X-Git-Url: https://git.pterodactylus.net/?a=blobdiff_plain;ds=sidebyside;f=src%2Fmain%2Fjava%2Fnet%2Fpterodactylus%2Fsone%2Fweb%2Fpage%2FTemplatePage.java;h=761e89b6b3b4162ffe99bf49e16ab085d2ffa68e;hb=b7e61f73b7f8661c9f9691c078e7908b81784d3f;hp=d1febb2d1c7c2c8e13d88244b99c22e74c4eefb4;hpb=a37bbba98b4f281a305aef2f03db8b244eae9dbb;p=Sone.git
diff --git a/src/main/java/net/pterodactylus/sone/web/page/TemplatePage.java b/src/main/java/net/pterodactylus/sone/web/page/TemplatePage.java
index d1febb2..761e89b 100644
--- a/src/main/java/net/pterodactylus/sone/web/page/TemplatePage.java
+++ b/src/main/java/net/pterodactylus/sone/web/page/TemplatePage.java
@@ -21,6 +21,7 @@ import java.io.StringWriter;
import java.util.Collection;
import java.util.Collections;
+import net.pterodactylus.sone.web.page.Page.Request.Method;
import net.pterodactylus.util.template.Template;
import freenet.clients.http.LinkEnabledCallback;
import freenet.clients.http.PageMaker;
@@ -30,7 +31,7 @@ import freenet.l10n.BaseL10n;
/**
* Base class for all {@link Page}s that are rendered with {@link Template}s.
- *
+ *
* @author David âBombeâ Roden
*/
public class TemplatePage implements Page, LinkEnabledCallback {
@@ -39,7 +40,7 @@ public class TemplatePage implements Page, LinkEnabledCallback {
private final String path;
/** The template to render. */
- private final Template template;
+ protected final Template template;
/** The L10n handler. */
private final BaseL10n l10n;
@@ -47,9 +48,12 @@ public class TemplatePage implements Page, LinkEnabledCallback {
/** The l10n key for the page title. */
private final String pageTitleKey;
+ /** Where to redirect for invalid form passwords. */
+ private final String invalidFormPasswordRedirectTarget;
+
/**
* Creates a new template page.
- *
+ *
* @param path
* The path of the page
* @param template
@@ -58,12 +62,16 @@ public class TemplatePage implements Page, LinkEnabledCallback {
* The L10n handler
* @param pageTitleKey
* The l10n key of the title page
+ * @param invalidFormPasswordRedirectTarget
+ * The target to redirect to if a POST request does not contain
+ * the correct form password
*/
- public TemplatePage(String path, Template template, BaseL10n l10n, String pageTitleKey) {
+ public TemplatePage(String path, Template template, BaseL10n l10n, String pageTitleKey, String invalidFormPasswordRedirectTarget) {
this.path = path;
this.template = template;
this.l10n = l10n;
this.pageTitleKey = pageTitleKey;
+ this.invalidFormPasswordRedirectTarget = invalidFormPasswordRedirectTarget;
}
/**
@@ -85,11 +93,22 @@ public class TemplatePage implements Page, LinkEnabledCallback {
}
ToadletContext toadletContext = request.getToadletContext();
+ if (request.getMethod() == Method.POST) {
+ /* require form password. */
+ String formPassword = request.getHttpRequest().getPartAsStringFailsafe("formPassword", 32);
+ if (!formPassword.equals(toadletContext.getContainer().getFormPassword())) {
+ return new RedirectResponse(invalidFormPasswordRedirectTarget);
+ }
+ }
PageMaker pageMaker = toadletContext.getPageMaker();
PageNode pageNode = pageMaker.getPageNode(l10n.getString(pageTitleKey), toadletContext);
for (String styleSheet : getStyleSheets()) {
pageNode.addCustomStyleSheet(styleSheet);
}
+ String shortcutIcon = getShortcutIcon();
+ if (shortcutIcon != null) {
+ pageNode.addForwardLink("icon", shortcutIcon);
+ }
try {
processTemplate(request, template);
@@ -107,7 +126,7 @@ public class TemplatePage implements Page, LinkEnabledCallback {
/**
* Can be overridden to return a custom set of style sheets that are to be
* included in the pageâs header.
- *
+ *
* @return Additional style sheets to load
*/
protected Collection getStyleSheets() {
@@ -115,9 +134,18 @@ public class TemplatePage implements Page, LinkEnabledCallback {
}
/**
+ * Returns the name of the shortcut icon to include in the pageâs header.
+ *
+ * @return The URL of the shortcut icon, or {@code null} for no icon
+ */
+ protected String getShortcutIcon() {
+ return null;
+ }
+
+ /**
* Can be overridden when extending classes need to set variables in the
* template before it is rendered.
- *
+ *
* @param request
* The request that is rendered
* @param template
@@ -132,7 +160,7 @@ public class TemplatePage implements Page, LinkEnabledCallback {
/**
* Can be overridden to redirect the user to a different page, in case a log
* in is required, or something else is wrong.
- *
+ *
* @param request
* The request that is processed
* @return The URL to redirect to, or {@code null} to not redirect