cklein05 commented on a change in pull request #428: URL: https://github.com/apache/tomcat/pull/428#discussion_r655077759
########## File path: java/org/apache/catalina/realm/DataSourceRealm.java ########## @@ -539,6 +612,162 @@ private boolean isRoleStoreDefined() { } + /** + * Return the specified user's requested user attributes as a map. + * + * @param dbConnection The database connection to be used + * @param username User name for which to return user attributes + * + * @return a map containing the specified user's requested user attributes + */ + protected Map<String, Object> getUserAttributesMap(Connection dbConnection, String username) { + + String preparedAttributes = getUserAttributesStatement(dbConnection); + if (preparedAttributes == null || preparedAttributes == USER_ATTRIBUTES_NONE_REQUESTED) { + // The above reference comparison is intentional. USER_ATTRIBUTES_NONE_REQUESTED + // is a tag object (empty String) to distinguish between null (not yet + // initialized) and empty (no attributes requested). + // TODO Could as well be changed to `preparedAttributes.lenghth() = 0` + + // Return null if no user attributes are requested (or if the statement was not + // yet built successfully) + return null; + } + + try (PreparedStatement stmt = dbConnection.prepareStatement(preparedAttributes)) { + stmt.setString(1, username); + + try (ResultSet rs = stmt.executeQuery()) { + + if (rs.next()) { + Map<String, Object> attrs = new LinkedHashMap<>(); + ResultSetMetaData md = rs.getMetaData(); + int ncols = md.getColumnCount(); + for (int columnIndex = 1; columnIndex <= ncols; columnIndex++) { + String columnName = md.getColumnName(columnIndex); + // Ignore case, database may have case-insensitive field names + if (columnName.equalsIgnoreCase(userCredCol)) { + // Always skip userCredCol (must be there if all columns + // have been requested) + continue; + } + attrs.put(columnName, rs.getObject(columnIndex)); + } + return attrs.size() > 0 ? attrs : null; Review comment: You're thinking of array-typed columns? Actually, these don't work as expected. `getObject(int)` only returns a string representation of the array. Maybe that's what the documentation means by _materialized_ > In the JDBC 2.0 API, the behavior of method `getObject` is extended to materialize data of SQL user-defined types. I'm trying to find a way to get real arrays from the database with standard JDBC (in contrast to using driver proprietary types and methods). What other types of multi-valued attributes are you thinking of? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org