// This Source Code is in the Public Domain per: http://unlicense.org
package org.litesoft.servlets;

import org.litesoft.commonfoundation.base.*;

import javax.servlet.http.*;

public class LoginValidateServlet extends UnauthenticatedForwardingServlet {
    @Override
    protected String process( HttpServletRequest pRequest, HttpServletResponse pResponse, HttpSession pSession ) {
        UserAuthenticationService service = UserAuthenticationService.getInstance( this );

        String zUserName = pRequest.getParameter( "username" );
        String zPassword = pRequest.getParameter( "password" );

        AuthenticationObject zAO = AuthenticationObject.get( pSession );

        zAO.setUserName( zUserName );

        if ( !service.isUserValid( zUserName, zPassword ) ) {
            zAO.setMessage( "Invalid User or Password" );
            return "LoginPageServlet";
        }
        zAO.setAuthenticated( true );
        zAO.setMessage( "" );
        String zTarget = zAO.getTarget();
        if ( zTarget != null ) {
            return zTarget;
        }
        String zDefaultTargetUrl = ConstrainTo.significantOrNull( getServletConfig().getInitParameter( "DefaultTargetUrl" ) );
        if ( zDefaultTargetUrl != null ) {
            return zDefaultTargetUrl;
        }
        zAO.setMessage( "No Default target Url" );
        return "LoginPageServlet";
    }
}