LoginServlet.java DONK

package th.in.oneauth.servlet;

import java.io.IOException;
import java.util.Date;

import javax.servlet.ServletException;
import javax.servlet.annotation.WebServlet;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.apache.commons.lang3.StringUtils;

import com.google.gson.JsonDeserializer;
import com.google.gson.JsonObject;
import com.google.gson.JsonParser;

import th.in.oneauthen.object.UserUidDB;
import th.in.oneauthen.object.DAO.UserUidDAO;

/**
 * Servlet implementation class LoginServlet
 */
@WebServlet("/login")
public class LoginServlet extends HttpServlet {
    private static final long serialVersionUID = 1L;

    public static final String SESSION_PARAM_USER = "userSession";
    public static final String SESSION_PARAM_ONEID_AUTH = "authToken";
    public static final String REQUEST_PARAM_USERNAME = "username";
    // public static final String REQUEST_PARAM_PASSWORD = "password";

    public static final String DASHBOARD_URL = "dashboard.jsp";
    public static final String DASHBOARD_SINGING = "dashboard.jsp?reqp=sigprofile";

    /**
     * @see HttpServlet#HttpServlet()
     */
    public LoginServlet() {
        super();
        // TODO Auto-generated constructor stub
    }

    /**
     * @see HttpServlet#doGet(HttpServletRequest request, HttpServletResponse
     *      response)
     */
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        // TODO Auto-generated method stub
        doPost(request, response);
    }

    /**
     * @see HttpServlet#doPost(HttpServletRequest request, HttpServletResponse
     *      response)
     */
    protected void doPost(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        // TODO Auto-generated method stub

        String username = request.getParameter(REQUEST_PARAM_USERNAME);
        // String password = request.getParameter(REQUEST_PARAM_PASSWORD);

        String oneIdAuthToken = request.getParameter("authToken");

        System.out.println(oneIdAuthToken == null ? "" : oneIdAuthToken);

        JsonObject jsonObject = new JsonParser().parse(oneIdAuthToken).getAsJsonObject();

        String id = jsonObject.get("id").getAsString();
        String email = jsonObject.get("thai_email").getAsString();
        System.out.println(id);
        System.out.println(email);

        JsonObject oneBoxParam = new JsonObject();
        oneBoxParam.addProperty("ACTION", "OneBoxUpload");
        oneBoxParam.addProperty("ID", id);

        JsonObject subObject = new JsonObject();
        subObject.addProperty("EMail", email);
        oneBoxParam.add("SubElement", subObject);

        System.out.println(oneBoxParam.toString());

        UserUidDAO userDao = new UserUidDAO();
        UserUidDB user = null;

        if( userDao.findUsername(username) != null) {
            user = userDao.findUsername(username);
        }

        System.out.println("DAO: " + user);
        System.out.println("oneIdAuth: " + !(StringUtils.isEmpty(oneIdAuthToken)));

        if (StringUtils.isEmpty(oneIdAuthToken) && user == null) {
            LogoutServlet.doLogout(request, response, "Login Failed!!");
        } else if (!StringUtils.isEmpty(oneIdAuthToken) && user == null) {
            // oneIdAuthToken != null && user == null
            UserUidDB newUser = new UserUidDB();
            newUser.setUserName(username);
            newUser.setLastLogin(new Date());
            newUser.setSamlTokenUid(oneIdAuthToken);
            // newUser.setUserPwd(password);
            try {
                userDao.save(newUser);
                System.out.println("Login success!! NewUser");
                request.getSession().setAttribute(SESSION_PARAM_USER, newUser);
                request.getSession().setAttribute(SESSION_PARAM_ONEID_AUTH, email);
                request.getRequestDispatcher(DASHBOARD_SINGING).forward(request, response);
            } catch (Exception e) {
                e.printStackTrace();
                LogoutServlet.doLogout(request, response, "System error !! Please contact system administrator!");
            }

            //
        } else if (!StringUtils.isEmpty(oneIdAuthToken) && userDao.findUsername(username) != null) {
            System.out.println("Login success!!");
            request.getSession().setAttribute(SESSION_PARAM_USER, user);
            request.getSession().setAttribute(SESSION_PARAM_ONEID_AUTH, email);
            request.getRequestDispatcher(DASHBOARD_SINGING).forward(request, response);
        }

        else
            LogoutServlet.doLogout(request, response, "Login Failed!!");

        // UserUidDAO userDao = new UserUidDAO();
        //
        // UserUidDB user = userDao.findUsername(username);
        // if (user != null) {
        // System.out.println(user.getUserName());
        // if (user.getUserPwd().equals(password)) {
        // System.out.println("Login success!!");
        // request.getSession().setAttribute(SESSION_PARAM_USER, user);
        // request.getRequestDispatcher(DASHBOARD_URL).forward(request, response);
        // }else LogoutServlet.doLogout(request, response, "Invalid username or
        // password!!!");
        // }else {LogoutServlet.doLogout(request, response, "Invalid username or
        // password!!!");
        // }

    }
}