Apereo-Learning-Analytics-Initiative / OpenLRW

  private final AuthenticationSuccessHandler successHandler;

  private final AuthenticationFailureHandler failureHandler;

  private final ObjectMapper objectMapper;

  public AdminUserProcessingFilter(String defaultProcessUrl, AuthenticationSuccessHandler successHandler,

      AuthenticationFailureHandler failureHandler, ObjectMapper mapper) {

    super(defaultProcessUrl);

    this.successHandler = successHandler;

    this.failureHandler = failureHandler;

    this.objectMapper = mapper;

  }

  @Override

  public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response) throws AuthenticationException, IOException,

      ServletException {

    if (!HttpMethod.POST.name().equals(request.getMethod()) || !WebUtil.isAjax(request)) {

      if (logger.isDebugEnabled()) {

        logger.debug("Authentication method not supported. Request method: " + request.getMethod());

      }

      throw new AuthMethodNotSupportedException("Authentication method not supported");

    }

    LoginRequest loginRequest = objectMapper.readValue(request.getReader(), LoginRequest.class);

    if (StringUtils.isBlank(loginRequest.getUsername()) || StringUtils.isBlank(loginRequest.getPassword())) {

      throw new AuthenticationServiceException("Username or Password not provided");

    }

    AdminUserAuthenticationToken token = new AdminUserAuthenticationToken(loginRequest.getUsername(), loginRequest.getPassword());

    return this.getAuthenticationManager().authenticate(token);

  }

  @Override

  protected void successfulAuthentication(HttpServletRequest request, HttpServletResponse response, FilterChain chain, Authentication authResult)

      throws IOException, ServletException {

    successHandler.onAuthenticationSuccess(request, response, authResult);

  }

  @Override

  protected void unsuccessfulAuthentication(HttpServletRequest request, HttpServletResponse response, AuthenticationException failed)

      throws IOException, ServletException {

    SecurityContextHolder.clearContext();

    failureHandler.onAuthenticationFailure(request, response, failed);