001    //$HeadURL: svn+ssh://jwilden@svn.wald.intevation.org/deegree/base/branches/2.5_testing/src/org/deegree/ogcwebservices/wass/wss/operation/DoServiceSessionHandler.java $
002    /*----------------------------------------------------------------------------
003     This file is part of deegree, http://deegree.org/
004     Copyright (C) 2001-2009 by:
005       Department of Geography, University of Bonn
006     and
007       lat/lon GmbH
008    
009     This library is free software; you can redistribute it and/or modify it under
010     the terms of the GNU Lesser General Public License as published by the Free
011     Software Foundation; either version 2.1 of the License, or (at your option)
012     any later version.
013     This library is distributed in the hope that it will be useful, but WITHOUT
014     ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
015     FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more
016     details.
017     You should have received a copy of the GNU Lesser General Public License
018     along with this library; if not, write to the Free Software Foundation, Inc.,
019     59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
020    
021     Contact information:
022    
023     lat/lon GmbH
024     Aennchenstr. 19, 53177 Bonn
025     Germany
026     http://lat-lon.de/
027    
028     Department of Geography, University of Bonn
029     Prof. Dr. Klaus Greve
030     Postfach 1147, 53001 Bonn
031     Germany
032     http://www.geographie.uni-bonn.de/deegree/
033    
034     e-mail: info@deegree.org
035    ----------------------------------------------------------------------------*/
036    
037    package org.deegree.ogcwebservices.wass.wss.operation;
038    
039    import org.deegree.framework.log.ILogger;
040    import org.deegree.framework.log.LoggerFactory;
041    import org.deegree.i18n.Messages;
042    import org.deegree.ogcwebservices.wass.common.AuthenticationData;
043    import org.deegree.ogcwebservices.wass.exceptions.DoServiceException;
044    import org.deegree.security.session.MemoryBasedSessionManager;
045    import org.deegree.security.session.Session;
046    import org.deegree.security.session.SessionStatusException;
047    
048    /**
049     * Checks if the session presented from a client is valid.
050     *
051     * @author <a href="mailto:bezema@lat-lon.de">Rutger Bezema</a>
052     *
053     * @author last edited by: $Author: mschneider $
054     *
055     * @version 2.0, $Revision: 18195 $, $Date: 2009-06-18 17:55:39 +0200 (Do, 18 Jun 2009) $
056     *
057     * @since 2.0
058     */
059    
060    public class DoServiceSessionHandler extends DoServiceHandler {
061    
062        private static final ILogger LOG = LoggerFactory.getLogger( DoServiceSessionHandler.class );
063    
064        private final MemoryBasedSessionManager sessionManager;
065    
066        /**
067         *
068         */
069        public DoServiceSessionHandler() {
070            sessionManager = MemoryBasedSessionManager.getInstance();
071        }
072    
073        @Override
074        public void handleRequest( DoService request )
075                                throws DoServiceException {
076    
077            AuthenticationData authData = request.getAuthenticationData();
078            if ( authData.usesSessionAuthentication() ) {
079                try {
080                    Session ses = sessionManager.getSessionByID( authData.getCredentials() );
081                    if ( ses == null || !ses.isAlive() ){
082                        throw new DoServiceException(
083                                                      Messages.getMessage(
084                                                                       "WASS_ERROR_INVALID_SESSION",
085                                                                       "WSS" ) );
086    
087                    }
088                    setRequestAllowed( true );
089                } catch ( SessionStatusException e ) {
090                    LOG.logError( e.getLocalizedMessage(), e );
091                    throw new DoServiceException( e.getLocalizedMessage(), e );
092                }
093            }
094    
095        }
096    
097    }