Class: com.technoetic.xplanner.security.jaas.AbstractLoginModule   ©

package com.technoetic.xplanner.security.jaas;

import com.technoetic.xplanner.db.hibernate.ThreadSession;
import com.technoetic.xplanner.domain.Person;
import com.technoetic.xplanner.security.AuthenticationException;
import com.technoetic.xplanner.security.PersonPrincipal;
import net.sf.hibernate.Hibernate;
import net.sf.hibernate.Session;
import org.apache.log4j.Logger;

import javax.security.auth.Subject;
import java.util.Iterator;
import java.util.List;

public class AbstractLoginModule {
    protected Logger log = Logger.getLogger(getClass());

    public void populateSubjectPrincipalFromDatabase(Subject subject, String userId)
            throws AuthenticationException {
        Person person = getPerson(userId);
        if (person == null) {
            throw new AuthenticationException("user " + userId + " not found");
        }
        subject.getPrincipals().add(new PersonPrincipal(person));

    }

    public Person getPerson(String userId) throws AuthenticationException {
        try {
            Session session = ThreadSession.get();
            List people = session.find("from person in class " +
                                       Person.class.getName() + " where userid = ?",
                                       userId, Hibernate.STRING);
            Iterator peopleIterator = people.iterator();
Rate            if (peopleIterator.hasNext()) {
                return (Person)peopleIterator.next();
            } else {
                return null;
            }
        } catch (Exception ex) {
            log.error("error during authentication", ex);
            throw new AuthenticationException("server error.");
        }

    }
}