Redirect to my app login page when SSO cookie is not set

[Migrated From Jforum.net]

I have created my own CookieUserSSO class so that the users of my site can directly logon to Jforum. The URLs look like these:

http://localhost/myapp (My app)
http://localhost/jforum (JForum)

This is working fine, when I login first to myapp then then go to Jforum.

But when I close the browser, open a new one and directly type the http://localhost/jforum URL without login to myapp, I was expecting that myapp login URL will come. But it is still going to the forum list page, but getting some errors (since I am using some session variables). I have set the sso.redirect to http://localhost/myapp but it is not working. Please help me out.

Regards,
Satish.

[originally posted on jforum.net by nosaku]

[Migrated From Jforum.net]

Here is the code:

package net.jforum.sso;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;
import javax.servlet.http.Cookie;

import net.jforum.ControllerUtils;
import net.jforum.JForumExecutionContext;
import net.jforum.context.RequestContext;
import net.jforum.entities.UserSession;
import net.jforum.util.preferences.ConfigKeys;
import net.jforum.util.preferences.SystemGlobals;
import net.jforum.JForum;

public class CookieUserSSO implements SSO {          // you must implement met.jforum.sso.SSO

	public String authenticateUser(RequestContext request) {
        Cookie myCookie = ControllerUtils.getCookie("auto-login"); // my app login cookie
        String user = null;

        System.out.println("myCookie: " + myCookie);

        if (myCookie != null) {
            String str = myCookie.getValue();
            String[] arr = str.split(",");
            user = arr[0];
            request.getSessionContext().setAttribute("companyId", arr[1]);
            System.out.println("user: " + user + ", companyId: " + arr[1]);
        } else {
            System.out.println("No cookie found");
            return null; // no cookie found
        }
        
        ControllerUtils.addCookie("JforumSSO", user); //refresh
        
        return user; // jforum username
    }
    
	public boolean isSessionValid(UserSession userSession, RequestContext request) {
        String remoteUser  = null;
        Cookie myCookie = ControllerUtils.getCookie("JforumSSO");

        System.out.println("myCookie 2: " + myCookie);

        if (myCookie != null) {
            remoteUser = myCookie.getValue(); //  jforum username
        }
        
        System.out.println("remoteUser: " + remoteUser);

        // user has since logged out
        if(remoteUser == null && 
                userSession.getUserId() != SystemGlobals.getIntValue(ConfigKeys.ANONYMOUS_USER_ID)) {
            return false;
            
         // user has since logged in
        } else if(remoteUser != null && 
                userSession.getUserId() == SystemGlobals.getIntValue(ConfigKeys.ANONYMOUS_USER_ID)) {
            return false;
            
        // user has changed user
        } else if(remoteUser != null && !remoteUser.equals(userSession.getUsername())) {
            return false;
        }

        System.out.println("Returning true");

        return true; // myapp user and forum user the same
    }
}

[originally posted on jforum.net by nosaku]