org.gluu.oxtrust.action.PasswordResetAction クラス

org.gluu.oxtrust.action.PasswordResetAction の継承関係図

org.gluu.oxtrust.action.PasswordResetAction 連携図

公開メンバ関数
String	start () throws ParseException
String	update () throws ParseException
String	updateImpl () throws ParseException
String	cancel ()
String	checkAnswer ()
boolean	isPasswordsEquals ()
PasswordResetRequest	getRequest ()
String	getGuid ()
void	setGuid (String guid)
String	getSecurityQuestion ()
void	setSecurityQuestion (String securityQuestion)
String	getSecurityAnswer ()
void	setSecurityAnswer (String securityAnswer)
String	getPassword ()
void	setPassword (String password)
String	getConfirm ()
void	setConfirm (String confirm)

限定公開メンバ関数
void	sendExpirationError ()

非公開変数類
Logger	log
PersistenceEntryManager	ldapEntryManager
FacesMessages	facesMessages
ConversationService	conversationService
RecaptchaService	recaptchaService
ApplianceService	applianceService
PersonService	personService
PasswordResetService	passwordResetService
Identity	identity
OxTrustAuditService	oxTrustAuditService
AppConfiguration	appConfiguration
PasswordResetRequest	request
String	guid
String	securityQuestion
String	securityAnswer
String	password
String	confirm

静的非公開変数類
static final long	serialVersionUID = 6457422770824016614L

詳解

User: Dejan Maric

関数詳解

cancel()

String org.gluu.oxtrust.action.PasswordResetAction.cancel ( )

inline

                               {
                return OxTrustConstants.RESULT_SUCCESS;
        }

checkAnswer()

String org.gluu.oxtrust.action.PasswordResetAction.checkAnswer ( )

inline

                                    {
                return OxTrustConstants.RESULT_SUCCESS;
        }

getConfirm()

String org.gluu.oxtrust.action.PasswordResetAction.getConfirm ( )

inline

                                   {
                return confirm;
        }

getGuid()

String org.gluu.oxtrust.action.PasswordResetAction.getGuid ( )

inline

                                {
                return guid;
        }

getPassword()

String org.gluu.oxtrust.action.PasswordResetAction.getPassword ( )

inline

                                    {
                return password;
        }

getRequest()

PasswordResetRequest org.gluu.oxtrust.action.PasswordResetAction.getRequest ( )

inline

                                                 {
                return request;
        }

getSecurityAnswer()

String org.gluu.oxtrust.action.PasswordResetAction.getSecurityAnswer ( )

inline

                                          {
                return securityAnswer;
        }

getSecurityQuestion()

String org.gluu.oxtrust.action.PasswordResetAction.getSecurityQuestion ( )

inline

                                            {
                return securityQuestion;
        }

isPasswordsEquals()

boolean org.gluu.oxtrust.action.PasswordResetAction.isPasswordsEquals ( )

inline

                                           {
                return password.equals(confirm);
        }

sendExpirationError()

void org.gluu.oxtrust.action.PasswordResetAction.sendExpirationError ( )

inlineprotected

                                             {
                facesMessages.add(FacesMessage.SEVERITY_ERROR, "The reset link is no longer valid.\n\n "
                                + "Re-enter your e-mail to generate a new link.");
                conversationService.endConversation();
        }

setConfirm()

void org.gluu.oxtrust.action.PasswordResetAction.setConfirm ( String  confirm )

inline

                                               {
                this.confirm = confirm;
        }

setGuid()

void org.gluu.oxtrust.action.PasswordResetAction.setGuid ( String  guid )

inline

                                         {
                this.guid = guid;
        }

setPassword()

void org.gluu.oxtrust.action.PasswordResetAction.setPassword ( String  password )

inline

                                                 {
                this.password = password;
        }

setSecurityAnswer()

void org.gluu.oxtrust.action.PasswordResetAction.setSecurityAnswer ( String  securityAnswer )

inline

                                                             {
                this.securityAnswer = securityAnswer;
        }

setSecurityQuestion()

void org.gluu.oxtrust.action.PasswordResetAction.setSecurityQuestion ( String  securityQuestion )

inline

                                                                 {
                this.securityQuestion = securityQuestion;
        }

start()

String org.gluu.oxtrust.action.PasswordResetAction.start ( ) throws ParseException

inline

                                                    {
                if (StringHelper.isEmpty(guid)) {
                        sendExpirationError();
                        return OxTrustConstants.RESULT_FAILURE;
                }

                // Load requested entry
                PasswordResetRequest passwordResetRequest;
                try {
                        passwordResetRequest = passwordResetService.findPasswordResetRequest(guid);
                } catch (EntryPersistenceException ex) {
                        log.error("Failed to find password reset request by '{}'", guid, ex);
                        sendExpirationError();
                        return OxTrustConstants.RESULT_FAILURE;
                }

                if (passwordResetRequest == null) {
                        sendExpirationError();
                        return OxTrustConstants.RESULT_FAILURE;
                }

                // Load latest entry by person inum
                PasswordResetRequest personPasswordResetRequest = passwordResetService
                                .findActualPasswordResetRequest(passwordResetRequest.getPersonInum());
                if (personPasswordResetRequest == null) {
                        sendExpirationError();
                        return OxTrustConstants.RESULT_FAILURE;
                }

                // Check if requested entry is actual one
                if (!StringHelper.equalsIgnoreCase(guid, personPasswordResetRequest.getOxGuid())) {
                        sendExpirationError();
                        return OxTrustConstants.RESULT_FAILURE;
                }

                this.request = personPasswordResetRequest;

                Calendar requestCalendarExpiry = new GregorianCalendar(TimeZone.getTimeZone("UTC"));
                Calendar currentCalendar = new GregorianCalendar(TimeZone.getTimeZone("UTC"));

                if (request != null) {
                        requestCalendarExpiry.setTime(request.getCreationDate());
                }
                currentCalendar.add(Calendar.SECOND, -appConfiguration.getPasswordResetRequestExpirationTime());
                GluuCustomPerson person = personService.getPersonByInum(request.getPersonInum());

                GluuCustomAttribute question = null;
                if (person != null) {
                        question = person.getGluuCustomAttribute("secretQuestion");
                }

                if ((request != null) && requestCalendarExpiry.after(currentCalendar)) {
                        if (question != null) {
                                securityQuestion = question.getValue();
                        }
                        return OxTrustConstants.RESULT_SUCCESS;
                } else {
                        facesMessages.add(FacesMessage.SEVERITY_ERROR,
                                        "Your link is not valid or your user is not allowed to perform a password reset. If you want to initiate a reset password procedure please fill this form.");
                        conversationService.endConversation();

                        return OxTrustConstants.RESULT_FAILURE;
                }
        }

update()

String org.gluu.oxtrust.action.PasswordResetAction.update ( ) throws ParseException

inline

                                                     {
                String outcome = updateImpl();

                if (OxTrustConstants.RESULT_SUCCESS.equals(outcome)) {
                        facesMessages.add(FacesMessage.SEVERITY_INFO, "Password reset successful.");
                        conversationService.endConversation();
                } else if (OxTrustConstants.RESULT_FAILURE.equals(outcome)) {
                        facesMessages.add(FacesMessage.SEVERITY_ERROR,
                                        "Your secret answer or Captcha code may have been wrong. Please try to correct it or contact your administrator to change your password.");
                        conversationService.endConversation();
                }

                return outcome;
        }

updateImpl()

String org.gluu.oxtrust.action.PasswordResetAction.updateImpl ( ) throws ParseException

inline

                                                         {
                boolean valid = true;
                if (recaptchaService.isEnabled()) {
                        valid = recaptchaService.verifyRecaptchaResponse();
                }

                if (valid) {
                        GluuAppliance appliance = applianceService.getAppliance();
                        this.request = ldapEntryManager.find(PasswordResetRequest.class,
                                        "oxGuid=" + this.guid + ", ou=resetPasswordRequests," + appliance.getDn());
                        Calendar requestCalendarExpiry = Calendar.getInstance();
                        Calendar currentCalendar = Calendar.getInstance();
                        if (request != null) {
                                requestCalendarExpiry.setTime((request.getCreationDate()));
                                requestCalendarExpiry.add(Calendar.HOUR, 2);
                        }
                        GluuCustomPerson person = personService.getPersonByInum(request.getPersonInum());
                        GluuCustomAttribute question = null;
                        GluuCustomAttribute answer = null;
                        if (person != null) {
                                question = person.getGluuCustomAttribute("secretQuestion");
                                answer = person.getGluuCustomAttribute("secretAnswer");
                        }
                        if (request != null
                                        && requestCalendarExpiry.after(currentCalendar) /* && question != null && answer != null */) {
                                PasswordResetRequest removeRequest = new PasswordResetRequest();
                                removeRequest.setBaseDn(request.getBaseDn());
                                ldapEntryManager.remove(removeRequest);
                                oxTrustAuditService.audit("PASSWORD RESET REQUEST" + removeRequest.getBaseDn() + " REMOVED",
                                                identity.getUser(),
                                                (HttpServletRequest) FacesContext.getCurrentInstance().getExternalContext().getRequest());
                                if (question != null && answer != null) {
                                        String correctAnswer = answer.getValue();
                                        Boolean securityQuestionAnswered = (securityAnswer != null) && securityAnswer.equals(correctAnswer);
                                        if (securityQuestionAnswered) {
                                                person.setUserPassword(password);
                                                personService.updatePerson(person);
                                                return OxTrustConstants.RESULT_SUCCESS;
                                        }
                                } else {
                                        person.setUserPassword(password);
                                        personService.updatePerson(person);
                                        return OxTrustConstants.RESULT_SUCCESS;
                                }
                        }
                }

                return OxTrustConstants.RESULT_FAILURE;
        }

メンバ詳解

appConfiguration

AppConfiguration org.gluu.oxtrust.action.PasswordResetAction.appConfiguration

private

applianceService

ApplianceService org.gluu.oxtrust.action.PasswordResetAction.applianceService

private

confirm

String org.gluu.oxtrust.action.PasswordResetAction.confirm

private

conversationService

ConversationService org.gluu.oxtrust.action.PasswordResetAction.conversationService

private

facesMessages

FacesMessages org.gluu.oxtrust.action.PasswordResetAction.facesMessages

private

guid

String org.gluu.oxtrust.action.PasswordResetAction.guid

private

identity

Identity org.gluu.oxtrust.action.PasswordResetAction.identity

private

ldapEntryManager

PersistenceEntryManager org.gluu.oxtrust.action.PasswordResetAction.ldapEntryManager

private

log

Logger org.gluu.oxtrust.action.PasswordResetAction.log

private

oxTrustAuditService

OxTrustAuditService org.gluu.oxtrust.action.PasswordResetAction.oxTrustAuditService

private

password

String org.gluu.oxtrust.action.PasswordResetAction.password

private

passwordResetService

PasswordResetService org.gluu.oxtrust.action.PasswordResetAction.passwordResetService

private

personService

PersonService org.gluu.oxtrust.action.PasswordResetAction.personService

private

recaptchaService

RecaptchaService org.gluu.oxtrust.action.PasswordResetAction.recaptchaService

private

request

PasswordResetRequest org.gluu.oxtrust.action.PasswordResetAction.request

private

securityAnswer

String org.gluu.oxtrust.action.PasswordResetAction.securityAnswer

private

securityQuestion

String org.gluu.oxtrust.action.PasswordResetAction.securityQuestion

private

serialVersionUID

final long org.gluu.oxtrust.action.PasswordResetAction.serialVersionUID = 6457422770824016614L

staticprivate

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/gluu/src/oxTrust/server/src/main/java/org/gluu/oxtrust/action/PasswordResetAction.java