/activeobjects-plugin/src/main/java/com/atlassian/plugin/web/springmvc/interceptor/WebSudoAuthorisationInterceptor.java

 1package com.atlassian.plugin.web.springmvc.interceptor;
 2
 3import com.atlassian.sal.api.websudo.WebSudoManager;
 4import com.atlassian.sal.api.websudo.WebSudoSessionException;
 5import org.springframework.web.servlet.handler.HandlerInterceptorAdapter;
 6
 7import javax.servlet.http.HttpServletRequest;
 8import javax.servlet.http.HttpServletResponse;
 9
10/**
11 * Requires a WebSudo session to access admin pages.
12 */
13public final class WebSudoAuthorisationInterceptor extends HandlerInterceptorAdapter {
14    private WebSudoManager webSudoManager;
15
16    public WebSudoAuthorisationInterceptor(WebSudoManager webSudoManager) {
17        this.webSudoManager = webSudoManager;
18    }
19
20    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
21        try {
22            webSudoManager.willExecuteWebSudoRequest(request);
23            return true;
24        } catch (WebSudoSessionException wes) {
25            webSudoManager.enforceWebSudoProtection(request, response);
26            return false;
27        }
28    }
29}