问IBM MFP8安全检查后响应

EN

public class UserLoginResource extends UserAuthenticationSecurityCheck {
    private String userId, displayName,errorMsg, cdata, hdata, rid, urlParams, serviceName, queryParameters;   
    private boolean rememberMe = false;
    private boolean authFlag=true;  
    public static JSONObject queryResponse;
    private Map<String, Object> attributes = new HashMap<String, Object>();

    @Context
    AdapterSecurityContext adapterSecurityContext;

    @Override
    protected AuthenticatedUser createUser() {       
        System.out.println("User Authenticated Result "+ userId);        
        return new AuthenticatedUser(userId, displayName, this.getName(), attributes);
    }

    @Override
    protected boolean validateCredentials(Map<String, Object> credentials) {

        try{            
            String username=credentials.get("username").toString();     
            String password = credentials.get("password").toString();    ;

            if (username != null && password != null) {

                queryResponse = <my backend layer>(username, password);

                if(queryResponse.errorExist){                       
                    System.out.println("User Authentication Failed");
                    errorMsg="User Authentication Failed";
                    return false;
                }
                else{
                    System.out.println("User Authentication Sucessful");
                    userId=queryResponse.userid;
                    displayName=queryResponse.fullname;

                    attributes.put("queryParams", queryResponse.toString());                        
                    authFlag=false;
                    errorMsg = null;
                    return true;
                }
            }           
        }
        catch(Exception e){
            e.printStackTrace();
            authFlag =true;
            return false;
        }
        return false;

    }
}