source: ether_eccad/trunk/ECCAD_INTERFACE/WEB-INF/src/org/medias/eccad/presentation/filtre/AuthorizationFilter.java @ 68

package org.medias.eccad.presentation.filtre;

import java.io.IOException;

import javax.faces.context.FacesContext;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;


import org.medias.eccad.helpers.LoggerPerso;
import org.medias.eccad.presentation.bean.SessionBean;

public class AuthorizationFilter implements Filter {
        private String errorPage;

        /**Filter should be configured with an system error page.*/
        public void init (FilterConfig FilterConfig) throws ServletException {
               if (FilterConfig != null) { 
                   errorPage = FilterConfig.getInitParameter("error_page");
               }
        }

        public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
               throws ServletException, IOException  {
                LoggerPerso.log(AuthorizationFilter.class, LoggerPerso.DEBUG, "dofilter : en cours");
              if(errorPage == null) {
                 returnError((HttpServletRequest) request, (HttpServletResponse) response,"AuthorizationFilter not properly configured! Contact Administrator.");
              }

              SessionBean sessionbean = (SessionBean)((HttpSession)FacesContext.getCurrentInstance().getExternalContext().getSession(false)).getAttribute("sessionBean");

              if (sessionbean == null) {
                  returnError((HttpServletRequest)request, (HttpServletResponse) response,"User does not exist in session!");
              }
              
              LoggerPerso.log(AuthorizationFilter.class, LoggerPerso.DEBUG, "dofilter : quasi terminé");
              
              if (sessionbean.getEmail() == null)
                  returnError((HttpServletRequest) request, (HttpServletResponse) response,"User does not exist in session!");
              else
                  chain.doFilter(request,response);
        }

        private void returnError(HttpServletRequest request, HttpServletResponse response, String string) throws IOException {
                response.sendRedirect(errorPage);
                
        }

        public void destroy() {
                // TODO Auto-generated method stub
                
        }
}