From da3ab63dbdd88090933a1ecbe0677038ac1a4905 Mon Sep 17 00:00:00 2001
From: Hendy Irawan <ceefour666@gmail.com>
Date: Fri, 28 Jul 2017 08:30:45 +0700
Subject: [PATCH] SpringLoginButton/Link work in progress

---
 .../soluvas/web/login/SpringLogoutButtpn.java | 80 +++++++++++++++++++
 .../soluvas/web/login/SpringLogoutLink.java   |  3 +
 2 files changed, 83 insertions(+)
 create mode 100644 login/src/main/java/org/soluvas/web/login/SpringLogoutButtpn.java

diff --git a/login/src/main/java/org/soluvas/web/login/SpringLogoutButtpn.java b/login/src/main/java/org/soluvas/web/login/SpringLogoutButtpn.java
new file mode 100644
index 00000000..7b7de891
--- /dev/null
+++ b/login/src/main/java/org/soluvas/web/login/SpringLogoutButtpn.java
@@ -0,0 +1,80 @@
+package org.soluvas.web.login;
+
+import org.apache.wicket.Page;
+import org.apache.wicket.ajax.AjaxRequestTarget;
+import org.apache.wicket.ajax.markup.html.form.AjaxButton;
+import org.apache.wicket.ajax.markup.html.form.AjaxFallbackButton;
+import org.apache.wicket.markup.html.form.Form;
+import org.apache.wicket.markup.html.link.Link;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+import org.soluvas.web.site.Interaction;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestWrapper;
+
+import java.security.Principal;
+
+/**
+ * Logs the current user out and returns to "after logout page", using Spring Security.
+ *
+ * FIXME: resolve https://issues.apache.org/jira/browse/WICKET-6431
+ *
+ * @author ceefour
+ */
+@SuppressWarnings("serial")
+public class SpringLogoutButtpn extends AjaxButton {
+
+	private static final Logger log = LoggerFactory.getLogger(SpringLogoutButtpn.class);
+
+	public SpringLogoutButtpn(String id, Form<?> form) {
+		super(id, form);
+	}
+
+	@Override
+	protected boolean getStatelessHint() {
+		return true;
+	}
+
+	@Override
+	protected void onBeforeRender() {
+		super.onBeforeRender();
+		log.info("onBeforeRender");
+	}
+
+	@Override
+	protected void onError(AjaxRequestTarget target, Form<?> form) {
+		super.onError(target, form);
+		log.info("onError");
+	}
+
+	@Override
+	protected void onAfterSubmit(AjaxRequestTarget target, Form<?> form) {
+		super.onAfterSubmit(target, form);
+		log.info("onAfterSubmit");
+	}
+
+	@Override
+	protected void onSubmit(AjaxRequestTarget target, Form<?> form) {
+		super.onSubmit(target, form);
+		final SecurityContextHolderAwareRequestWrapper request = (SecurityContextHolderAwareRequestWrapper) getRequest().getContainerRequest();
+		final Principal prevUserPrincipal = request.getUserPrincipal();
+		final Class<? extends Page> homePageClass = getApplication().getHomePage();
+		log.info("Logging out '{}' and redirecting to {}", prevUserPrincipal != null ? prevUserPrincipal.getName() : null, homePageClass.getName());
+		SecurityContextHolder.getContext().setAuthentication(null);
+		Interaction.LOGOUT.info(getString("loggedOut")); // TODO: why is this not in FeedbackMessages?
+		setResponsePage(homePageClass);
+		/* For some reason at this point Wicket (6.8.0) throws:
+		 *
+		 * java.lang.IllegalStateException
+		 * getAttribute: Session already invalidated
+		 * at org.apache.catalina.session.StandardSession.getAttribute(StandardSession.java:1165) ~[catalina.jar:7.0.39]
+		 * at org.apache.catalina.session.StandardSessionFacade.getAttribute(StandardSessionFacade.java:122) ~[catalina.jar:7.0.39]
+		 * at org.apache.wicket.session.HttpSessionStore.getAttribute(HttpSessionStore.java:264) ~[wicket-core-6.8.0.jar:6.8.0]
+		 * at org.apache.wicket.Session.getAttribute(Session.java:732) ~[wicket-core-6.8.0.jar:6.8.0]
+		 *
+		 * But logout works fine.
+		 * I've no idea why. -Hendy
+		 */
+	}
+
+}
diff --git a/login/src/main/java/org/soluvas/web/login/SpringLogoutLink.java b/login/src/main/java/org/soluvas/web/login/SpringLogoutLink.java
index a45dff44..14cd7e4d 100644
--- a/login/src/main/java/org/soluvas/web/login/SpringLogoutLink.java
+++ b/login/src/main/java/org/soluvas/web/login/SpringLogoutLink.java
@@ -16,6 +16,9 @@
 
 /**
  * Logs the current user out and returns to "after logout page", using Spring Security.
+ *
+ * FIXME: resolve https://issues.apache.org/jira/browse/WICKET-6431
+ *
  * @author ceefour
  */
 @SuppressWarnings("serial")