Changes between Version 16 and Version 17 of UseCaseImplementation

Timestamp:

02/20/25 15:54:17 (8 months ago)

Author:

222077

Comment:

--

UseCaseImplementation

@@ -396 +396 @@
 === 
 
-
+== **ID-5** - Login
+The `/login` endpoint provides users with authentication functionality through a custom authentication provider. 
+It supports user authentication using email and password credentials, with proper security measures including password encryption and role-based authorization.
+
+=== Authentication Flow
+The login process follows these steps:
+ 1. User accesses the login page: `/login`
+ 2. User submits credentials
+ 3. System validates and authenticates the user
+ 4. User is redirected based on authentication result
+
+=== 
+{{{
+    @Controller
+    @RequestMapping("/login")
+    public class LoginController {
+        @GetMapping
+        public String loginPage(Model model) {
+            model.addAttribute("display", "login");
+            return "master";
+        }
+    }
+}}}
+=== 
+
+==== Controller Details:  
+- **URL Mapping:** `/login`  
+- **Method:** `GET`  
+- **Functionality:**  
+  - Displays the login form when accessed
+  - Handles authentication through Spring Security configuration
+- **View:** Uses the `master` template and dynamically embeds `login` view
+
+==== Authentication Provider Implementation:
+The `CustomAuthenticationProvider` handles the core authentication logic:
+{{{
+    @Component
+    public class CustomAuthenticationProvider implements AuthenticationProvider {
+        private final AccountService accountService;
+        private final PasswordEncoder passwordEncoder;
+
+        @Override
+        public Authentication authenticate(Authentication authentication) 
+                throws AuthenticationException {
+            String username = authentication.getName();
+            String password = authentication.getCredentials().toString();
+
+            if (username.isEmpty() || password.isEmpty()) {
+                throw new BadCredentialsException("Please fill out all fields.");
+            }
+
+            try {
+                UserDetails userDetails = accountService.findOneByPredicate(
+                    AccountSpecification.hasEmail(username));
+
+                if (!passwordEncoder.matches(password, userDetails.getPassword())) {
+                    throw new BadCredentialsException("Invalid username or password");
+                }
+                return new UsernamePasswordAuthenticationToken(
+                    userDetails, 
+                    userDetails.getPassword(), 
+                    userDetails.getAuthorities()
+                );
+            } catch (EntityNotFoundException exc) {
+                throw new BadCredentialsException(exc.getMessage());
+            }
+        }
+    }
+}}}
+
+==== Security Configuration:
+The security rules are defined in `SecurityConfig`:
+{{{
+    @Configuration
+    @EnableWebSecurity
+    @EnableMethodSecurity
+    public class SecurityConfig {
+        @Bean
+        public SecurityFilterChain securityFilterChain(HttpSecurity http) 
+                throws Exception {
+            http
+                .authorizeHttpRequests(
+                    authorizeRequests ->
+                        authorizeRequests
+                            .requestMatchers("/", "/home", "/login", "/css/**", 
+                                "/js/**", "/images/**", "/register", 
+                                "/search-routes")
+                            .permitAll()
+                            .requestMatchers("/routes/company/**")
+                                .hasAnyRole("TRANSPORT_ORGANIZER", "DRIVER")
+                            .requestMatchers("/admin/**")
+                                .hasRole("ADMIN")
+                            .requestMatchers("/trips/user/**")
+                                .hasRole("USER")
+                            .anyRequest().authenticated()
+                )
+                .formLogin(login ->
+                    login.loginPage("/login")
+                        .permitAll()
+                        .defaultSuccessUrl("/")
+                        .failureUrl("/login?error")
+                );
+            return http.build();
+        }
+    }
+}}}
+
+==== Role Resolution:
+User roles are determined through the `RoleResolver` utility:
+{{{
+    public class RoleResolver {
+        public static Collection<? extends GrantedAuthority> resolveRoles(Account account) {
+            List<GrantedAuthority> authorities = new ArrayList<>();
+
+            if (account.getAdmin() != null) {
+                authorities.add(new SimpleGrantedAuthority("ROLE_ADMIN"));
+            }
+            if (account.getStudent() != null) {
+                authorities.add(new SimpleGrantedAuthority("ROLE_STUDENT"));
+            }
+            if (account.getDriver() != null) {
+                authorities.add(new SimpleGrantedAuthority("ROLE_DRIVER"));
+            }
+            if (account.getTransportOrganizer() != null) {
+                authorities.add(new SimpleGrantedAuthority("ROLE_TRANSPORT_ORGANIZER"));
+            }
+            authorities.add(new SimpleGrantedAuthority("ROLE_USER"));
+
+            return authorities;
+        }
+    }
+}}}
+
+=== 
+==== Result of `/login` page
+[[Image(login.png, 100%)]]
+=== 
+
+==== Result of failed login attempt
+[[Image(login-error.png, 100%)]]
+=== 
+
+