package org.litesoft.servlets;

import java.io.*;

import javax.servlet.http.*;

import org.litesoft.util.template.*;

public abstract class AuthenticatedTemplateServlet extends TemplateServlet
{
    protected AuthenticatedTemplateServlet( String pCSShref, String... pJSsrcs )
    {
        super( pCSShref, pJSsrcs );
    }

    protected final TemplateControl resolveQuery( HttpServletRequest pRequest, String pQuery,
                                                  HttpServletResponse pResponse, HttpSession pSession )
            throws IOException
    {
        String zUserIdCookie = CookieAuthenticator.get( pRequest );

        UserAuthenticationService zUserAuthenticationService = UserAuthenticationService.getInstance( this );

        AuthenticationObject zAO = AuthenticationObject.get( pSession );

        if ( zAO.isAuthenticated() )
        {
            TemplateControl zTC = resolveQuery( pRequest, pQuery, pResponse, zAO );
            if ( !zTC.isForwardTo() && zAO.isAuthenticated() && (zUserIdCookie == null) )
            {
                CookieAuthenticator.set( pResponse, zUserAuthenticationService.createCookieForUser( zAO.getUserName() ) );
            }
            return zTC;
        }

        if ( zUserIdCookie != null )
        {
            String zUserName = zUserAuthenticationService.getUserForCookie( zUserIdCookie );
            if ( zUserName != null )
            {
                zAO.setUserName( zUserName );
                zAO.setAuthenticated( true );
                return resolveQuery( pRequest, pQuery, pResponse, zAO );
            }
        }

        String zURI = pRequest.getRequestURI();
        zAO.setTarget( zURI );
        return new TemplateControl( "/LoginPageServlet" );
    }

    abstract protected TemplateControl resolveQuery( HttpServletRequest pRequest, String pQuery,
                                                     HttpServletResponse pResponse, AuthenticationObject pAO )
            throws IOException;
}