package zti;

import java.io.IOException;
import java.io.PrintWriter;

import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import javax.security.auth.Subject;
import javax.security.auth.login.LoginContext;
import javax.security.auth.login.LoginException;

/**
 * Servlet implementation class LoginServlet
 */
@WebServlet("/loginAction")
public class LoginServlet extends HttpServlet
{
	private static final long serialVersionUID = 1L;

	private LoginContext loginContext = null;

	protected void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
	    String username = request.getParameterValues("username")[0] ;
	    String password = request.getParameterValues("password")[0] ;

	    PrintWriter out = response.getWriter();

	    try {
	    	loginContext = new LoginContext("system.WEB_INBOUND", new MyCallbackHandler(username));
	    	loginContext.login();
	    }catch(LoginException e)
	    {
	    	out.println("Login failed with " + e.getMessage());
	    	return;
	    }catch(SecurityException e)
	    {
	    	out.println("Login faiaed with " + e.getMessage());
	    	return;
	    }

		out.println ("login succeeded");
	}
}