/*
    * Copyright 2018-2022 Medical Information Systems Research Group (https://medical.zcu.cz),
    * Department of Computer Science and Engineering, University of West Bohemia.
    * Address: Univerzitni 8, 306 14 Plzen, Czech Republic.
    *
    * Author Petr Vcelak (vcelak@kiv.zcu.cz).
    *
    * This file is part of MRECore project.
    *
   * MRECore is free software: you can redistribute it and/or modify
   * it under the terms of the GNU General Public License as published by
   * the Free Software Foundation, either version 3 of the License.
   *
   * MRECore is distributed in the hope that it will be useful,
   * but WITHOUT ANY WARRANTY; without even the implied warranty of
   * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
   * GNU General Public License for more details.
   *
   * You should have received a copy of the GNU General Public License
   * along with MRECore. If not, see <http://www.gnu.org/licenses/>.
   */
  package cz.zcu.mre.security;
  
  import java.io.IOException;
  import jakarta.servlet.ServletException;
  import jakarta.servlet.http.HttpServletRequest;
  import jakarta.servlet.http.HttpServletResponse;
  import org.slf4j.Logger;
  import org.slf4j.LoggerFactory;
  import org.springframework.security.access.AccessDeniedException;
  import org.springframework.security.web.access.AccessDeniedHandlerImpl;
  
  /**
   * Access Denied Handler.
   *
   * @author Petr Vcelak (vcelak@kiv.zcu.cz)
   */
  public class AccessDeniedHandler extends AccessDeniedHandlerImpl {
  
      private static final Logger LOG = LoggerFactory.getLogger(AccessDeniedHandler.class);
      private static final String LOG_TEMPLATE = "AccessDeniedHandler: User attempted to access a resource for which do not have permission. User {} attempted to access {}";
  
      @Override
      public void handle(HttpServletRequest _request, HttpServletResponse _response, AccessDeniedException _exception) throws IOException, ServletException {
          setErrorPage("/securityAccessDenied");
  
          LOG.error(LOG_TEMPLATE, _request.getRemoteUser(), _request.getRequestURL());
  
          super.handle(_request, _response, _exception);
      }
  }