import com.mendix.core.Core; //導入方法依賴的package包/類

private void login(IMxRuntimeRequest req, IMxRuntimeResponse resp) throws Exception {

String continuation = req.getParameter(CONTINUATION_PARAM);

detectContinuationJsInjection(continuation);

//special case 1: already a valid session, do not bother with a new login

ISession session = this.getSessionFromRequest(req);

if (session != null && !session.getUser().isAnonymous()) {

//Logout old session and initialize new session. This will allow for role changes to take effect.

String userId = session.getUser().getName();

lockOpenID(userId);

try {

loginHandler.onCompleteLogin(userId, continuation, req, resp);

Core.logout(session);

} finally {

unlockOpenID(userId);

}

} else if (!started) {

//special case 2: no OpenID provider discovered

LOG.warn("OpenId handler is in state 'NOT STARTED'. Falling back to default login.html");

redirect(resp, FALLBACK_LOGINPAGE);

} else {

LOG.debug("Incoming login request, redirecting to OpenID provider");

AuthRequest authReq = manager.authenticate(discovered, OPENID_RETURN_URL);

authReq.setImmediate("true".equalsIgnoreCase(req.getParameter(IMMEDIATE_PARAM)));

String url = authReq.getDestinationUrl(true);

//MWE: publish the url which can be used to sign off

if (SINGLESIGNOFF_ENABLED)

url += "&mxid2.logoffcallback=" + OpenIDUtils.urlEncode(OPENID_LOGOFF_URL);

if (continuation != null)

url += "&mxid2.continuation=" + OpenIDUtils.urlEncode(continuation);

redirect(resp, url);

}

}