Untitled

package java.SDEV425_HW4;

import org.apache.derby.jdbc.ClientDataSource;

import javax.servlet.RequestDispatcher;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import javax.servlet.http.HttpSession;
import java.io.IOException;
import java.io.PrintWriter;
import java.sql.Connection;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.Statement;


public class Authenticate extends HttpServlet {

    // variables
    private String username;
    private String pword;
    private Boolean isValid;
    private int user_id;
    private HttpSession session;

    /**
     * Processes requests for both HTTP <code>GET</code> and <code>POST</code>
     * methods.
     *
     * @param request  servlet request
     * @param response servlet response
     * @throws IOException      if an I/O error occurs
     */
    protected void processRequest(HttpServletRequest request, HttpServletResponse response)
            throws IOException {
        response.setContentType( "text/html;charset=UTF-8" );
        try (PrintWriter out = response.getWriter()) {
            /* TODO output your page here. You may use following sample code. */
            out.println( "<!DOCTYPE html>" );
            out.println( "<html>" );
            out.println( "<head>" );
            out.println( "<title>Servlet Authenticate</title>" );
            out.println( "</head>" );
            out.println( "<body>" );
            out.println( "<h1>Servlet Authenticate at " + request.getContextPath() + "</h1>" );
            out.println( "<h1>Results are " + username + "," + isValid + "</h1>" );
            out.println( "</body>" );
            out.println( "</html>" );
        }
    }

    // <editor-fold defaultstate="collapsed" desc="HttpServlet methods. Click on the + sign on the left to edit the code.">

    /**
     * Handles the HTTP <code>GET</code> method.
     *
     * @param request  servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException      if an I/O error occurs
     */
    @Override
    protected void doGet(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {
        processRequest( request, response );
    }

    /**
     * Handles the HTTP <code>POST</code> method.
     *
     * @param request  servlet request
     * @param response servlet response
     * @throws ServletException if a servlet-specific error occurs
     * @throws IOException      if an I/O error occurs
     */
    @Override
    protected void doPost(HttpServletRequest request, HttpServletResponse response)
            throws ServletException, IOException {

        // Get the post input
        this.username = request.getParameter( "emailAddress" );
        this.pword = request.getParameter( "pfield" );
        try {
            this.isValid = validate( this.username, this.pword );
        } catch (Exception e) {
            e.printStackTrace();
        }
        response.setContentType( "text/html;charset=UTF-8" );
        // Set the session variable
        if (isValid) {
            // Create a session object if it is already not  created.
            session = request.getSession( true );
            session.setAttribute( "UMUCUserEmail", username );
            session.setAttribute( "UMUCUserID", user_id );

            // Send to the Welcome JSP page

            RequestDispatcher dispatcher = request.getRequestDispatcher( "welcome.jsp" );
            dispatcher.forward( request, response );

        } else {
            // Not a valid login
            // refer them back to the Login screen

            request.setAttribute( "ErrorMessage", "Invalid Username or Password. Try again or contact Jim." );
            RequestDispatcher dispatcher = request.getRequestDispatcher( "login.jsp" );
            dispatcher.forward( request, response );
        }
    }

    /**
     * Returns a short description of the servlet.
     *
     * @return a String containing servlet description
     */
    @Override
    public String getServletInfo() {
        return "Short description";
    }// </editor-fold>

    // Method to Authenticate
    public boolean validate(String name, String pass) throws Exception {
        boolean status = false;
        int hitcnt = 0;

        TrippleDes td = new TrippleDes();

        try {
            ClientDataSource ds = new ClientDataSource();
            ds.setDatabaseName( "SDEV425" );
            ds.setServerName( "localhost" );
            ds.setPortNumber( 1527 );
            ds.setUser( td.decrypt( td.getDbUname() ) );
            ds.setPassword( td.decrypt( td.getDbpname() ) );
            ds.setDataSourceName( "jdbc:derby" );

            Connection conn = ds.getConnection();
            Statement statement = null;
            PreparedStatement preparedStatement = null;
            ResultSet resultSet = null;

            try {
            String query = "select user_id from sdev_users  where email = ?";
                preparedStatement = conn.prepareStatement( query );
                preparedStatement.setString( 1, name );
               resultSet = preparedStatement.executeQuery();
                while (resultSet.next()) {
                    user_id = resultSet.getInt( 1 );
                }
                if (user_id > 0) {
            String query2 = "select user_id from user_info where user_id = " + user_id + "and password = ?";
                    PreparedStatement preparedStatement2 = conn.prepareStatement( query2 );
                    preparedStatement2.setString( 2, pass );
                    ResultSet resultSet1 = preparedStatement2.executeQuery();

                    while (resultSet1.next()) {
                        hitcnt++;
                    }

                    if (hitcnt > 0) {
                        status = true;
                    }
                }

            } catch (Exception e) {
                e.printStackTrace();
            }


        } catch (Exception e) {
            e.printStackTrace();
        }
        return status;
    }
}