Web Subjects

interface WebSubject extends Subject, RequestPairSource {
    /**
     * Returns the servlet request associated with this subject.
     *
     * @return the ServletRequest instance
     */
    ServletRequest getServletRequest();
    
    /**
     * Returns the servlet response associated with this subject.
     *
     * @return the ServletResponse instance
     */
    ServletResponse getServletResponse();
    
    /**
     * Builder class for creating WebSubject instances.
     */
    class Builder extends Subject.Builder {
        public Builder(SecurityManager securityManager, ServletRequest request, ServletResponse response);
        
        public Builder sessionId(Serializable sessionId);
        public Builder host(String host);
        public Builder session(Session session);
        public Builder principals(PrincipalCollection principals);
        public Builder authenticated(boolean authenticated);
        
        public WebSubject buildWebSubject();
    }
}

interface WebSubjectContext extends SubjectContext, RequestPairSource {
    ServletRequest getServletRequest();
    ServletResponse getServletResponse();
    void setServletRequest(ServletRequest request);
    void setServletResponse(ServletResponse response);
}

class DefaultWebSubjectContext extends DefaultSubjectContext implements WebSubjectContext {
    public DefaultWebSubjectContext();
    
    public ServletRequest getServletRequest();
    public void setServletRequest(ServletRequest request);
    
    public ServletResponse getServletResponse();
    public void setServletResponse(ServletResponse response);
}

class WebDelegatingSubject extends DelegatingSubject implements WebSubject {
    public WebDelegatingSubject(PrincipalCollection principals, boolean authenticated, String host,
                               Session session, boolean sessionEnabled, ServletRequest request,
                               ServletResponse response, SecurityManager securityManager);
    
    public ServletRequest getServletRequest();
    public ServletResponse getServletResponse();
    
    protected Session decorate(Session session);
}

public void handleWebRequest(HttpServletRequest request, HttpServletResponse response) {
    WebSubject currentUser = (WebSubject) SecurityUtils.getSubject();
    
    // Access servlet request/response through WebSubject
    ServletRequest subjectRequest = currentUser.getServletRequest();
    ServletResponse subjectResponse = currentUser.getServletResponse();
    
    // Standard Subject operations
    if (currentUser.isAuthenticated()) {
        String userId = (String) currentUser.getPrincipal();
        // Handle authenticated user
    }
    
    // Web-specific operations
    HttpServletRequest httpRequest = (HttpServletRequest) subjectRequest;
    String userAgent = httpRequest.getHeader("User-Agent");
}