Changeset 983 for trunk/grails-app/controllers/dbnp/authentication/LoginController.groovy

Timestamp:

Oct 22, 2010, 4:18:34 PM (12 years ago)

Author:

robert@…

Message:

New type of authentication and authorization added to the rest controller. See ticket 118

File:

• trunk/grails-app/controllers/dbnp/authentication/LoginController.groovy (modified) (2 diffs)

trunk/grails-app/controllers/dbnp/authentication/LoginController.groovy

@@ -24 +24 @@
          */
         def springSecurityService
+
+        /**
+         * Dependency injection for the GSCF authentication service
+         */
+        def AuthenticationService
 
         /**
@@ -55 +60 @@
         }
 
+        /**
+         * Shows the login page for users from a module
+         */
+        def auth_remote = {
+            def consumer    = params.consumer
+            def token       = params.token
+
+                        if( consumer == null || token == null ) {
+                                throw new Exception( "Consumer and Token must be given!" );
+                        }
+
+            def returnUrl   = params.returnUrl
+
+            // If the user is already authenticated with this session_id, redirect
+            // him
+            if( AuthenticationService.isRemotelyLoggedIn( consumer, token ) ) {
+                if( returnUrl ) {
+                                        redirect url: returnUrl
+                } else {
+                    redirect controller: 'home'
+                }
+            }
+
+            // If the user is already logged in locally, we log him in and
+            // immediately redirect him
+            if (AuthenticationService.isLoggedIn()) {
+                                AuthenticationService.logInRemotely( consumer, token, AuthenticationService.getLoggedInUser() )
+
+                                if( returnUrl ) {
+                    redirect url: returnUrl
+                } else {
+                    redirect controller: 'home'
+                }
+            }
+
+            // Otherwise we show the login screen
+                        def config = SpringSecurityUtils.securityConfig
+            String view = 'auth'
+            String postUrl = "${request.contextPath}${config.apf.filterProcessesUrl}"
+            String redirectUrl = g.createLink( absolute: true, controller: 'login', action: 'auth_remote', params: [ consumer: params.consumer, token: params.token, returnUrl: params.returnUrl ] )
+            render view: view, model: [postUrl: postUrl,
+                                       rememberMeParameter: config.rememberMe.parameter, redirectUrl: redirectUrl ]
+        }
+        
         /**
          * Show denied page.