source: branches/2.2/security/ExpressoCertLogin/src/LoginApplet.java @ 3633

import java.awt.Frame;
import java.io.IOException;
import java.net.MalformedURLException;
import java.net.URL;
import java.security.GeneralSecurityException;
import java.security.ProviderException;

import javax.net.ssl.SSLHandshakeException;
import javax.swing.JApplet;
import javax.swing.JOptionPane;
import javax.swing.SwingUtilities;
import org.apache.commons.httpclient.HttpException;

import netscape.javascript.JSObject;

import br.gov.serpro.cert.DigitalCertificate;
import br.gov.serpro.setup.Setup;
import br.gov.serpro.ui.DialogBuilder;

/**
 * GUI que realiza o login com certificados A1 e A3 ou login com usuário e senha no expresso.
 * Esta classe estende a classe JApplet
 * @author Mário César Kolling - mario.kolling@serpro.gov.br
 */
public class LoginApplet extends JApplet {

    /**
     * Valor gerado aleatoriamente
     */
    //TODO: Alterar a cor e fonte dos labels e das caixas de texto e senha.
    private static final long serialVersionUID = -6204158613173951516L;
    private DigitalCertificate dc;
    private Setup setup;

    /* (non-Javadoc)
     * @see java.applet.Applet#init()
     */
    public void init() {
        super.init();
        this.setSize(0, 0);
        this.setup = new Setup(this);
        this.setup.addLanguageResource("ExpressoCertLoginMessages");
    }

    /* (non-Javadoc)
     * @see java.applet.Applet#start()
     */
    @Override
    public void start() {
        super.start();

        int useCertificate = DigitalCertificate.KEYSTORE_NOT_DETECTED;
        boolean tryAgain = true;

        do {

            // Cria uma instância de DigitalCertificate e a inicializa
            this.dc = new DigitalCertificate(this.getDocumentBase(), setup);
            useCertificate = dc.init();
            String[] returnCode = null;

            try {
                switch (useCertificate) {
                    case DigitalCertificate.KEYSTORE_DETECTED:
                        // Mostra PinNeedeDialog.
                        String pin = DialogBuilder.showPinDialog((Frame) SwingUtilities.getAncestorOfClass(Frame.class, this), this.setup);
                        if (pin != null) {
                            dc.openKeyStore(pin.toCharArray());
                            returnCode = dc.getCredentials(pin);

                            // Faz o login
                            if (setup.getParameter("debug").equalsIgnoreCase("true")) {
                                System.out.println("Código de retorno: " + returnCode[0].trim());
                            }

                            if (returnCode == null){ // Ação cancelada
                                tryAgain = false;
                                String redirect = this.getCodeBase().getProtocol() + "://" + this.getCodeBase().getHost() + "/login.php";
                                try {
                                    this.getAppletContext().showDocument(new URL(redirect));
                                } catch (MalformedURLException e) {
                                    // TODO Bloco catch gerado automaticamente
                                    if (setup.getParameter("debug").equalsIgnoreCase("true")) {
                                        e.printStackTrace();
                                    }
                                }
                            }
                            else if (Integer.parseInt(returnCode[0].trim()) == 0) {

                                tryAgain = false;
                                // Pega usuário e senha de credentials[1] e credentials[2], respectivamente
                                // adiciona na página e faz o submit.
                                JSObject document = (JSObject) JSObject.getWindow(this).getMember("document");
                                JSObject loginForm = (JSObject) document.getMember("flogin");
                                JSObject loginField = (JSObject) loginForm.getMember("user");
                                loginField.setMember("value", returnCode[1].trim());

                                JSObject passwdField = (JSObject) loginForm.getMember("passwd");
                                passwdField.setMember("value", returnCode[2].trim());

                                loginForm.call("submit", null);
                                Thread.yield();

                            } else if (Integer.parseInt(returnCode[0].trim()) == 6) {

                                tryAgain = false;

                                if (setup.getParameter("debug").equalsIgnoreCase("true")) {
                                    System.out.println("Mensagem de retorno: " + returnCode[1].trim());
                                }

                                DialogBuilder.showMessageDialog((Frame) SwingUtilities.getAncestorOfClass(Frame.class, this), returnCode[1].trim(), this.setup);



                                String redirect = this.getCodeBase().getProtocol() + "://" + this.getCodeBase().getHost() + "/login.php?cd=98&ts=202";
                                try {
                                    this.getAppletContext().showDocument(new URL(redirect));
                                } catch (MalformedURLException e) {
                                    // TODO Bloco catch gerado automaticamente
                                    if (this.setup.getParameter("debug").equalsIgnoreCase("true")) {
                                        e.printStackTrace();
                                    }
                                }
                            } else {
                                tryAgain = true;
                                dc.destroy();
                                System.gc();

                                if (setup.getParameter("debug").equalsIgnoreCase("true")) {
                                    System.out.println("Mensagem de retorno: " + returnCode[1].trim());
                                }

                                // Mostra mensagem de erro para o usuário
                                DialogBuilder.showMessageDialog((Frame) SwingUtilities.getAncestorOfClass(Frame.class, this), returnCode[1].trim(), this.setup);
                                Thread.yield();
                            }

                        } else {

                            tryAgain = false;
                            String redirect = this.getCodeBase().getProtocol() + "://" + this.getCodeBase().getHost() + "/login.php";
                            try {
                                this.getAppletContext().showDocument(new URL(redirect));
                            } catch (MalformedURLException e) {
                                // TODO Bloco catch gerado automaticamente
                                if (setup.getParameter("debug").equalsIgnoreCase("true")) {
                                    e.printStackTrace();
                                }
                            }
                        }

                        break;
                    default:

                        // Mostra Diálogo dizendo que token não foi encontrado
                        // ou repositório de chaves públicas não foi configurado.
                        // Tentar carregar token/keystore novamente? / Logon sem certificado digital?

                        tryAgain = false;
                        if (setup.getParameter("debug").equalsIgnoreCase("true")) {
                            System.out.println("não achou token");
                        }

                        dc.destroy();
                        System.gc();

                        String redirect = this.getCodeBase().getProtocol() + "://" + this.getCodeBase().getHost() + "/login.php";
                        try {
                            this.getAppletContext().showDocument(new URL(redirect));
                        } catch (MalformedURLException e) {
                            // TODO Bloco catch gerado automaticamente
                            if (setup.getParameter("debug").equalsIgnoreCase("true")) {
                                e.printStackTrace();
                            }
                        }
                }

            } catch (SSLHandshakeException e) {
                if (setup.getParameter("debug").equalsIgnoreCase("true")) {
                    e.printStackTrace();
                }
                dc.destroy();
                System.gc();
                DialogBuilder.showMessageDialog((Frame) SwingUtilities.getAncestorOfClass(Frame.class, this),
                        this.setup.getLang("ExpressoCertLoginMessages", "LoginApplet001"), this.setup);

                Thread.yield();

                tryAgain = true;
            } catch (HttpException e) {
                if (setup.getParameter("debug").equalsIgnoreCase("true")) {
                    e.printStackTrace();
                }

                tryAgain = true;
                Thread.yield();
            } catch (GeneralSecurityException e) {
                if (setup.getParameter("debug").equalsIgnoreCase("true")) {
                    e.printStackTrace();
                }

                DialogBuilder.showMessageDialog((Frame) SwingUtilities.getAncestorOfClass(Frame.class, this),
                        this.setup.getLang("ExpressoCertLoginMessages", "LoginApplet002"), this.setup);

                Thread.yield();
                tryAgain = true;
            } catch (IOException e) {
                dc.destroy();
                System.gc();

                if (setup.getParameter("debug").equalsIgnoreCase("true")) {
                    e.printStackTrace();
                }

                Throwable cause = null;
                if ((cause = e.getCause()) != null) {
                    if (cause instanceof javax.security.auth.login.LoginException) {
                        DialogBuilder.showMessageDialog((Frame) SwingUtilities.getAncestorOfClass(Frame.class, this), this.setup.getLang("ExpressoCertLoginMessages", "LoginApplet003"), this.setup);
                    } else {
                        if (setup.getParameter("debug").equalsIgnoreCase("true")) {
                            System.out.println("Exception lançada: " + cause.getClass().getCanonicalName());
                        }
                    }
                } else {
                    if (e instanceof java.net.ConnectException) {
                        DialogBuilder.showMessageDialog((Frame) SwingUtilities.getAncestorOfClass(Frame.class, this),
                                this.setup.getLang("ExpressoCertLoginMessages", "LoginApplet004"), this.setup);
                    } else {
                        if (setup.getParameter("debug").equalsIgnoreCase("true")) {
                            System.out.println("Exception lançada: " + e.getClass().getCanonicalName());
                        }
                    }
                }

                Thread.yield();
                tryAgain = true;
            } catch (ProviderException e) {

                dc.destroy();
                System.gc();

                if (setup.getParameter("debug").equalsIgnoreCase("true")) {
                    e.printStackTrace();
                }

                int resultado = DialogBuilder.showConfirmDialog((Frame) SwingUtilities.getAncestorOfClass(Frame.class, this),
                        //"Deseja tentar carregá-lo novamente?",
                        this.setup.getLang("ExpressoCertLoginMessages", "LoginApplet005"),
                        JOptionPane.QUESTION_MESSAGE,
                        JOptionPane.OK_CANCEL_OPTION, this.setup);

                if (resultado == JOptionPane.OK_OPTION) {
                    tryAgain = true;
                } else {
                    tryAgain = false;
                }

                Thread.yield();
            }

        } while (tryAgain);

    }

    /**
     * Destrói a Applet, executando códigos para desregistrar tokens, keystores, etc.
     */
    @Override
    public void stop() {
        //super.destroy();
        if (setup.getParameter("debug").equalsIgnoreCase("true")) {
            System.out.println("Finalizando Applet de Login!");
        }

        this.dc.destroy();
        this.dc = null;
        System.gc();
    }
}