com.xpn.xwiki.user.impl.xwiki
Class MyPersistentLoginManager

java.lang.Object
  extended by org.securityfilter.authenticator.persistent.DefaultPersistentLoginManager
      extended by com.xpn.xwiki.user.impl.xwiki.MyPersistentLoginManager
All Implemented Interfaces:
java.io.Serializable, org.securityfilter.authenticator.persistent.PersistentLoginManagerInterface

public class MyPersistentLoginManager
extends org.securityfilter.authenticator.persistent.DefaultPersistentLoginManager

See Also:
Serialized Form

Field Summary
protected  java.lang.String[] cookieDomains
           
protected  java.lang.String cookiePath
           
private static org.apache.commons.logging.Log log
           
 
Fields inherited from class org.securityfilter.authenticator.persistent.DefaultPersistentLoginManager
cipherParameters, COOKIE_PASSWORD, COOKIE_REMEMBERME, COOKIE_USERNAME, COOKIE_VALIDATION, cookieLife, encryptionAlgorithm, encryptionKey, encryptionMode, encryptionPadding, protection, PROTECTION_ALL, PROTECTION_ENCRYPTION, PROTECTION_NONE, PROTECTION_VALIDATION, secretKey, useIP, validationKey, valueAfterMD5, valueBeforeMD5
 
Constructor Summary
MyPersistentLoginManager()
           
 
Method Summary
private  void addCookie(javax.servlet.http.HttpServletResponse response, javax.servlet.http.Cookie cookie)
           
 java.lang.String encryptText(java.lang.String clearText)
          Encrypt a string.
 void forgetLogin(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response)
          Forget a login
private static javax.servlet.http.Cookie getCookie(javax.servlet.http.Cookie[] cookies, java.lang.String cookieName)
          Given an array of cookies and a name, this method tries to find and return the cookie from the array that has the given name.
private  java.lang.String getCookieDomain(javax.servlet.http.HttpServletRequest request)
           
private  java.lang.String getValidationHash(java.lang.String username, java.lang.String password, java.lang.String clientIP)
          Get validation hash for the specified parameters.
 void rememberLogin(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, java.lang.String username, java.lang.String password)
          Remember a specific login
private  void removeCookie(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, java.lang.String cookieName)
          Remove a cookie.
 void setCookieDomains(java.lang.String[] cdlist)
           
 void setCookiePath(java.lang.String cp)
           
private  void setMaxAge(javax.servlet.http.Cookie cookie)
           
 
Methods inherited from class org.securityfilter.authenticator.persistent.DefaultPersistentLoginManager
getRememberedPassword, getRememberedUsername, rememberingLogin, setCookieLife, setEncryptionAlgorithm, setEncryptionKey, setEncryptionMode, setEncryptionPadding, setProtection, setUseIP, setValidationKey
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Field Detail

log

private static final org.apache.commons.logging.Log log

cookiePath

protected java.lang.String cookiePath

cookieDomains

protected java.lang.String[] cookieDomains
Constructor Detail

MyPersistentLoginManager

public MyPersistentLoginManager()
Method Detail

setCookiePath

public void setCookiePath(java.lang.String cp)

setCookieDomains

public void setCookieDomains(java.lang.String[] cdlist)

rememberLogin

public void rememberLogin(javax.servlet.http.HttpServletRequest request,
                          javax.servlet.http.HttpServletResponse response,
                          java.lang.String username,
                          java.lang.String password)
                   throws java.io.IOException,
                          javax.servlet.ServletException
Remember a specific login

Specified by:
rememberLogin in interface org.securityfilter.authenticator.persistent.PersistentLoginManagerInterface
Overrides:
rememberLogin in class org.securityfilter.authenticator.persistent.DefaultPersistentLoginManager
Parameters:
request - the servlet request
response - the servlet response
username - the username tha's being remembered
password - the password that's being remembered
Throws:
java.io.IOException
javax.servlet.ServletException

setMaxAge

private void setMaxAge(javax.servlet.http.Cookie cookie)

addCookie

private void addCookie(javax.servlet.http.HttpServletResponse response,
                       javax.servlet.http.Cookie cookie)

getCookieDomain

private java.lang.String getCookieDomain(javax.servlet.http.HttpServletRequest request)

getValidationHash

private java.lang.String getValidationHash(java.lang.String username,
                                           java.lang.String password,
                                           java.lang.String clientIP)
Get validation hash for the specified parameters.

Parameters:
username -
password -
clientIP -
Returns:
validation hash

encryptText

public java.lang.String encryptText(java.lang.String clearText)
Encrypt a string.

Parameters:
clearText -
Returns:
clearText, encrypted

forgetLogin

public void forgetLogin(javax.servlet.http.HttpServletRequest request,
                        javax.servlet.http.HttpServletResponse response)
                 throws java.io.IOException,
                        javax.servlet.ServletException
Forget a login

Specified by:
forgetLogin in interface org.securityfilter.authenticator.persistent.PersistentLoginManagerInterface
Overrides:
forgetLogin in class org.securityfilter.authenticator.persistent.DefaultPersistentLoginManager
Parameters:
request - the servlet request
response - the servlet response
Throws:
java.io.IOException
javax.servlet.ServletException

getCookie

private static javax.servlet.http.Cookie getCookie(javax.servlet.http.Cookie[] cookies,
                                                   java.lang.String cookieName)
Given an array of cookies and a name, this method tries to find and return the cookie from the array that has the given name. If there is no cookie matching the name in the array, null is returned.


removeCookie

private void removeCookie(javax.servlet.http.HttpServletRequest request,
                          javax.servlet.http.HttpServletResponse response,
                          java.lang.String cookieName)
Remove a cookie.

Parameters:
request -
response -
cookieName -


Copyright 2003 Ludovic Dubost