Add login attempt events

This commit is contained in:
Kristaps Berzinch 2019-04-11 00:51:45 -04:00
parent abacb75df2
commit 1c5dee3edf
1 changed files with 9 additions and 6 deletions

View File

@ -60,19 +60,22 @@ public final class ConfluenceCasAuthenticator extends ConfluenceAuthenticator {
final Assertion assertion = (Assertion) session.getAttribute(AbstractCasFilter.CONST_CAS_ASSERTION);
if (assertion != null) {
final Principal p = getUser(assertion.getPrincipal().getName());
final String username = assertion.getPrincipal().getName();
final Principal user = getUser(username);
// user doesn't exist
if (p == null) {
// user doesn't exist
if (user == null) {
LOGGER.error("Could not determine principal for [{}]", assertion.getPrincipal().getName());
getElevatedSecurityGuard().onFailedLoginAttempt(request, username);
return null;
}
LOGGER.debug("Logging in [{}] from CAS.", p.getName());
LOGGER.debug("Logging in [{}] from CAS.", username);
session.setAttribute(LOGGED_IN_KEY, p);
getElevatedSecurityGuard().onSuccessfulLoginAttempt(request, username);
session.setAttribute(LOGGED_IN_KEY, user);
session.setAttribute(LOGGED_OUT_KEY, null);
return p;
return user;
}
return super.getUser(request, response);