trunk/src/modules-core/ac/java/src/org/apache/lenya/cms/cocoon/acting/SslRedirectAction.java

/*
 * Licensed to the Apache Software Foundation (ASF) under one or more
 *  contributor license agreements.  See the NOTICE file distributed with
 *  this work for additional information regarding copyright ownership.
 *  The ASF licenses this file to You under the Apache License, Version 2.0
 *  (the "License"); you may not use this file except in compliance with
 *  the License.  You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 *  Unless required by applicable law or agreed to in writing, software
 *  distributed under the License is distributed on an "AS IS" BASIS,
 *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *  See the License for the specific language governing permissions and
 *  limitations under the License.
 *
 */
package org.apache.lenya.cms.cocoon.acting;

import java.util.Collections;
import java.util.Map;

import org.apache.avalon.framework.parameters.Parameters;
import org.apache.avalon.framework.service.ServiceSelector;
import org.apache.cocoon.acting.ConfigurableServiceableAction;
import org.apache.cocoon.environment.ObjectModelHelper;
import org.apache.cocoon.environment.Redirector;
import org.apache.cocoon.environment.Request;
import org.apache.cocoon.environment.SourceResolver;
import org.apache.lenya.ac.AccessController;
import org.apache.lenya.ac.AccessControllerResolver;
import org.apache.lenya.ac.Policy;
import org.apache.lenya.ac.PolicyManager;
import org.apache.lenya.cms.linking.LinkRewriter;
import org.apache.lenya.cms.linking.OutgoingLinkRewriter;
import org.apache.lenya.cms.repository.RepositoryUtil;
import org.apache.lenya.cms.repository.Session;
import org.apache.lenya.util.ServletHelper;

/**
 * Returns a map if the current request needs a redirect to the <code>https://</code> protocol.
 * This is the case if the policy requires SSL protection and the current request is not secure. The
 * map contains the redirect URI as value for the key <em>redirectUri</em>. Otherwise,
 * <code>null</code> is returned.
 */
public class SslRedirectAction extends ConfigurableServiceableAction {

    /**
     * The key to obtain the redirect URI from the returned map.
     */
    public static final String KEY_REDIRECT_URI = "redirectUri";

    public Map act(Redirector redirector, SourceResolver sourceResolver, Map objectModel,
            String source, Parameters parameters) throws Exception {

        ServiceSelector selector = null;
        AccessControllerResolver resolver = null;
        AccessController accessController = null;

        Request request = ObjectModelHelper.getRequest(objectModel);
        
        if (!request.isSecure()) {
            try {
                selector = (ServiceSelector) this.manager.lookup(AccessControllerResolver.ROLE
                        + "Selector");
    
                resolver = (AccessControllerResolver) selector
                        .select(AccessControllerResolver.DEFAULT_RESOLVER);
    
                String url = ServletHelper.getWebappURI(request);
                accessController = resolver.resolveAccessController(url);
    
                if (accessController != null) {
                    PolicyManager policyManager = accessController.getPolicyManager();
                    Policy policy = policyManager.getPolicy(accessController.getAccreditableManager(),
                            url);
                    if (policy.isSSLProtected()) {
                        Session session = RepositoryUtil.getSession(this.manager, request);
                        LinkRewriter rewriter = new OutgoingLinkRewriter(this.manager, session, url,
                                false, true, false);
                        String sslUri = rewriter.rewrite(url);
                        return Collections.singletonMap(KEY_REDIRECT_URI, sslUri);
                    }
                }
    
            } finally {
                if (selector != null) {
                    if (resolver != null) {
                        if (accessController != null) {
                            resolver.release(accessController);
                        }
                        selector.release(resolver);
                    }
                    this.manager.release(selector);
                }
            }
        }
        return null;
    }
}