Revize 3db487e2

Re #8469 - Improvment security - implementace

• security enhancements
• usage of session storage

src/app/auth/interceptors/auth.interceptor.ts

@@ -20 +20 @@
 
   intercept(request: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>> {
 
-    if (!this.userState.getLoggedIn() && !request.url.includes('ControllerServlet')) {
+    if (!sessionStorage.getItem('sessionid') && !request.url.includes('ControllerServlet')) {
        return of(null);
     }
 
+    if (!request.url.includes('ControllerServlet')){
+      request = request.clone({
+        setParams: {
+          user: sessionStorage.getItem('userName')
+        }
+      });
+    }
+
     return next.handle(request)
       .pipe(
         catchError(err => {

src/app/auth/services/auth.service.ts

@@ -1 +1 @@
 import {Injectable} from '@angular/core';
 import {HttpClient, HttpResponse} from '@angular/common/http';
-import {Observable, of} from 'rxjs';
+import {Observable, of, pipe} from 'rxjs';
 import {catchError, mapTo, tap} from 'rxjs/operators';
 import {Router} from '@angular/router';
 import {CookieService} from 'ngx-cookie-service';
@@ -26 +26 @@
   doLogin(loginInput): Observable<boolean> {
     return this.loginService.login$Response(loginInput)
       .pipe(
-        tap((userInfo: HttpResponse<UserInfo>) => this.setUserFromResponse(userInfo.body)),
+        tap((userInfo: HttpResponse<UserInfo>) => this.setUserFromResponse(userInfo.body, loginInput)),
         mapTo(true),
         catchError(() => {
           return of<boolean>(false);
@@ -42 +42 @@
     return this.userState.getLoggedIn();
   }
 
-  setUserFromResponse(userInfo: UserInfo): UserInfo {
+  setUserFromResponse(userInfo: UserInfo, loginInput): UserInfo {
     this.userState.setUser(userInfo);
     this.userState.setLoggedIn(true);
+    sessionStorage.setItem('userName', loginInput.username)
+    sessionStorage.setItem('sessionid', userInfo.sessionid)
+    sessionStorage.setItem('language', userInfo.language)
+    sessionStorage.setItem('audio', String(userInfo.audio))
+    this.cookieService.set('userName', loginInput.username)
     return userInfo;
   }