rapture.server.web.servlet

Class LoginServlet

java.lang.Object

javax.servlet.GenericServlet

javax.servlet.http.HttpServlet

rapture.server.web.servlet.BaseServlet

rapture.server.web.servlet.LoginServlet

All Implemented Interfaces:

java.io.Serializable, javax.servlet.Servlet, javax.servlet.ServletConfig

public class LoginServlet
extends BaseServlet

The login servlet is used to issue RaptureContexts and to validate RaptureContexts. The request is always posted, and contains the following fields: 1. METHOD - "RequestContext", "Login", "ValidateContext" 2. CONTENT - the content of the request We then call the appropriate method (doRequestContext(params) ) and the response is passed back to the caller as a JSON string, which either contains an exception or a valid response. Login is a two-phase process. First a caller requests a context - this is a random uuid, but we store that as data, but blank apart from the username the context is for. A set of salt is also computed. Then the caller performs a login by sending a hash(hash(password), salt) where password is the password for that user. The server can also compute hash(hash(password), salt) as it has hash(password) and salt. If the strings are equal the user is logged in and the context id is associated with that user for a certain amount of time.

See Also:

Serialized Form

Constructor Summary

Constructors

Constructor and Description
LoginServlet()

Method Summary

Modifier and Type	Method and Description
void	doPost(javax.servlet.http.HttpServletRequest req, javax.servlet.http.HttpServletResponse resp)

Methods inherited from class rapture.server.web.servlet.BaseServlet

getByteContentFromPart, getFullContent, getParams, getSessionContext, handleUnexpectedException, processFunctionalRequest, sendResponseAppropriately, validateContext

Methods inherited from class javax.servlet.http.HttpServlet

doDelete, doGet, doHead, doOptions, doPut, doTrace, getLastModified, service, service

Methods inherited from class javax.servlet.GenericServlet

destroy, getInitParameter, getInitParameterNames, getServletConfig, getServletContext, getServletInfo, getServletName, init, init, log, log

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

LoginServlet

public LoginServlet()

Method Detail

doPost

public void doPost(javax.servlet.http.HttpServletRequest req,
                   javax.servlet.http.HttpServletResponse resp)
            throws java.io.IOException,
                   javax.servlet.ServletException

Overrides:

doPost in class javax.servlet.http.HttpServlet

Throws:

java.io.IOException

javax.servlet.ServletException