<beans
	xmlns="http://java.sun.com/xml/ns/javaee"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/beans_1_0.xsd">
	<interceptors>
		<class>org.apache.deltaspike.security.impl.extension.SecurityInterceptor</class>
	</interceptors>
</beans>

<!-- PicketBox CDI -->
<dependency>
    <groupId>org.picketlink.extensions</groupId>
    <artifactId>picketlink-extensions-core</artifactId>
    <version>${picketlink.extensions.core.version}</version>
</dependency>

/**
 * <p>Bean responsible for producing the {@link ConfigurationBuilder}.</p>
 */
public class PicketBoxConfigurer {

    /**
     * <p>Produces the {@link ConfigurationBuilder}.</p>
     *
     * @return
     */
    @Produces
    public ConfigurationBuilder produceConfiguration() {
        ConfigurationBuilder builder = new ConfigurationBuilder();
        
        // just use the builder to configure the PicketBox behaviour.

        return builder;
    }

}

/**
 * <p>Simple bean for authenticating users.</p>
 */    
public class LoginBean {

    @Inject
    private Identity identity;

    @Inject
    private LoginCredential credential;

    /**
     * <p>Performs the authentication.</p>
     */    
    public void login(String userName, String password) {
        // creates a PicketBox UsernamePasswordCredential.
        credential.setCredential(new UsernamePasswordCredential(userName, password));

        this.identity.login();
        
        if (this.identity.isLoggedIn()) {
            // user is authenticated
        } else {
            // authentication failed
        }
    }

}

/**
 * <p>Simple bean to logout users.</p>
 */
public class LogoutBean {

    @Inject
    private Identity identity;

    /**
     * <p>Performs the logout.</p>
     */
    public void logout() {
        if (this.identity.isLoggedIn()) {
            this.identity.logout();
        }
    }

}

/**
 * <p>
 * Simple bean that observes for some security events.
 * </p>
 *
 */
@ApplicationScoped
public class EventHandler {

    /**
     * <p>
     * Method that observes PicketBox {@link AuthenticationEvent} events.
     * </p>
     *
     * @param event
     */
    @SuppressWarnings("rawtypes")
    public void onAnyAuthenticationEvent(@Observes AuthenticationEvent event) {
    }

    /**
     * <p>
     * Method that observes PicketBox {@link AuthenticationEvent} events. An event will be raised for any successfull
     * authentication performed by the registered {@link AuthenticationManager} instances.
     * </p>
     *
     * @param event
     */
    public void onUserAuthenticatedEvent(@Observes UserAuthenticatedEvent event) {
        AuthenticationStatus status = event.getResult().getStatus();

        // list of messages gathered during the authentication
        List<String> messages = event.getResult().getMessages();

        if (status.equals(AuthenticationStatus.SUCCESS)) {
            Principal principal = event.getResult().getPrincipal();
            // handle a successfull authentication
        } else if (status.equals(AuthenticationStatus.FAILED)) {
            // handle a failed authentication
        }
    }

}

/**
 * <p>Bean responsible for producing the {@link CDIConfigurationBuilder}.</p>
 */
public class PicketBoxConfigurer {

    @Inject
    private DefaultEntityManagerLookupStrategy entityManagerLookupStrategy;
    
    @Produces
    public ConfigurationBuilder createConfiguration() {
        ConfigurationBuilder builder = new ConfigurationBuilder();

        builder
            .identityManager()
                .jpaStore()
                    .entityManagerLookupStrategy(this.entityManagerLookupStrategy);

        return builder;
    }

}

    @Inject
    private IdentityManager identityManager;

    /**
     * <p>Loads some users during the first construction.</p>
     */
    @PostConstruct
    public void loadUsers() {
        User someUser = new SimpleUser("someuser");

        // populates some basic info
        someUser.setEmail("someuser@company.com");
        someUser.setFirstName("Some");
        someUser.setLastName("User");

        this.identityManager.add(someuser);

        // update the user's password
        this.identityManager.updateCredential(someUser, new Password("123".toCharArray()));

        // create some roles
        Role roleDeveloper = new SimpleRole("developer");

        this.identityManager.add(roleDeveloper);

        Role roleAdmin = new SimpleRole("admin");

        this.identityManager.add(roleAdmin);

        // create a group
        Group groupDeveloper = new SimpleGroup("My company");

        this.identityManager.add(groupDeveloper);

        // grant some roles to the user
        this.identityManager.grantRole(someUser, roleDeveloper);
        this.identityManager.grantRole(someUser, roleAdmin);


        // add the user as a member of the group
        this.identityManager.addToGroup(someUser, groupDeveloper);

        // create a guest user
        User guest = new SimpleUser("guest");

        // populates some basic info
        guest.setEmail("guest@company.com");
        guest.setFirstName("Guest");
        guest.setLastName("User");

        this.identityManager.add(guest);
        this.identityManager.updateCredential(guest, new Password("123".toCharArray()));

        Role roleGuest = new SimpleRole("guest");

        this.identityManager.add(roleGuest);

        this.identityManager.grantRole(guest, roleGuest);
    }

UserContext user = identity.getUserContext();

if (user.hasRole("someRole")) {
    // do something
}