Changeset 8738 for trunk/gsdl3/extensions/gsdl-as/src/org/greenstone/gsdlas/users/UserManager.java

Timestamp:

2004-12-06T11:44:03+13:00 (19 years ago)

Author:

schweer

Message:

user authentication works; user information and subscriptions/predicates are stored to thedatabase

File:

• trunk/gsdl3/extensions/gsdl-as/src/org/greenstone/gsdlas/users/UserManager.java (modified) (4 diffs)

trunk/gsdl3/extensions/gsdl-as/src/org/greenstone/gsdlas/users/UserManager.java

@@ -9 +9 @@
 package org.greenstone.gsdlas.users;
 
+import java.sql.*;
 import java.util.Map;
 
 import javax.servlet.http.HttpSession;
+
+import org.greenstone.gsdlas.database.DatabaseManager;
 
 /**
@@ -40 +43 @@
         if (session.getCreationTime() - session.getLastAccessedTime() > session.getMaxInactiveInterval())
             return false;
-        
-        // TODO Auto-generated method stub
-        return true;
+        return session.getAttribute("username") != null;
     }
 
@@ -48 +49 @@
      * @param arguments
      * @param session
+     * @throws PasswordMismatchException
+     * @throws UserManagementException
      */
-    public void createUser(Map arguments, HttpSession session) {
-        // TODO Auto-generated method stub
+    public void createUser(Map arguments, HttpSession session) throws PasswordMismatchException, UserManagementException {
+        if (!arguments.get("password").equals(arguments.get("password2"))) {
+            throw new PasswordMismatchException("The passwords don't match");
+        }
+        String username = (String) arguments.get("username");
+        
+        byte[] password = ((String) arguments.get("password")).getBytes();
+        
+        byte[] pwdHash = password;
+//        try {
+//            pwdHash = MessageDigest.getInstance("MD5").digest(password);
+//        } catch (NoSuchAlgorithmException e) {
+//            e.printStackTrace();
+//            throw new UserManagementException("could not create user", e);
+//        }
+        
+        try {
+            Connection conn = DatabaseManager.getInstance().getDatabaseConnection();
+            Statement statement = conn.createStatement();
+            statement.executeUpdate("INSERT INTO users (username, password) " +
+                    "VALUES ('" + username + "','" + new String(pwdHash) + "')");
+        } catch (Exception e) {
+            e.printStackTrace();
+            throw new UserManagementException("could not create user", e);
+        }
         
     }
@@ -57 +83 @@
      * @param arguments
      * @param session
+     * @throws UserManagementException
      */
-    public void loginUser(Map arguments, HttpSession session) {
-        // TODO Auto-generated method stub
+    public void loginUser(Map arguments, HttpSession session) throws UserManagementException {
+        String username = (String) arguments.get("username");
         
+        if (isLoggedIn(session) && session.getAttribute("username").equals(username)) {
+            return; // already logged in
+        }
+        
+        byte[] password = ((String) arguments.get("password")).getBytes();
+        
+        byte[] pwdHash = password;
+        try {
+//            pwdHash = MessageDigest.getInstance("MD5").digest(password);
+            
+            Connection conn = DatabaseManager.getInstance().getDatabaseConnection();
+            Statement statement = conn.createStatement();
+            ResultSet results = statement.executeQuery("SELECT password " +
+                    "FROM users WHERE username like '" + username + "';");
+            String pwdFromDB = "";
+            if(results.next()) {
+                pwdFromDB = results.getString("password");
+            }
+            if (!pwdFromDB.equals(new String(pwdHash))) {
+                throw new PasswordMismatchException("user " + username 
+                        + " is unknown, or the passwords don't match");
+            }
+            session.setAttribute("username", username);
+        } catch (Exception e) {
+            e.printStackTrace();
+            throw new UserManagementException("could not login user", e);
+        }
+
     }