package org.litesoft.servlets;

import javax.servlet.http.*;

import org.litesoft.util.*;

public class LoginValidateServlet extends UnauthenticatedForwardingServlet
{
    protected String process( HttpServletRequest pRequest, HttpServletResponse pResponse, HttpSession pSession )
    {
        UserAuthenticationService service = UserAuthenticationService.getInstance( this );

        String zUserName = pRequest.getParameter( "username" );
        String zPassword = pRequest.getParameter( "password" );

        AuthenticationObject zAO = AuthenticationObject.get( pSession );

        zAO.setUserName( zUserName );

        if ( !service.isUserValid( zUserName, zPassword ) )
        {
            zAO.setMessage( "Invalid User or Password" );
            return "/LoginPageServlet";
        }
        zAO.setAuthenticated( true );
        zAO.setMessage( "" );
        String zTarget = zAO.getTarget();
        if ( zTarget != null )
        {
            return zTarget;
        }
        String zDefaultTargetUrl = Utils.noEmpty( getServletConfig().getInitParameter( "DefaultTargetUrl" ) );
        if ( zDefaultTargetUrl != null )
        {
            return zDefaultTargetUrl;
        }
        zAO.setMessage( "No Default target Url" );
        return "/LoginPageServlet";
    }
}