src/main/java/org/openslx/imagemaster/session/Authenticator.java


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

package org.openslx.imagemaster.session;

import org.apache.log4j.Logger;
import org.openslx.imagemaster.db.DbUser;
import org.openslx.imagemaster.db.LDAPUser;
import org.openslx.imagemaster.thrift.iface.AuthenticationError;
import org.openslx.imagemaster.thrift.iface.AuthenticationException;


public class Authenticator
{
	private static Logger log = Logger.getLogger( Authenticator.class );

	/**
	 * Authenticate the user against whatever backend
	 * @param username
	 * @param password
	 * @return
	 * @throws AuthenticationException
	 */
	public static User authenticate( String username, String password ) throws AuthenticationException
	{
//		DbUser user = DbUser.forLogin( username );
//		if ( user == null || !Sha512Crypt.verifyPassword( password, user.password ) ) {
//			log.debug( "Login failed: " + username );
//			throw new AuthenticationException( AuthenticationError.INVALID_CREDENTIALS, "Invalid username or password!" );
//		}
//		log.debug( "Login successful: " + username );
		
		LDAPUser user = LDAPUser.forLogin( username, password ); // throws exception if credentials are invalid
		if (user == null) {
			log.debug( "Login failed: " + username);
			throw new AuthenticationException( AuthenticationError.INVALID_CREDENTIALS, "Invalid username or password!" );
		}
		log.debug( "Login succesful: " + username );
		
		// if successfull: update/insert into db
		DbUser.insertOrUpdate(user);
		
		return user;
	}
	//
}