package org.eurekaclinical.common.auth;

/*-
 * #%L
 * Eureka! Clinical Common
 * %%
 * Copyright (C) 2016 - 2018 Emory University
 * %%
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * 
 *      http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 * #L%
 */


import javax.servlet.http.HttpServletRequest;
import javax.ws.rs.core.Response.Status;
import org.eurekaclinical.standardapis.dao.UserDao;
import org.eurekaclinical.standardapis.entity.UserEntity;
import org.eurekaclinical.standardapis.exception.HttpStatusException;
import org.jasig.cas.client.authentication.AttributePrincipal;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

/**
 *
 * @author Andrew Post
 */
public final class AuthorizedUserSupport extends AbstractUserSupport {

    private static final Logger LOGGER = LoggerFactory.getLogger(AuthorizedUserSupport.class);

    private final UserDao userDao;

    public AuthorizedUserSupport(UserDao inUserDao) {
        this.userDao = inUserDao;
    }

    @Override
    public boolean isSameUser(HttpServletRequest servletRequest, UserEntity user) {
        return isSameUser(servletRequest, user.getUsername());
    }

    /**
     * Returns the user object, or if there isn't one, throws an exception.
     *
     * @param servletRequest the HTTP servlet request.
     * @return the user object.
     *
     * @throws HttpStatusException if the logged-in user isn't in the user
     * table, which means the user is not authorized to use eureka-protempa-etl.
     */
    public UserEntity getUser(HttpServletRequest servletRequest) {
        AttributePrincipal principal = getUserPrincipal(servletRequest);
        UserEntity result = this.userDao.getByPrincipal(principal);
        if (result == null) {
            throw new HttpStatusException(Status.FORBIDDEN, "User " + principal.getName() + " is unauthorized to use this resource");
        }
        return result;
    }
}

@@ -36,20 +36,24 @@
 uth;
-%0A
+%0D%0A%0D
 %0A/*-
+%0D
 %0A * #%25L
+%0D
 %0A * 
@@ -75,22 +75,24 @@
 l Common
+%0D
 %0A * %25%25
+%0D
 %0A * Copy
@@ -129,22 +129,24 @@
 iversity
+%0D
 %0A * %25%25
+%0D
 %0A * Lice
@@ -204,16 +204,17 @@
 cense%22);
+%0D
 %0A * you 
@@ -269,24 +269,25 @@
 the License.
+%0D
 %0A * You may 
@@ -317,20 +317,22 @@
 cense at
+%0D
 %0A * 
+%0D
 %0A *     
@@ -374,20 +374,22 @@
 ENSE-2.0
+%0D
 %0A * 
+%0D
 %0A * Unle
@@ -451,16 +451,17 @@
 software
+%0D
 %0A * dist
@@ -521,16 +521,17 @@
 %22 BASIS,
+%0D
 %0A * WITH
@@ -598,16 +598,17 @@
 implied.
+%0D
 %0A * See 
@@ -670,16 +670,17 @@
 ions and
+%0D
 %0A * limi
@@ -709,20 +709,24 @@
 nse.
+%0D
 %0A * #L%25
+%0D
 %0A */
-%0A
+%0D%0A%0D
 %0A%0D%0Ai
@@ -2338,18 +2338,20 @@
  + %22 is 
-u
 n
+ot 
 authoriz

Improve wording of the forbidden status message.