litvinovg/vitro
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

NIHVIVO-151 handle the case where we come from a bookmark of the login link -- a "return" parameter with no referrer.

Browse source
This commit is contained in:
jeb228 2010-12-10 16:30:22 +00:00
parent e3e7e1ebd6
commit 1a970e6262
3 changed files with 83 additions and 60 deletions
Download patch file Download diff file Expand all files Collapse all files

36
webapp/src/edu/cornell/mannlib/vitro/webapp/controller/authenticate/LoginRedirector.java
View file

@ -30,7 +30,6 @@ public class LoginRedirector {
private final HttpSession session;
private final String uriOfAssociatedIndividual;
private final String loginProcessPage;
private final String afterLoginPage;
public LoginRedirector(HttpServletRequest request,
@ -43,7 +42,6 @@ public class LoginRedirector {
LoginProcessBean processBean = LoginProcessBean.getBean(request);
log.debug("process bean is: " + processBean);
loginProcessPage = processBean.getLoginPageUrl();
afterLoginPage = processBean.getAfterLoginUrl();
}
@ -80,18 +78,15 @@ public class LoginRedirector {
+ "but the system contains no profile for you.");
response.sendRedirect(getApplicationHomePageUrl());
} else {
if (hasSomeplaceToGoAfterLogin()) {
log.debug("Returning to requested page: " + afterLoginPage);
response.sendRedirect(afterLoginPage);
} else if (loginProcessPage == null) {
log.debug("Don't know what to do. Go home.");
response.sendRedirect(getApplicationHomePageUrl());
} else if (isLoginPage(loginProcessPage)) {
if (isLoginPage(afterLoginPage)) {
log.debug("Coming from /login. Going to site admin page.");
response.sendRedirect(getSiteAdminPageUrl());
} else if (null != afterLoginPage) {
log.debug("Returning to requested page: " + afterLoginPage);
response.sendRedirect(afterLoginPage);
} else {
log.debug("Coming from a login widget. Going back there.");
response.sendRedirect(loginProcessPage);
log.debug("Don't know what to do. Go home.");
response.sendRedirect(getApplicationHomePageUrl());
}
}
LoginProcessBean.removeBean(request);
@ -103,18 +98,15 @@ public class LoginRedirector {
public void redirectCancellingUser() throws IOException {
try {
if (hasSomeplaceToGoAfterLogin()) {
log.debug("Returning to requested page: " + afterLoginPage);
response.sendRedirect(afterLoginPage);
} else if (loginProcessPage == null) {
log.debug("Don't know what to do. Go home.");
response.sendRedirect(getApplicationHomePageUrl());
} else if (isLoginPage(loginProcessPage)) {
if (isLoginPage(afterLoginPage)) {
log.debug("Coming from /login. Going to home.");
response.sendRedirect(getApplicationHomePageUrl());
} else if (null != afterLoginPage) {
log.debug("Returning to requested page: " + afterLoginPage);
response.sendRedirect(afterLoginPage);
} else {
log.debug("Coming from a login widget. Going back there.");
response.sendRedirect(loginProcessPage);
log.debug("Don't know what to do. Go home.");
response.sendRedirect(getApplicationHomePageUrl());
}
LoginProcessBean.removeBean(request);
} catch (IOException e) {
@ -131,10 +123,6 @@ public class LoginRedirector {
response.sendRedirect(getApplicationHomePageUrl());
}
private boolean hasSomeplaceToGoAfterLogin() {
return afterLoginPage != null;
}
private boolean isMerelySelfEditor() {
return LoginStatusBean.getBean(session).isLoggedInExactly(
LoginStatusBean.NON_EDITOR);

62
webapp/src/edu/cornell/mannlib/vitro/webapp/controller/edit/Authenticate.java
View file

@ -135,36 +135,60 @@ public class Authenticate extends VitroHttpServlet {
/**
* If they supply an after-login page, record it and use the Login page for
* the process.
* the process. Note that we expect it to be URL-encoded.
*
* If they supply a return flag, record the referrer as the after-login page
* and use the Login page for the process.
* If they supply a return flag, record the current page as the after-login
* page and use the Login page for the process.
*
* Otherwise, use the current page for the process.
*
* The "current page" is the referrer, unless there is no referrer for some
* reason. In that case, pretend it's the login page.
*/
private void recordLoginProcessPages(HttpServletRequest request) {
LoginProcessBean bean = LoginProcessBean.getBean(request);
String afterLoginUrl = request.getParameter(PARAMETER_AFTER_LOGIN);
String afterLoginUrl = decodeAfterLoginParameter(request);
boolean doReturn = isReturnParameterSet(request);
String referrer = whereDidWeComeFrom(request);
if (afterLoginUrl != null) {
try {
String decoded = URLDecoder.decode(afterLoginUrl, "UTF-8");
bean.setAfterLoginUrl(decoded);
} catch (UnsupportedEncodingException e) {
log.error("Really? No UTF-8 encoding?");
}
}
String returnParameter = request.getParameter(PARAMETER_RETURN);
if (returnParameter != null) {
String referrer = request.getHeader("referer");
bean.setAfterLoginUrl(afterLoginUrl);
bean.setLoginPageUrl(request.getContextPath() + Controllers.LOGIN);
} else if (doReturn) {
bean.setAfterLoginUrl(referrer);
}
if (bean.getAfterLoginUrl() != null) {
bean.setLoginPageUrl(request.getContextPath() + Controllers.LOGIN);
} else {
bean.setLoginPageUrl(request.getHeader("referer"));
bean.setAfterLoginUrl(referrer);
bean.setLoginPageUrl(referrer);
}
}
private String decodeAfterLoginParameter(HttpServletRequest request) {
String parm = request.getParameter(PARAMETER_AFTER_LOGIN);
if (parm == null) {
return null;
} else {
try {
return URLDecoder.decode(parm, "UTF-8");
} catch (UnsupportedEncodingException e) {
log.error("No UTF-8 encoding? Really?", e);
return parm;
}
}
}
private boolean isReturnParameterSet(HttpServletRequest request) {
return (null != request.getParameter(PARAMETER_RETURN));
}
/** If no referrer, say we were on the login page. */
private String whereDidWeComeFrom(HttpServletRequest request) {
String referrer = request.getHeader("referer");
if (referrer != null) {
return referrer;
} else {
return request.getContextPath() + Controllers.LOGIN;
}
}