final betaversion if MOA-ID-Auth Single LogOut

1 files changed, 122 insertions, 0 deletions

diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/IDPSingleLogOutServlet.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/IDPSingleLogOutServlet.java
new file mode 100644
index 000000000..ac4e56023
--- /dev/null
+++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/IDPSingleLogOutServlet.java
@@ -0,0 +1,122 @@
+/*
+ * Copyright 2014 Federal Chancellery Austria
+ * MOA-ID has been developed in a cooperation between BRZ, the Federal
+ * Chancellery Austria - ICT staff unit, and Graz University of Technology.
+ *
+ * Licensed under the EUPL, Version 1.1 or - as soon they will be approved by
+ * the European Commission - subsequent versions of the EUPL (the "Licence");
+ * You may not use this work except in compliance with the Licence.
+ * You may obtain a copy of the Licence at:
+ * http://www.osor.eu/eupl/
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the Licence is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the Licence for the specific language governing permissions and
+ * limitations under the Licence.
+ *
+ * This product combines work with different licenses. See the "NOTICE" text
+ * file for details on the various modules and licenses.
+ * The "NOTICE" text file is part of the distribution. Any derivative works
+ * that you distribute must include a readable copy of the "NOTICE" text file.
+ */
+package at.gv.egovernment.moa.id.auth.servlet;
+
+import java.io.IOException;
+
+import javax.servlet.ServletException;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+
+import org.apache.velocity.VelocityContext;
+
+import at.gv.egovernment.moa.id.auth.data.AuthenticationSession;
+import at.gv.egovernment.moa.id.auth.exception.MOAIDException;
+import at.gv.egovernment.moa.id.commons.db.ex.MOADatabaseException;
+import at.gv.egovernment.moa.id.moduls.AuthenticationManager;
+import at.gv.egovernment.moa.id.moduls.SSOManager;
+import at.gv.egovernment.moa.id.storage.AssertionStorage;
+import at.gv.egovernment.moa.id.storage.AuthenticationSessionStoreage;
+import at.gv.egovernment.moa.id.util.MOAIDMessageProvider;
+import at.gv.egovernment.moa.logging.Logger;
+import at.gv.egovernment.moa.util.MiscUtil;
+
+/**
+ * @author tlenz
+ *
+ */
+public class IDPSingleLogOutServlet extends AuthServlet {
+
+	private static final long serialVersionUID = -1301786072691577221L;
+		
+	protected void doGet(HttpServletRequest req, HttpServletResponse resp)
+			    throws ServletException, IOException {
+		Logger.debug("receive IDP SingleLogOut Request");
+		SSOManager ssomanager = SSOManager.getInstance();		
+		String ssoid = ssomanager.getSSOSessionID(req);
+		
+		Object tokkenObj = req.getParameter(PARAM_SLOSTATUS);
+		String tokken = null;
+		String status = null;
+		if (tokkenObj != null && tokkenObj instanceof String) {
+			tokken = (String) tokkenObj;
+			try {	
+				status = AssertionStorage.getInstance().get(tokken, String.class);
+				if (MiscUtil.isNotEmpty(status)) {
+					AssertionStorage.getInstance().remove(tokken);
+					
+				}
+				VelocityContext context = new VelocityContext();
+				if (SLOSTATUS_SUCCESS.equals(status))
+					context.put("successMsg",
+							MOAIDMessageProvider.getInstance().getMessage("slo.00", null));
+				else
+					context.put("errorMsg", 
+							MOAIDMessageProvider.getInstance().getMessage("slo.01", null));
+	                	
+					ssomanager.printSingleLogOutInfo(context, resp);
+				
+			} catch (MOAIDException e) {
+				handleErrorNoRedirect(e.getMessage(), e, req, resp);
+				
+			} catch (MOADatabaseException e) {
+				handleErrorNoRedirect(e.getMessage(), e, req, resp);
+				
+			}
+			
+		}
+
+		if (MiscUtil.isNotEmpty(status)) {
+			//print status information
+			
+			
+		} else if (MiscUtil.isNotEmpty(ssoid)) {			
+			if (ssomanager.isValidSSOSession(ssoid, null)) {
+				
+				AuthenticationManager authmanager = AuthenticationManager.getInstance();
+				String moaSessionID = AuthenticationSessionStoreage.getMOASessionSSOID(ssoid);
+
+				if (MiscUtil.isNotEmpty(moaSessionID)) {
+					AuthenticationSession authSession;
+					try {
+						authSession = AuthenticationSessionStoreage
+								.getSession(moaSessionID);
+						if(authSession != null) {
+							authmanager.performSingleLogOut(req, resp, authSession, null);
+							
+						}
+						
+					} catch (MOADatabaseException e) {
+						//TODO: insert error Handling
+						
+					} catch (MOAIDException e) {
+						// TODO Auto-generated catch block
+						e.printStackTrace();
+					}
+				}																
+			}						
+		}
+				
+	}
+
+}