com.boundlessgeo.geoserver.api.controllers.LoginController.java Source code

Introduction

Here is the source code for com.boundlessgeo.geoserver.api.controllers.LoginController.java

Source

/* (c) 2014 Boundless, http://boundlessgeo.com
 * This code is licensed under the GPL 2.0 license.
 */
package com.boundlessgeo.geoserver.api.controllers;

import com.boundlessgeo.geoserver.json.JSONObj;
import org.geoserver.security.impl.GeoServerUser;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationToken;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.ResponseBody;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;

/**
 * Sends back session info after a successful login.
 */
@Controller
@RequestMapping("/api/login")
public class LoginController {

    /**
     * API endpoint for determining if a user is logged in
     * 
     * @param req HTTP request
     * @param res HTTP response
     * @return JSON object containing the session id, the session timeout interval, 
     * and the GeoServer user, if applicable.
     */
    @RequestMapping()
    public @ResponseBody JSONObj handle(HttpServletRequest req, HttpServletResponse res) {
        JSONObj obj = new JSONObj();

        HttpSession session = req.getSession(false);
        if (session != null) {
            obj.put("session", session.getId());
            obj.put("timeout", session.getMaxInactiveInterval());
        }

        Authentication auth = SecurityContextHolder.getContext().getAuthentication();
        Object principal = auth.getPrincipal();
        if (principal instanceof GeoServerUser) {
            GeoServerUser user = (GeoServerUser) principal;
            obj.put("user", user.getUsername());
            //PKI Authentication
        } else if (auth instanceof PreAuthenticatedAuthenticationToken && principal instanceof String) {
            obj.put("user", principal);
        }

        return obj;
    }
}