/**
* Logins.
*
* <p>Renders the response with a json object, for example,
*
* <pre>
* {
* "isLoggedIn": boolean,
* "msg": "" // optional, exists if isLoggedIn equals to false
* }
* </pre>
*
* @param context the specified context
*/
@RequestProcessing(value = "/login", method = HTTPRequestMethod.POST)
public void login(final HTTPRequestContext context) {
final HttpServletRequest request = context.getRequest();
final JSONRenderer renderer = new JSONRenderer();
context.setRenderer(renderer);
final JSONObject jsonObject = new JSONObject();
renderer.setJSONObject(jsonObject);
try {
jsonObject.put(Common.IS_LOGGED_IN, false);
final String loginFailLabel = langPropsService.get("loginFailLabel");
jsonObject.put(Keys.MSG, loginFailLabel);
final JSONObject requestJSONObject =
Requests.parseRequestJSONObject(request, context.getResponse());
final String userEmail = requestJSONObject.getString(User.USER_EMAIL);
final String userPwd = requestJSONObject.getString(User.USER_PASSWORD);
if (Strings.isEmptyOrNull(userEmail) || Strings.isEmptyOrNull(userPwd)) {
return;
}
LOGGER.log(Level.INFO, "Login[email={0}]", userEmail);
final JSONObject user = userQueryService.getUserByEmail(userEmail);
if (null == user) {
LOGGER.log(Level.WARN, "Not found user[email={0}]", userEmail);
return;
}
if (MD5.hash(userPwd).equals(user.getString(User.USER_PASSWORD))) {
Sessions.login(request, context.getResponse(), user);
LOGGER.log(Level.INFO, "Logged in[email={0}]", userEmail);
jsonObject.put(Common.IS_LOGGED_IN, true);
if (Role.VISITOR_ROLE.equals(user.optString(User.USER_ROLE))) {
jsonObject.put("to", Latkes.getServePath());
} else {
jsonObject.put("to", Latkes.getServePath() + Common.ADMIN_INDEX_URI);
}
jsonObject.remove(Keys.MSG);
return;
}
LOGGER.log(Level.WARN, "Wrong password[{0}]", userPwd);
} catch (final Exception e) {
LOGGER.log(Level.ERROR, e.getMessage(), e);
}
}
/**
* Logout.
*
* @param context the specified context
* @throws IOException io exception
*/
@RequestProcessing(value = "/logout", method = HTTPRequestMethod.GET)
public void logout(final HTTPRequestContext context) throws IOException {
final HttpServletRequest httpServletRequest = context.getRequest();
Sessions.logout(httpServletRequest, context.getResponse());
String destinationURL = httpServletRequest.getParameter(Common.GOTO);
if (Strings.isEmptyOrNull(destinationURL)) {
destinationURL = "/";
}
context.getResponse().sendRedirect(destinationURL);
}