src/main/java/com/googlesource/gerrit/plugins/gitblit/auth/GerritAuthFilter.java

// Copyright (C) 2012 The Android Open Source Project
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package com.googlesource.gerrit.plugins.gitblit.auth;

import java.io.IOException;
import java.net.HttpURLConnection;

import javax.servlet.FilterChain;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import com.gitblit.GitBlit;
import com.gitblit.models.UserModel;
import com.google.gerrit.httpd.WebSession;
import com.google.inject.Provider;

public class GerritAuthFilter {

  /**
   * Returns the user making the request, if the user has authenticated.
   * @param httpRequest
   * @return user
   */
  public UserModel getUser(HttpServletRequest httpRequest) {
    UserModel user = null;
    String username = (String) httpRequest.getAttribute("gerrit-username");
    String token = (String) httpRequest.getAttribute("gerrit-token");

    if (token == null || username == null) {
      return null;
    }

    user =
        GitBlit.self().authenticate(username,
            (GerritToGitBlitUserService.SESSIONAUTH + token).toCharArray());
    if (user != null) {
      return user;
    }

    return null;
  }

  public boolean doFilter(final Provider<WebSession> webSession,
      ServletRequest request, ServletResponse response, FilterChain chain)
      throws IOException, ServletException {
    HttpServletRequest httpRequest = (HttpServletRequest) request;
    HttpServletResponse httpResponse = (HttpServletResponse) response;

    if (webSession.get().isSignedIn()
        || httpRequest.getHeader("Authorization") != null) {
      request.setAttribute("gerrit-username", webSession.get().getCurrentUser()
          .getUserName());
      request.setAttribute("gerrit-token", webSession.get().getToken());
      return true;
    } else {
      httpResponse.setStatus(HttpURLConnection.HTTP_UNAUTHORIZED);
      httpResponse.setHeader("WWW-Authenticate",
          "Basic realm=\"Gerrit Code Review\"");
      return false;
    }
  }

}