// Path: src/main/java/org/osiam/auth/login/internal/InternalAuthentication.java
// public class InternalAuthentication extends UsernamePasswordAuthenticationToken {
// 
//     private static final long serialVersionUID = 5020697919339414782L;
// 
//     public InternalAuthentication(Object principal, Object credentials) {
//         super(principal, credentials);
//     }
// 
//     public InternalAuthentication(Object principal, Object credentials,
//             Collection<? extends GrantedAuthority> authorities) {
//         super(principal, credentials, authorities);
//     }
// }


import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import com.google.common.base.Strings;
import org.osiam.auth.login.internal.InternalAuthentication;
import org.osiam.auth.login.ldap.OsiamLdapAuthentication;
import org.springframework.security.authentication.AuthenticationServiceException;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.core.Authentication;
import org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter;
/*
 * Copyright (C) 2013 tarent AG
 *
 * Permission is hereby granted, free of charge, to any person obtaining
 * a copy of this software and associated documentation files (the
 * "Software"), to deal in the Software without restriction, including
 * without limitation the rights to use, copy, modify, merge, publish,
 * distribute, sublicense, and/or sell copies of the Software, and to
 * permit persons to whom the Software is furnished to do so, subject to
 * the following conditions:
 *
 * The above copyright notice and this permission notice shall be
 * included in all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
 * IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
 * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
 * TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
 * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 */

package org.osiam.security.helper;



public class LoginDecisionFilter extends AbstractAuthenticationProcessingFilter {

    public static final String USERNAME_PARAMETER = "username";
    private static final String PASSWORD_PARAMETER = "password";

    private boolean postOnly = true;

    public LoginDecisionFilter() {
        super("/login/check");
    }

    @Override
    public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response) {
        if (postOnly && !request.getMethod().equals("POST")) {
            throw new AuthenticationServiceException("Authentication method not supported: " + request.getMethod());
        }

        String username = request.getParameter(getUsernameParameter());
        String password = request.getParameter(getPasswordParameter());

        if (username == null) {
            username = "";
        }

        if (password == null) {
            password = "";
        }

        username = username.trim();

        String provider = request.getParameter("provider");

        UsernamePasswordAuthenticationToken authRequest;
        if (!Strings.isNullOrEmpty(provider) && provider.equals("ldap")) {
            authRequest = new OsiamLdapAuthentication(username, password);
        } else {
// Path: src/main/java/org/osiam/auth/login/internal/InternalAuthentication.java
// public class InternalAuthentication extends UsernamePasswordAuthenticationToken {
// 
//     private static final long serialVersionUID = 5020697919339414782L;
// 
//     public InternalAuthentication(Object principal, Object credentials) {
//         super(principal, credentials);
//     }
// 
//     public InternalAuthentication(Object principal, Object credentials,
//             Collection<? extends GrantedAuthority> authorities) {
//         super(principal, credentials, authorities);
//     }
// }


// Path: src/main/java/org/osiam/security/helper/LoginDecisionFilter.java
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import com.google.common.base.Strings;
import org.osiam.auth.login.internal.InternalAuthentication;
import org.osiam.auth.login.ldap.OsiamLdapAuthentication;
import org.springframework.security.authentication.AuthenticationServiceException;
import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
import org.springframework.security.core.Authentication;
import org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter;

/*
 * Copyright (C) 2013 tarent AG
 *
 * Permission is hereby granted, free of charge, to any person obtaining
 * a copy of this software and associated documentation files (the
 * "Software"), to deal in the Software without restriction, including
 * without limitation the rights to use, copy, modify, merge, publish,
 * distribute, sublicense, and/or sell copies of the Software, and to
 * permit persons to whom the Software is furnished to do so, subject to
 * the following conditions:
 *
 * The above copyright notice and this permission notice shall be
 * included in all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
 * IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
 * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
 * TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
 * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 */

package org.osiam.security.helper;



public class LoginDecisionFilter extends AbstractAuthenticationProcessingFilter {

    public static final String USERNAME_PARAMETER = "username";
    private static final String PASSWORD_PARAMETER = "password";

    private boolean postOnly = true;

    public LoginDecisionFilter() {
        super("/login/check");
    }

    @Override
    public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response) {
        if (postOnly && !request.getMethod().equals("POST")) {
            throw new AuthenticationServiceException("Authentication method not supported: " + request.getMethod());
        }

        String username = request.getParameter(getUsernameParameter());
        String password = request.getParameter(getPasswordParameter());

        if (username == null) {
            username = "";
        }

        if (password == null) {
            password = "";
        }

        username = username.trim();

        String provider = request.getParameter("provider");

        UsernamePasswordAuthenticationToken authRequest;
        if (!Strings.isNullOrEmpty(provider) && provider.equals("ldap")) {
            authRequest = new OsiamLdapAuthentication(username, password);
        } else {
            authRequest = new InternalAuthentication(username, password);