blob: a3a08aabe5bd48d7aee95d02ff6513ef51d25dab [file] [log] [blame]
<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head><meta http-equiv="Content-Type" content="text/html;charset=UTF-8"/><link rel="stylesheet" href="../jacoco-resources/report.css" type="text/css"/><link rel="shortcut icon" href="../jacoco-resources/report.gif" type="image/gif"/><title>SecurityController.java</title><link rel="stylesheet" href="../jacoco-resources/prettify.css" type="text/css"/><script type="text/javascript" src="../jacoco-resources/prettify.js"></script></head><body onload="window['PR_TAB_WIDTH']=4;prettyPrint()"><div class="breadcrumb" id="breadcrumb"><span class="info"><a href="../jacoco-sessions.html" class="el_session">Sessions</a></span><a href="../index.html" class="el_report">Apache Shiro :: Samples :: Spring-Hibernate</a> &gt; <a href="index.source.html" class="el_package">org.apache.shiro.samples.sprhib.web</a> &gt; <span class="el_source">SecurityController.java</span></div><h1>SecurityController.java</h1><pre class="source lang-java linenums">/*
* Licensed to the Apache Software Foundation (ASF) under one
* or more contributor license agreements. See the NOTICE file
* distributed with this work for additional information
* regarding copyright ownership. The ASF licenses this file
* to you under the Apache License, Version 2.0 (the
* &quot;License&quot;); you may not use this file except in compliance
* with the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing,
* software distributed under the License is distributed on an
* &quot;AS IS&quot; BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
* KIND, either express or implied. See the License for the
* specific language governing permissions and limitations
* under the License.
*/
package org.apache.shiro.samples.sprhib.web;
import org.apache.shiro.SecurityUtils;
import org.apache.shiro.authc.AuthenticationException;
import org.apache.shiro.authc.UsernamePasswordToken;
import org.springframework.stereotype.Controller;
import org.springframework.ui.Model;
import org.springframework.validation.BindingResult;
import org.springframework.web.bind.annotation.ModelAttribute;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
/**
* Web MVC controller that handles security-related web requests, such as login and logout.
*/
@Controller
<span class="fc" id="L35">public class SecurityController {</span>
<span class="fc" id="L37"> private LoginValidator loginValidator = new LoginValidator();</span>
@RequestMapping(value=&quot;/login&quot;,method= RequestMethod.GET)
public String showLoginForm(Model model, @ModelAttribute LoginCommand command ) {
<span class="fc" id="L41"> return &quot;login&quot;;</span>
}
@RequestMapping(value=&quot;/login&quot;,method= RequestMethod.POST)
public String login(Model model, @ModelAttribute LoginCommand command, BindingResult errors) {
<span class="fc" id="L46"> loginValidator.validate(command, errors);</span>
<span class="pc bpc" id="L48" title="1 of 2 branches missed."> if( errors.hasErrors() ) {</span>
<span class="nc" id="L49"> return showLoginForm(model, command);</span>
}
<span class="fc" id="L52"> UsernamePasswordToken token = new UsernamePasswordToken(command.getUsername(), command.getPassword(), command.isRememberMe());</span>
try {
<span class="fc" id="L54"> SecurityUtils.getSubject().login(token);</span>
<span class="nc" id="L55"> } catch (AuthenticationException e) {</span>
<span class="nc" id="L56"> errors.reject( &quot;error.login.generic&quot;, &quot;Invalid username or password. Please try again.&quot; );</span>
<span class="fc" id="L57"> }</span>
<span class="pc bpc" id="L59" title="1 of 2 branches missed."> if( errors.hasErrors() ) {</span>
<span class="nc" id="L60"> return showLoginForm(model, command);</span>
} else {
<span class="fc" id="L62"> return &quot;redirect:/s/home&quot;;</span>
}
}
@RequestMapping(&quot;/logout&quot;)
public String logout() {
<span class="nc" id="L68"> SecurityUtils.getSubject().logout();</span>
<span class="nc" id="L69"> return &quot;redirect:/&quot;;</span>
}
}
</pre><div class="footer"><span class="right">Created with <a href="http://www.jacoco.org/jacoco">JaCoCo</a> 0.8.3.201901230119</span></div></body></html>