clientlogonaction.java

这是linux下ssl vpn的实现程序

/*
 *  SSL-Explorer
 *
 *  Copyright (C) 2003-2006 3SP LTD. All Rights Reserved
 *
 *  This program is free software; you can redistribute it and/or
 *  modify it under the terms of the GNU General Public License
 *  as published by the Free Software Foundation; either version 2 of
 *  the License, or (at your option) any later version.
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public
 *  License along with this program; if not, write to the Free Software
 *  Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
 */
			
package com.sslexplorer.agent.actions;

import java.util.Enumeration;
import java.util.Locale;
import java.util.Properties;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.apache.struts.action.ActionForm;
import org.apache.struts.action.ActionForward;
import org.apache.struts.action.ActionMapping;
import org.apache.struts.util.MessageResources;

import com.sslexplorer.core.CoreServlet;
import com.sslexplorer.core.actions.XMLOutputAction;
import com.sslexplorer.security.InvalidLoginCredentialsException;
import com.sslexplorer.security.forms.LogonForm;

/**
 * Processes a logon request from applications using the <i>Embedded Client API</i>.
 * 
 * @author Lee David Painter <a href="mailto: [e-mail]">&lt;[e-mail]&gt;</a>
 * @version $Revision: 1.5 $
 */
public class ClientLogonAction extends XMLOutputAction {

    static Log log = LogFactory.getLog(ClientLogonAction.class);

    /**
     * Constructor.
     */
    public ClientLogonAction() {
    }

    /*
     * (non-Javadoc)
     * 
     * @see org.apache.struts.action.Action#execute(org.apache.struts.action.ActionMapping,
     *      org.apache.struts.action.ActionForm,
     *      javax.servlet.http.HttpServletRequest,
     *      javax.servlet.http.HttpServletResponse)
     */
    public ActionForward execute(ActionMapping mapping, ActionForm form, HttpServletRequest request, HttpServletResponse response)
                    throws Exception {

        // Extract attributes we will need
        Locale locale = getLocale(request);
        MessageResources messages = getResources(request, "security");
        LogonForm logonForm = (LogonForm) request.getSession().getAttribute("logonForm");
        String username = logonForm == null ? null : logonForm.getUsername();
        String password = logonForm == null ? null : logonForm.getPassword();

        Properties properties = new Properties();
        for (Enumeration e = request.getParameterNames(); e.hasMoreElements();) {
            String name = (String) e.nextElement();
            String val = request.getParameter(name);
            if (name.equals("username")) {
                username = val;
            } else if (name.equals("password")) {
                password = val;
            } else {
                properties.put(name, val);
            }
        }

        if (username == null || password == null) {
            log.error("Both a username and password must be supplied");
            sendError("Both a username and password must be supplied", response);
        } else {

            try {
            	if (log.isInfoEnabled())
            		log.info("Performing client logon for " + username + " [" + request.getRemoteHost() + "]");

                // Check logon is currently allowed
                String logonNotAllowedReason = CoreServlet.getServlet().getLogonController().checkLogonAllowed(null);

                if (logonNotAllowedReason != null) {
                    sendError(messages.getMessage(locale, "login.logonNotAllowed", logonNotAllowedReason), response);
                } else {

                    String vpnTicket = CoreServlet.getServlet().getLogonController().logonClient(request, response, username,
                                    password, properties);
                    if (log.isInfoEnabled())
                    	log.info(username + " [" + request.getRemoteHost() + "]" + " OK");
                    sendSuccess(vpnTicket, response);
                }
            } catch (InvalidLoginCredentialsException ex) {
                log.error(username + " [" + request.getRemoteHost() + "]" + " creditials failed");
                sendError(messages.getMessage(locale, "login.invalidCredentials"), response);
            }
        }

        return null;
    }
}