Examples of com.Yasna.forum.Authorization

com.Yasna.forum.Authorization
Proves that a user has successfully logged in. The existence of an Authorization object indicates that a person has logged in correctly and has authentication to act as the user associated with the authentication. An instance of this object can be obtained from an AuthorizationFactory and must be passed in to to get an intstance of ForumFactory.
In the case of using the core forum services through a web interface, the expected behavior is to have a user login and then store the Authorization object in their session.
(Note by Matt) It's my opinion that this authorization method needs better security. At the moment, this method is certainly ok if forum skins can be trusted. However, the security goal has always been to protect as much as possible against malicious skins. Therefore, the implementation of this class will be changed in the near future to use signed objects. Some thought will have to be given to a public/private key management system, so I'm going to delay implementing it for now. This means -- be sure you can trust your skins!! @see AuthorizationFactory @see ForumFactory


        response.setContentType("text/xml; charset=UTF-8");
        response.setHeader("Cache-Control","no-cache");
        PrintWriter out = response.getWriter();


        Authorization authToken = SkinUtils.getUserAuthorization(request,response);
        String userdir=request.getRemoteAddr();
        if( authToken != null ) {
            userdir = Integer.toString(authToken.getUserID());
        }
        String realBaseDir=getServletContext().getRealPath(baseDir+userdir);
        File baseFile=new File(realBaseDir);
        if(!baseFile.exists()){
            baseFile.mkdir();

View Full Code Here

     *
     */
    public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {


        if (debug) System.out.println("--- BEGIN DOPOST ---");
        Authorization authToken = SkinUtils.getUserAuthorization(request,response);
        String userdir=request.getRemoteAddr();
        if( authToken != null ) {
            userdir = Integer.toString(authToken.getUserID());
        }
        String realBaseDir=getServletContext().getRealPath(baseDir+userdir);
        File baseFile=new File(realBaseDir);
        if(!baseFile.exists()){
            baseFile.mkdir();

View Full Code Here

     *
     */
    public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {


        if (debug) System.out.println("--- BEGIN DOPOST ---");
        Authorization authToken = SkinUtils.getUserAuthorization(request,response);
        String userdir=request.getRemoteAddr();
        if( authToken != null ) {
            userdir = Integer.toString(authToken.getUserID());
        }
        if (debug) System.out.println(userdir);
        String realBaseDir=getServletContext().getRealPath(baseDir+userdir);
        File baseFile=new File(realBaseDir);
        if(!baseFile.exists()){

View Full Code Here

TOP

Related Classes of com.Yasna.forum.Authorization

com.fredck.FCKeditor.connector.ConnectorServlet

com.fredck.FCKeditor.uploader.SimpleUploaderServlet

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.