throws:

Exception

checkUser

public static Principal checkUser(String userId,
                                  String passwd,
                                  String clientAddr,
                                  boolean ignoreUnsuccessfulLogin)
                           throws Exception

Checks the user. Compares the password and checks whether the user is active. If one of the check fails an Exception is thrown. If the password is not correct an unsuccessful login will be recorded but only if parameter ignoreUnsuccessfulLogin ist not true.

Parameters:

userId - the id of the user

passwd - the passwd

clientAddr - the ip address of the client

ignoreUnsuccessfulLogin - if true unsuccessful logins will not be recorded

Returns:

the user with the given id, if found.

Throws:

Exception

checkSysadmPasswd

public static void checkSysadmPasswd(String passwd)