001/*
002 *  Copyright 2016 Anyware Services
003 *
004 *  Licensed under the Apache License, Version 2.0 (the "License");
005 *  you may not use this file except in compliance with the License.
006 *  You may obtain a copy of the License at
007 *
008 *      http://www.apache.org/licenses/LICENSE-2.0
009 *
010 *  Unless required by applicable law or agreed to in writing, software
011 *  distributed under the License is distributed on an "AS IS" BASIS,
012 *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
013 *  See the License for the specific language governing permissions and
014 *  limitations under the License.
015 */
016package org.ametys.web.site;
017
018import java.util.Collections;
019import java.util.Map;
020
021import org.apache.avalon.framework.parameters.Parameters;
022import org.apache.avalon.framework.service.ServiceException;
023import org.apache.avalon.framework.service.ServiceManager;
024import org.apache.cocoon.acting.ServiceableAction;
025import org.apache.cocoon.environment.ObjectModelHelper;
026import org.apache.cocoon.environment.Redirector;
027import org.apache.cocoon.environment.Request;
028import org.apache.cocoon.environment.SourceResolver;
029
030import org.ametys.core.user.CurrentUserProvider;
031import org.ametys.core.user.UserIdentity;
032import org.ametys.web.WebAuthenticateAction;
033
034/**
035 * Action check if the request attribute WebAuthenticateAction.REQUEST_ATTRIBUTE_FRONTOFFICE_REQUEST is set to true.
036 * Works after the WebAuthentication in a site.
037 */
038public class IsFromFrontOfficeAction extends ServiceableAction
039{
040    private CurrentUserProvider _currentUserProvider;
041
042    @Override
043    public void service(ServiceManager smanager) throws ServiceException
044    {
045        super.service(smanager);
046        
047        _currentUserProvider = (CurrentUserProvider) smanager.lookup(CurrentUserProvider.ROLE);
048    }
049    
050    public Map act(Redirector redirector, SourceResolver resolver, Map objectModel, String source, Parameters parameters) throws Exception
051    {
052        Request request = ObjectModelHelper.getRequest(objectModel);
053        
054        if ("true".equals(request.getAttribute(WebAuthenticateAction.REQUEST_ATTRIBUTE_FRONTOFFICE_REQUEST)))
055        {
056            return Collections.EMPTY_MAP;
057        }
058        
059        if (getLogger().isWarnEnabled())
060        {
061            UserIdentity user = _currentUserProvider.getUser();
062            getLogger().warn("Url '" + request.getRequestURI() + "' was called by " + (user != null ? "'" + user.toString() + "'" : "<anonymous>") + " but not from the front-office.");
063        }
064        return null;
065    }
066}