1 /*
2 * Copyright 2005 Arnaud Prost
3 *
4 * Arnaud.prost@gmail.com
5 *
6 * This software is a computer program whose purpose is to ease the
7 * management of software project.
8 *
9 * This software is governed by the CeCILL license under French law and
10 * abiding by the rules of distribution of free software. You can use,
11 * modify and/ or redistribute the software under the terms of the CeCILL
12 * license as circulated by CEA, CNRS and INRIA at the following URL
13 * "http://www.cecill.info".
14 *
15 * As a counterpart to the access to the source code and rights to copy,
16 * modify and redistribute granted by the license, users are provided only
17 * with a limited warranty and the software's author, the holder of the
18 * economic rights, and the successive licensors have only limited
19 * liability.
20 *
21 * In this respect, the user's attention is drawn to the risks associated
22 * with loading, using, modifying and/or developing or reproducing the
23 * software by the user in light of its specific status of free software,
24 * that may mean that it is complicated to manipulate, and that also
25 * therefore means that it is reserved for developers and experienced
26 * professionals having in-depth computer knowledge. Users are therefore
27 * encouraged to load and test the software's suitability as regards their
28 * requirements in conditions enabling the security of their systems and/or
29 * data to be ensured and, more generally, to use and operate it in the
30 * same conditions as regards security.
31 *
32 * The fact that you are presently reading this means that you have had
33 * knowledge of the CeCILL license and that you accept its terms.
34 */
35
36
37 package net.sf.pmr.core.service;
38
39 import net.sf.pmr.core.domain.user.User;
40 import net.sf.pmr.core.domain.user.UserRepository;
41
42 /***
43 * @author Arnaud
44 *
45 * To change the template for this generated type comment go to
46 * Window>Preferences>Java>Code Generation>Code and Comments
47 */
48 public final class SecurityServiceImpl implements SecurityService {
49
50 /***
51 * User Repository to use
52 */
53 private UserRepository userRepository;
54
55 /***
56 * @param userRepository userRepository
57 */
58 public SecurityServiceImpl(final UserRepository userRepository) {
59 this.userRepository = userRepository;
60 }
61
62 /***
63 * return the user corresponding to he login and password or null if any
64 * If a user is found, the password is remove from the instance variable
65 * Login and password aren't case sensitive
66 * @param login login
67 * @param password password
68 * @return User or null
69 */
70 public User login(final String login, final String password) {
71
72 User user = userRepository.findUserByLogin(login);
73
74 // compare the two passwords, if a user is found
75 if (user != null && password.equals(user.getPassword())) {
76 // if a user is found, the password is remove from the instance variable
77 user.setPassword("password not show for security reason");
78 } else {
79 user = null;
80 }
81
82 return user;
83
84 }
85
86 }