/*
    * Licensed to the Apache Software Foundation (ASF) under one
    * or more contributor license agreements.  See the NOTICE file
    * distributed with this work for additional information
    * regarding copyright ownership.  The ASF licenses this file
    * to you under the Apache License, Version 2.0 (the
    * "License"); you may not use this file except in compliance
    * with the License.  You may obtain a copy of the License at
    *
   *     http://www.apache.org/licenses/LICENSE-2.0
   *
   * Unless required by applicable law or agreed to in writing,
   * software distributed under the License is distributed on an
   * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
   * KIND, either express or implied.  See the License for the
   * specific language governing permissions and limitations
   * under the License.
   */
  package org.apache.shiro.samples;
  
  import org.apache.shiro.SecurityUtils;
  import org.apache.shiro.authz.AuthorizationException;
  import org.apache.shiro.realm.Realm;
  import org.apache.shiro.realm.text.TextConfigurationRealm;
  import org.apache.shiro.spring.web.config.DefaultShiroFilterChainDefinition;
  import org.apache.shiro.spring.web.config.ShiroFilterChainDefinition;
  import org.apache.shiro.subject.Subject;
  import org.slf4j.Logger;
  import org.slf4j.LoggerFactory;
  import org.springframework.boot.SpringApplication;
  import org.springframework.boot.autoconfigure.SpringBootApplication;
  import org.springframework.context.annotation.Bean;
  import org.springframework.context.annotation.Configuration;
  import org.springframework.http.HttpStatus;
  import org.springframework.ui.Model;
  import org.springframework.web.bind.annotation.ControllerAdvice;
  import org.springframework.web.bind.annotation.ExceptionHandler;
  import org.springframework.web.bind.annotation.ModelAttribute;
  import org.springframework.web.bind.annotation.ResponseStatus;
  
  import java.util.HashMap;
  import java.util.Map;
  
  @Configuration
  @ControllerAdvice
  @SpringBootApplication
  public class WebApp { //NOPMD
  
      private static Logger log = LoggerFactory.getLogger(WebApp.class);
  
      public static void main(String[] args) {
  
          SpringApplication.run(WebApp.class, args);
      }
  
      @ExceptionHandler(AuthorizationException.class)
      @ResponseStatus(HttpStatus.FORBIDDEN)
      public String handleException(AuthorizationException e, Model model) {
  
          // you could return a 404 here instead (this is how github handles 403, so the user does NOT know there is a
          // resource at that location)
          log.debug("AuthorizationException was thrown", e);
  
          Map<String, Object> map = new HashMap<String, Object>();
          map.put("status", HttpStatus.FORBIDDEN.value());
          map.put("message", "No message available");
          model.addAttribute("errors", map);
  
          return "error";
      }
  
      @Bean
      public Realm realm() {
          TextConfigurationRealm realm = new TextConfigurationRealm();
          realm.setUserDefinitions("joe.coder=password,user\n" +
                  "jill.coder=password,admin");
  
          realm.setRoleDefinitions("admin=read,write\n" +
                  "user=read");
          realm.setCachingEnabled(true);
          return realm;
      }
  
      @Bean
      public ShiroFilterChainDefinition shiroFilterChainDefinition() {
          DefaultShiroFilterChainDefinition chainDefinition = new DefaultShiroFilterChainDefinition();
          chainDefinition.addPathDefinition("/login.html", "authc"); // need to accept POSTs from the login form
          chainDefinition.addPathDefinition("/logout", "logout");
          return chainDefinition;
      }
  
      @ModelAttribute(name = "subject")
      public Subject subject() {
          return SecurityUtils.getSubject();
      }
  }