package?auth;

import?java.io.*;
import?java.util.*;
import?java.util.concurrent.*;

import?javax.servlet.*;
import?javax.servlet.http.*;
import?ldap.LdapBean;

/**
?*
?*?@author?Guo?ShuYang
?*?@version
?*/
//類SSOAuth用來(lái)驗(yàn)證Web應(yīng)用派發(fā)過(guò)來(lái)的用戶的信息的合法性，是單點(diǎn)登錄系統(tǒng)的核心類
public?class?SSOAuth?extends?HttpServlet?{???
??
	static?private?ConcurrentMap?accounts;	//用來(lái)存儲(chǔ)從ldap目錄中讀取的用戶信息
????static?private?ConcurrentMap?SSOIDs;	//用來(lái)存儲(chǔ)臨時(shí)生成的用戶身份標(biāo)識(shí)
????String?cookiename?=?“?“;	//?本應(yīng)用中使用的cookie的名字
????String?domainname?=?“?“;	//?本應(yīng)用部署的服務(wù)器的域名
	private?String?gotoURL?=?“?“;	//?身份驗(yàn)證成功派發(fā)到的目標(biāo)地址
	LdapBean?ldap?=?new?LdapBean（）;	//?從ldap目錄中讀取用戶信息的Bean類
????
????//?初始化系統(tǒng)的一些參數(shù)
	public?void?init（ServletConfig?config）?throws?ServletException?{
????????super.init（config）;
????????domainname=?config.getInitParameter（“domainname“）;
????????cookiename?=?config.getInitParameter（“cookiename“）;
????????SSOIDs?=?new?ConcurrentHashMap（）;
????????accounts=new?ConcurrentHashMap（）;
????????accounts=ldap.getAccountsInfo（）;
????}
????
	//?處理來(lái)自Web應(yīng)用派發(fā)過(guò)來(lái)的請(qǐng)求
????protected?void?processRequest（HttpServletRequest?request?HttpServletResponse?response）
????throws?ServletException?IOException?{
????????PrintWriter?out?=?response.getWriter（）;
????????String?action?=?request.getParameter（“action“）;	//查新請(qǐng)求的動(dòng)作類型
????????gotoURL?=?request.getParameter（“goto“）;
		String?result=“failed“;
????????if?（action==null）?{??//第一次登錄系統(tǒng)，派發(fā)到登錄頁(yè)面
????????????handlerFromLogin（requestresponse）;
????????}?
????????else?if?（action.equals（“authcookie“））{?//驗(yàn)證cookie有效性
????????????String?myCookie?=?request.getParameter（“cookiename“）;
????????????if?（myCookie?!=?null）??result?=?authCookie（myCookie）;
????????????out.print（result）;
????????????out.close（）;
????????}?
????????else?if?（action.equals（“authuser“））?{?//驗(yàn)證用戶信息有效性
????????????result=authNameAndPasswd（requestresponse）;
????????????out.print（result）;
????????????out.close（）;
????????}??
????????else?if?（action.equals（“l(fā)ogout“））?{	//處理注銷服務(wù)
????????????String?myCookie?=?request.getParameter（“cookiename“）;
????????????logout（myCookie）;
????????????out.close（）;
????????}
????}???
????
??????
????//?靜態(tài)函數(shù)，驗(yàn)證cookie的有效性
????static?public?String?authCookie（String?value）{
????????String?result?=?（String）?SSOIDs.get（value）;
????????if?（result?==?null）?{
????????????result?=?“failed“;
????????????System.out.println（“Authentication?failed!“）;
????????}?else?{
????????????System.out.println（“Authentication?success!“）;
????????}
????????return?result;
????}
????
????//?靜態(tài)函數(shù)，驗(yàn)證用戶名的有效性
????static?public?String?authUserAndPass（String?username?String?password）{
????????String?pass?=?（String）accounts.get（username）;
????????if?（（pass==null）||（!pass.equals（password）））?
????????	return?“failed“;
????????String?newID?=?createUID（）;
????????SSOIDs.put（newID?username）;
????????return?username;
????}????
????
????//驗(yàn)證用戶的密碼有效性
????protected?String?authNa