main/js/authentication-server-side.js

var START_TIME = 9;  // 9am
var END_TIME   = 17; // 5pm

logger.message("Starting authentication javascript");
logger.message("User: " + username);

// Log out current cookies in the request
if (logger.messageEnabled()) {
    var cookies = requestData.getHeaders('Cookie');
    for (cookie in cookies) {
        logger.message('Cookie: ' + cookies[cookie]);
    }
}

if (username) {
    // Fetch user information via REST
    var response = httpClient.get("http://localhost:8080/openam/json/users/" + username, {
        cookies : [],
        headers : []
    });
    // Log out response from REST call
    logger.message("User REST Call. Status: " + response.getStatusCode() + ", Body: " + response.getEntity());
}

var now = new Date();
logger.message("Current time: " + now.getHours());
if (now.getHours() &lt; START_TIME || now.getHours() &gt; END_TIME) {
    logger.error("Login forbidden outside work hours!");
    authState = FAILED;
} else {
    logger.message("Authentication allowed!");
    authState = SUCCESS;
}