@Transactional(noRollbackFor = {BadCredentialsException.class, DisabledException.class})
public Authentication authenticate(final Authentication authentication)
throws AuthenticationException {
boolean authenticated = false;
SyncopeUser user = null;
String username = authentication.getName();
if (adminUser.equals(username)) {
authenticated = authenticate(
authentication.getCredentials().toString(),
CipherAlgorithm.valueOf(adminPasswordAlgorithm),
adminPassword);
} else {
user = userDAO.find(username);
if (user != null && user.isSuspended() != null) {
if (user.isSuspended()) {
throw new DisabledException("User " + user.getUsername() + " is suspended");
}
authenticated = authenticate(
authentication.getCredentials().toString(),
user.getCipherAlgorithm(),
user.getPassword());
}
}
UsernamePasswordAuthenticationToken token;
if (authenticated) {
token = new UsernamePasswordAuthenticationToken(
authentication.getPrincipal(),
null,
userDetailsService.loadUserByUsername(authentication.getPrincipal().toString()).getAuthorities());
token.setDetails(authentication.getDetails());
auditManager.audit(Category.authentication, AuthenticationSubCategory.login, Result.success,
"Successfully authenticated, with roles: " + token.getAuthorities());
LOG.debug("User {} successfully authenticated, with roles {}",
authentication.getPrincipal(), token.getAuthorities());
if (user != null) {
user.setLastLoginDate(new Date());
user.setFailedLogins(0);
userDAO.save(user);
}
} else {
if (user != null) {
user.setFailedLogins(user.getFailedLogins() + 1);
userDAO.save(user);
}
auditManager.audit(Category.authentication, AuthenticationSubCategory.login, Result.failure,
"User " + authentication.getPrincipal() + " not authenticated");