package org.apache.blur.console.servlets;
/**
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to You under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
import org.apache.blur.console.filters.ForbiddenException;
import org.apache.blur.console.filters.UnauthorizedException;
import org.apache.blur.console.model.User;
import org.apache.commons.io.IOUtils;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import java.io.IOException;
public abstract class BaseConsoleServlet extends HttpServlet {
private static final long serialVersionUID = -5156028303476799953L;
private static final Log log = LogFactory.getLog(BaseConsoleServlet.class);
protected void sendError(HttpServletResponse response, Exception e) throws IOException {
log.error("Error processing request.", e);
String body = e.getMessage();
response.setContentType("application/json");
response.setContentLength(body.getBytes().length);
response.setStatus(HttpServletResponse.SC_INTERNAL_SERVER_ERROR);
IOUtils.write(body, response.getOutputStream());
}
protected void sendGenericOk(HttpServletResponse response) throws IOException {
String responseBody = "success";
response.setContentType("text/plain");
response.setContentLength(responseBody.getBytes().length);
response.setStatus(HttpServletResponse.SC_OK);
IOUtils.write(responseBody, response.getOutputStream());
}
protected void sendNotFound(HttpServletResponse response, String path) throws IOException {
response.setStatus(HttpServletResponse.SC_NOT_FOUND);
IOUtils.write("URL [" + path + "] doesn't exist", response.getOutputStream());
}
protected void authorize(HttpServletRequest request, String... roles) {
HttpSession session = request.getSession();
User user = (User) session.getAttribute("user");
if(user == null) {
throw new UnauthorizedException();
}
for(String role: roles) {
if(user.hasRole(role)){
return;
}
}
throw new ForbiddenException();
}
}