package org.jrest4guice.security;
import java.security.Principal;
import java.util.HashMap;
import java.util.List;
import java.util.Map;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;
import org.jrest4guice.cache.CacheProvider;
import org.jrest4guice.commons.http.CookieUtil;
import org.jrest4guice.guice.GuiceContext;
import com.google.inject.Inject;
public class SecurityContext {
@Inject(optional=true)
private CacheProvider cacheProvider;
@Inject(optional = true)
protected HttpServletRequest request;
@Inject(optional = true)
protected HttpSession session;
/**
* 用户权限信息字典（仅在用户没有缓存服务器的时候使用）
*/
private static Map<String, UserRole> userRoleMap = new HashMap<String, UserRole>(
0);
public final static String CURRENT_USER_KEY = "_$_current_user_$_";
public final static String CURRENT_USER_ROlE = "_current_user_role_";
public final static String USER_IS_LOGIN = "_user_is_login_";
/**
* 获取当前用户的权限信息
*
* @return
*/
public final UserRole getUserPrincipal() {
if (this.request == null)
return null;
Object uRoleObj = this.session
.getAttribute(CacheProvider.USER_PRINCIPAL_CACHE_KEY_PREFIX);
if (uRoleObj == null) {
Principal userPrincipal = this.request.getUserPrincipal();
if (userPrincipal != null) {
String userName = userPrincipal.getName();
String cacheName = CacheProvider.USER_PRINCIPAL_CACHE_KEY_PREFIX
+ userName;
if (this.cacheProvider != null && this.cacheProvider.isAvailable()) {
uRoleObj = this.cacheProvider.get(cacheName);
this.clearUserPrincipalCache(userName);
} else {// 从缓存服务器中获取不到当前用户的权限信息
uRoleObj = SecurityContext.userRoleMap.get(userName);
}
this.session
.setAttribute(
CacheProvider.USER_PRINCIPAL_CACHE_KEY_PREFIX,
uRoleObj);
}
}
if (uRoleObj != null && uRoleObj instanceof UserRole) {
return (UserRole) uRoleObj;
}
return null;
}
/**
* 判断当前请求有没有指定的角色许可
*
* @param roles
* @return
*/
public boolean isUserInRole(String... roles) {
UserRole userPrincipal = this.getUserPrincipal();
if (roles == null || userPrincipal == null)
return false;
// 如果从缓存服务器中不能获取当前用户的权限信息，就从依赖原始的request实现
boolean result = false;
List<Role> uRoles = userPrincipal.getRoles();
top: for (String role : roles) {
for (Role r : uRoles) {
if (role.equalsIgnoreCase(r.getName())) {
result = true;
break top;
}
}
}
return result;
}
/**
* 保存用户的权限信息
*
* @param userName
* @param userRole
*/
public void storeUserPrincipal(String userName, UserRole userRole) {
if (this.cacheProvider != null && this.cacheProvider.isAvailable())
this.cacheProvider.put(
CacheProvider.USER_PRINCIPAL_CACHE_KEY_PREFIX + userName,
userRole);
else {
SecurityContext.userRoleMap.put(userName, userRole);
}
try {
this.session.setAttribute(CURRENT_USER_KEY, userName);
} catch (Exception e) {
}
}
/**
* 清除用户的权限信息
*
* @param userName
*/
public void clearUserPrincipalCache(String userName) {
if (this.cacheProvider != null && this.cacheProvider.isAvailable())
this.cacheProvider
.delete(CacheProvider.USER_PRINCIPAL_CACHE_KEY_PREFIX
+ userName);
else
SecurityContext.userRoleMap.remove(userName);
}
/**
* 清除当前会话在缓存服务器中的缓存信息
*/
public void clearUserSessionCache(HttpSession session) {
Object currentUserName = session.getAttribute(CURRENT_USER_KEY);
if (currentUserName != null) {
this.clearUserPrincipalCache(currentUserName.toString());
}
// to-do 是否要清除缓存服务器的当前会话对象，还是由缓存服务器自己超时
if (this.cacheProvider != null && this.cacheProvider.isAvailable()) {
Object cookieId = session.getAttribute(CookieUtil.SESSION_NAME);
if (cookieId != null)
this.cacheProvider.delete(cookieId.toString());
}
}
/**
* 返回SecurityContext的实例引用
*
* @return
*/
public static SecurityContext getInstance() {
return GuiceContext.getInstance().getBean(SecurityContext.class);
}
}