From 1345f04c927a319d1f541d420250e94bb949fbdd Mon Sep 17 00:00:00 2001
From: ulrich <not disclosed>
Date: Sat, 11 Feb 2017 13:30:21 +0000
Subject: [PATCH] An-/Abmelden eingebaut

---
 src/java/de/uhilger/um/api/UserMgr.java |   98 +++++++++++++++++++------------------------------
 1 files changed, 38 insertions(+), 60 deletions(-)

diff --git a/src/java/de/uhilger/um/api/UserMgr.java b/src/java/de/uhilger/um/api/UserMgr.java
index cf6982a..84a8f3e 100644
--- a/src/java/de/uhilger/um/api/UserMgr.java
+++ b/src/java/de/uhilger/um/api/UserMgr.java
@@ -18,17 +18,13 @@
 
 package de.uhilger.um.api;
 
-import de.uhilger.baselink.GenericRecord;
 import de.uhilger.baselink.PersistenceManager;
-import de.uhilger.baselink.Record;
-import de.uhilger.transit.web.WebKontext;
 import de.uhilger.um.Digester;
 import de.uhilger.um.daten.User;
 import de.uhilger.um.daten.UserRole;
 import java.sql.Connection;
 import java.util.List;
-import java.util.Properties;
-import javax.servlet.ServletContext;
+import java.util.logging.Logger;
 
 /**
  * <p>Die Methoden der Klasse UserMgr sind  
@@ -55,10 +51,9 @@
  *
  * @version 2, December 27, 2016
  */
-public class UserMgr implements WebKontext {
+public class UserMgr extends Api /*implements WebKontext, RequestKontext*/ {
   
-  /** Zeiger zum Servlet-Kontext dieser Anwendung */
-  private ServletContext ctx;
+  private static final Logger logger = Logger.getLogger(UserMgr.class.getName());
   
   /** Name, unter dem das Properties-Objekt mit den SQL-Befehlen im ServletContext hinterlegt ist */
   public static final String UM_SQL_PROPERTIES = "umSqlProperties";
@@ -82,26 +77,30 @@
   public static final String SQL_GET_USER_ROLES = "getUserRoles";
   /** Referenz zum SQL-Befehl zum Loeschen aller Rollen eines Nutzers */
   public static final String SQL_DELETE_USER_ROLES = "deleteUserRoles";
+  public static final String SQL_GET_USER_DATA = "getUserData";
   
-  /** Mapper-Objekt fuer Benutzer */
-  private static final Record UserMapper = new GenericRecord(User.class);
-  /** Mapper-Objekt fuer Benutzerrollen */
-  private static final Record UserRoleMapper = new GenericRecord(UserRole.class);
+  public static final String MP_USER = "userMapper";
+  public static final String MP_USER_DATA = "userDataMapper";
+  public static final String MP_USER_ROLE = "userRoleMapper";
   
   /* ----------- Benutzer -------------- */
   
   public User createUser(User user) throws ClassNotFoundException, InstantiationException, IllegalAccessException {
     String kw = user.getPw();
-    String digesterClassName = ctx.getInitParameter(P_DIGESTER);
+    String digesterClassName = getServletContext().getInitParameter(P_DIGESTER);
     Digester digester = (Digester) Class.forName(digesterClassName).newInstance();
-    String digestedPw = digester.digest(kw, Digester.MD5, null);
+    /*
+      MD5 geht nicht mehr,
+      vgl. http://stackoverflow.com/questions/39967289/how-to-use-digest-authentication-in-tomcat-8-5
+    */
+    String digestedPw = digester.digest(kw, Digester.SHA256, null);
     user.setPw(digestedPw);
-    getDb().insert(user, UserMapper);
+    getDb().insert(user, getMapper(MP_USER));
     return user;
   }
   
   public List getUserNameList() {
-    return getDb().select(getSql(SQL_GET_USER_NAME_LIST), WITHOUT_BLOBS);
+    return removeHeadline(getDb().select(getSql(SQL_GET_USER_NAME_LIST), WITHOUT_BLOBS));
   }
   
   public User deleteUser(User user) {
@@ -109,64 +108,43 @@
     Connection c = pm.getConnection();
     pm.startTransaction(c);
     pm.execute(c, getSql(SQL_DELETE_USER_ROLES), user.getId());
-    User deletedUser = (User) pm.delete(c, user, UserMapper);
+    User deletedUser = (User) pm.delete(c, user, getMapper(MP_USER));
     pm.commit(c);
     return deletedUser;
   }
-    
-  /* ------------ Rollen ------------------ */
-  
-  public UserRole grantRole(String userId, String roleName) {
-    UserRole ur = new UserRole();
-    ur.setRole(roleName);
-    ur.setUser(userId);
-    getDb().insert(ur, UserRoleMapper);
-    return ur;
+     
+  public String logout() {
+    getRequest().getSession().invalidate();
+		return "logged out";
   }
   
-  public UserRole revokeRole(String userId, String roleName) {
-    UserRole ur = new UserRole();
-    ur.setRole(roleName);
-    ur.setUser(userId);
-    getDb().delete(ur, UserRoleMapper);
-    return ur;
+  /* ------------ Rollen ------------------ */
+  
+  public UserRole grantRole(UserRole role) {
+    getDb().insert(role, getMapper(MP_USER_ROLE));
+    return role;
+  }
+  
+  public UserRole revokeRole(UserRole role) {
+    getDb().delete(role, getMapper(MP_USER_ROLE));
+    return role;
   }
   
   public List getRoleNamesGranted() {
-    return getDb().select(getSql(SQL_GET_ROLE_LIST), WITHOUT_BLOBS);
+    return removeHeadline(getDb().select(getSql(SQL_GET_ROLE_LIST), WITHOUT_BLOBS));
   }
   
   public List getUserRoleNames(String userId) {
-    return getDb().select(getSql(SQL_GET_USER_ROLES), WITHOUT_BLOBS, userId);
+    return removeHeadline(getDb().select(getSql(SQL_GET_USER_ROLES), WITHOUT_BLOBS, userId));
   }
   
   /* ----------- Helfer ---- */
   
-  /**
-   * Ein benanntes SQL-Kommando ermitteln 
-   * @param id Name des gewuenschten SQL-Kommandos
-   * @return das SQL-Kommando mit der in id angegebenen Bezeichnung 
-   */
-  private String getSql(String id) {
-    Properties sql = (Properties) ctx.getAttribute(UserMgr.UM_SQL_PROPERTIES);
-    return sql.getProperty(id);
+  private List removeHeadline(List list) {
+    if(list != null && list.size() > 0) {
+      list.remove(0);
+    }
+    return list;
   }
   
-  private PersistenceManager getDb() {
-    return (PersistenceManager) ctx.getAttribute(UM_DB);
-  }
-  
-  /* ------------- Implementierung WebKontext ------------- */
-
-  @Override
-  public ServletContext getServletContext() {
-    return ctx;
-  }
-
-  @Override
-  public void setServletContext(ServletContext servletContext) {
-    this.ctx = servletContext;
-  }
-  
-  
-}
+}
\ No newline at end of file

--
Gitblit v1.9.3