From e4f4a9acf6aad5905525621c12a776922db3a18d Mon Sep 17 00:00:00 2001
From: ulrich@undisclosed <ulrich@ulrich-vaio>
Date: Wed, 26 Feb 2020 16:40:02 +0000
Subject: [PATCH] Doku aktualisiert
---
src/java/de/uhilger/um/api/UserMgr.java | 112 +++++++++++++++++++++++++------------------------------
1 files changed, 51 insertions(+), 61 deletions(-)
diff --git a/src/java/de/uhilger/um/api/UserMgr.java b/src/java/de/uhilger/um/api/UserMgr.java
index cf6982a..7775e38 100644
--- a/src/java/de/uhilger/um/api/UserMgr.java
+++ b/src/java/de/uhilger/um/api/UserMgr.java
@@ -1,6 +1,6 @@
/*
* Nutzerverwaltung - User and role management in your browser
- * Copyright (C) 2011-2016 Ulrich Hilger, http://uhilger.de
+ * Copyright (C) 2011-2017 Ulrich Hilger, http://uhilger.de
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
@@ -18,17 +18,13 @@
package de.uhilger.um.api;
-import de.uhilger.baselink.GenericRecord;
import de.uhilger.baselink.PersistenceManager;
-import de.uhilger.baselink.Record;
-import de.uhilger.transit.web.WebKontext;
import de.uhilger.um.Digester;
import de.uhilger.um.daten.User;
import de.uhilger.um.daten.UserRole;
import java.sql.Connection;
import java.util.List;
-import java.util.Properties;
-import javax.servlet.ServletContext;
+import java.util.logging.Logger;
/**
* <p>Die Methoden der Klasse UserMgr sind
@@ -55,10 +51,9 @@
*
* @version 2, December 27, 2016
*/
-public class UserMgr implements WebKontext {
+public class UserMgr extends Api /*implements WebKontext, RequestKontext*/ {
- /** Zeiger zum Servlet-Kontext dieser Anwendung */
- private ServletContext ctx;
+ private static final Logger logger = Logger.getLogger(UserMgr.class.getName());
/** Name, unter dem das Properties-Objekt mit den SQL-Befehlen im ServletContext hinterlegt ist */
public static final String UM_SQL_PROPERTIES = "umSqlProperties";
@@ -82,26 +77,42 @@
public static final String SQL_GET_USER_ROLES = "getUserRoles";
/** Referenz zum SQL-Befehl zum Loeschen aller Rollen eines Nutzers */
public static final String SQL_DELETE_USER_ROLES = "deleteUserRoles";
+ public static final String SQL_GET_USER_DATA = "getUserData";
- /** Mapper-Objekt fuer Benutzer */
- private static final Record UserMapper = new GenericRecord(User.class);
- /** Mapper-Objekt fuer Benutzerrollen */
- private static final Record UserRoleMapper = new GenericRecord(UserRole.class);
+ public static final String MP_USER = "userMapper";
+ public static final String MP_USER_DATA = "userDataMapper";
+ public static final String MP_USER_ROLE = "userRoleMapper";
/* ----------- Benutzer -------------- */
public User createUser(User user) throws ClassNotFoundException, InstantiationException, IllegalAccessException {
+
+ /*
+ Irgendetwas wurde am Tomcat-Mechanismus fuer verschluesslete Kennworte
+ geaendert. Es muss ein eigener Mechanismus implementiert werden.
+ Bis da hin wird das Kennwort im Klartext in der Datenbank gespeichert.
+ */
+
+
+
String kw = user.getPw();
- String digesterClassName = ctx.getInitParameter(P_DIGESTER);
+ String digesterClassName = getServletContext().getInitParameter(P_DIGESTER);
Digester digester = (Digester) Class.forName(digesterClassName).newInstance();
- String digestedPw = digester.digest(kw, Digester.MD5, null);
+
+ /*
+ MD5 geht nicht mehr,
+ vgl. http://stackoverflow.com/questions/39967289/how-to-use-digest-authentication-in-tomcat-8-5
+ */
+
+ String digestedPw = digester.digest(kw, Digester.SHA256, null);
user.setPw(digestedPw);
- getDb().insert(user, UserMapper);
+
+ getDb().insert(user, getMapper(MP_USER));
return user;
}
public List getUserNameList() {
- return getDb().select(getSql(SQL_GET_USER_NAME_LIST), WITHOUT_BLOBS);
+ return removeHeadline(getDb().select(getSql(SQL_GET_USER_NAME_LIST), WITHOUT_BLOBS));
}
public User deleteUser(User user) {
@@ -109,64 +120,43 @@
Connection c = pm.getConnection();
pm.startTransaction(c);
pm.execute(c, getSql(SQL_DELETE_USER_ROLES), user.getId());
- User deletedUser = (User) pm.delete(c, user, UserMapper);
+ User deletedUser = (User) pm.delete(c, user, getMapper(MP_USER));
pm.commit(c);
return deletedUser;
}
-
- /* ------------ Rollen ------------------ */
-
- public UserRole grantRole(String userId, String roleName) {
- UserRole ur = new UserRole();
- ur.setRole(roleName);
- ur.setUser(userId);
- getDb().insert(ur, UserRoleMapper);
- return ur;
+
+ public String logout() {
+ getRequest().getSession().invalidate();
+ return "logged out";
}
- public UserRole revokeRole(String userId, String roleName) {
- UserRole ur = new UserRole();
- ur.setRole(roleName);
- ur.setUser(userId);
- getDb().delete(ur, UserRoleMapper);
- return ur;
+ /* ------------ Rollen ------------------ */
+
+ public UserRole grantRole(UserRole role) {
+ getDb().insert(role, getMapper(MP_USER_ROLE));
+ return role;
+ }
+
+ public UserRole revokeRole(UserRole role) {
+ getDb().delete(role, getMapper(MP_USER_ROLE));
+ return role;
}
public List getRoleNamesGranted() {
- return getDb().select(getSql(SQL_GET_ROLE_LIST), WITHOUT_BLOBS);
+ return removeHeadline(getDb().select(getSql(SQL_GET_ROLE_LIST), WITHOUT_BLOBS));
}
public List getUserRoleNames(String userId) {
- return getDb().select(getSql(SQL_GET_USER_ROLES), WITHOUT_BLOBS, userId);
+ return removeHeadline(getDb().select(getSql(SQL_GET_USER_ROLES), WITHOUT_BLOBS, userId));
}
/* ----------- Helfer ---- */
- /**
- * Ein benanntes SQL-Kommando ermitteln
- * @param id Name des gewuenschten SQL-Kommandos
- * @return das SQL-Kommando mit der in id angegebenen Bezeichnung
- */
- private String getSql(String id) {
- Properties sql = (Properties) ctx.getAttribute(UserMgr.UM_SQL_PROPERTIES);
- return sql.getProperty(id);
+ private List removeHeadline(List list) {
+ if(list != null && list.size() > 0) {
+ list.remove(0);
+ }
+ return list;
}
- private PersistenceManager getDb() {
- return (PersistenceManager) ctx.getAttribute(UM_DB);
- }
-
- /* ------------- Implementierung WebKontext ------------- */
-
- @Override
- public ServletContext getServletContext() {
- return ctx;
- }
-
- @Override
- public void setServletContext(ServletContext servletContext) {
- this.ctx = servletContext;
- }
-
-
-}
+}
\ No newline at end of file
--
Gitblit v1.9.3