From e26d81c7430d8668b3af1bbf15672f06a855d6d0 Mon Sep 17 00:00:00 2001
From: ninioe <ninioe@gmail.com>
Date: Sun, 7 Aug 2016 09:48:44 +0300
Subject: check user cookies on server side before login dialog

---
 src/org/traccar/api/resource/SessionResource.java | 25 +++++++++++++++++++++++
 1 file changed, 25 insertions(+)

(limited to 'src/org/traccar/api/resource')

diff --git a/src/org/traccar/api/resource/SessionResource.java b/src/org/traccar/api/resource/SessionResource.java
index 745088a4d..5d41cdd71 100644
--- a/src/org/traccar/api/resource/SessionResource.java
+++ b/src/org/traccar/api/resource/SessionResource.java
@@ -20,6 +20,7 @@ import org.traccar.api.BaseResource;
 import org.traccar.model.User;
 
 import javax.annotation.security.PermitAll;
+import javax.servlet.http.Cookie;
 import javax.servlet.http.HttpServletRequest;
 import javax.ws.rs.Consumes;
 import javax.ws.rs.DELETE;
@@ -39,6 +40,8 @@ import java.sql.SQLException;
 public class SessionResource extends BaseResource {
 
     public static final String USER_ID_KEY = "userId";
+    public static final String USER_COOKIE_KEY = "user";
+    public static final String PASS_COOKIE_KEY = "pass";
 
     @javax.ws.rs.core.Context
     private HttpServletRequest request;
@@ -47,6 +50,28 @@ public class SessionResource extends BaseResource {
     @GET
     public User get() throws SQLException {
         Long userId = (Long) request.getSession().getAttribute(USER_ID_KEY);
+        if (userId == null) {
+            Cookie[] cookies = request.getCookies();
+            String email = null, password = null;
+            if (cookies != null) {
+                for (int i = 0; i < cookies.length; i++) {
+                    if (cookies[i].getName().equals(USER_COOKIE_KEY)) {
+                        email = cookies[i].getValue();
+                    }
+                    if (cookies[i].getName().equals(PASS_COOKIE_KEY)) {
+                        password = cookies[i].getValue();
+                    }
+                }
+            }
+            if (email != null && password != null){
+                User user = Context.getDataManager().login(email, password);
+                if (user != null) {
+                    userId = user.getId();
+                    request.getSession().setAttribute(USER_ID_KEY, userId);
+                }
+            }
+        }
+
         if (userId != null) {
             return Context.getDataManager().getUser(userId);
         } else {
-- 
cgit v1.2.3