package org.litesoft.servlets;

import javax.servlet.http.*;

public abstract class AuthenticatedForwardingServlet extends ForwardingServlet
{
    protected final String process( HttpServletRequest pRequest, HttpServletResponse pResponse, HttpSession pSession )
    {
        String zUserIdCookie = CookieAuthenticator.get( pRequest );

        UserAuthenticationService zUserAuthenticationService = UserAuthenticationService.getInstance( this );

        AuthenticationObject zAO = AuthenticationObject.get( pSession );

        if ( zAO.isAuthenticated() )
        {
            String zForwardTp = process( pRequest, pSession );
            if ( zAO.isAuthenticated() && (zUserIdCookie == null) )
            {
                CookieAuthenticator.set( pResponse, zUserAuthenticationService.createCookieForUser( zAO.getUserName() ) );
            }
            return zForwardTp;
        }

        if ( zUserIdCookie != null )
        {
            String zUserName = zUserAuthenticationService.getUserForCookie( zUserIdCookie );
            if ( zUserName != null )
            {
                zAO.setUserName( zUserName );
                zAO.setAuthenticated( true );
                return process( pRequest, pSession );
            }
        }

        zAO.setMessage( "" );
        return "/LoginPageServlet";
    }

    abstract protected String process( HttpServletRequest pRequest, HttpSession pSession );
}