package org.cacert.gigi.dbObjects;
+import java.io.IOException;
+import java.io.ObjectInputStream;
+import java.io.ObjectOutputStream;
import java.util.ArrayList;
import java.util.Collections;
import java.util.HashSet;
import org.cacert.gigi.database.GigiResultSet;
import org.cacert.gigi.dbObjects.Assurance.AssuranceType;
import org.cacert.gigi.dbObjects.CATS.CATSType;
+import org.cacert.gigi.dbObjects.Country.CountryCodeType;
import org.cacert.gigi.localisation.Language;
import org.cacert.gigi.output.DateSelector;
import org.cacert.gigi.pages.PasswordResetPage;
import org.cacert.gigi.util.Notary;
import org.cacert.gigi.util.PasswordHash;
import org.cacert.gigi.util.PasswordStrengthChecker;
+import org.cacert.gigi.util.TimeConditions;
/**
* Represents an acting, assurable, user. Synchronizing on user means: no
*/
public class User extends CertificateOwner {
+ private static final long serialVersionUID = -7915843843752264176L;
+
private DayDate dob;
private String email;
private Locale locale;
- private final Set<Group> groups = new HashSet<>();
+ private Set<Group> groups = new HashSet<>();
public static final int MINIMUM_AGE = 16;
+ public static final int MAXIMUM_PLAUSIBLE_AGE = 120;
+
public static final int POJAM_AGE = 14;
public static final int ADULT_AGE = 18;
public static final boolean POJAM_ENABLED = false;
- public static final int EXPERIENCE_POINTS = 2;
+ public static final int EXPERIENCE_POINTS = 4;
/**
* Time in months a verification is considered "recent".
*/
- public static final int VERIFICATION_MONTHS = 39;
+ public static final int VERIFICATION_MONTHS = TimeConditions.getInstance().getVerificationMonths();
private Name preferredName;
- protected User(GigiResultSet rs) {
+ private Country residenceCountry;
+
+ protected User(GigiResultSet rs) throws GigiApiException {
super(rs.getInt("id"));
- updateName(rs);
- }
- private void updateName(GigiResultSet rs) {
dob = new DayDate(rs.getDate("dob"));
email = rs.getString("email");
preferredName = Name.getById(rs.getInt("preferredName"));
+ if (rs.getString("country") != null) {
+ residenceCountry = Country.getCountryByCode(rs.getString("Country"), Country.CountryCodeType.CODE_2_CHARS);
+ }
+
String localeStr = rs.getString("language");
if (localeStr == null || localeStr.equals("")) {
locale = Locale.getDefault();
locale = Language.getLocaleFromString(localeStr);
}
+ refreshGroups();
+ }
+
+ public synchronized void refreshGroups() {
+ HashSet<Group> hs = new HashSet<>();
try (GigiPreparedStatement psg = new GigiPreparedStatement("SELECT `permission` FROM `user_groups` WHERE `user`=? AND `deleted` is NULL")) {
- psg.setInt(1, rs.getInt("id"));
+ psg.setInt(1, getId());
try (GigiResultSet rs2 = psg.executeQuery()) {
while (rs2.next()) {
- groups.add(Group.getByString(rs2.getString(1)));
+ hs.add(Group.getByString(rs2.getString(1)));
}
}
}
+ groups = hs;
}
- public User(String email, String password, DayDate dob, Locale locale, NamePart... preferred) throws GigiApiException {
+ public User(String email, String password, DayDate dob, Locale locale, Country residenceCountry, NamePart... preferred) throws GigiApiException {
this.email = email;
this.dob = dob;
this.locale = locale;
this.preferredName = new Name(this, preferred);
- try (GigiPreparedStatement query = new GigiPreparedStatement("INSERT INTO `users` SET `email`=?, `password`=?, `dob`=?, `language`=?, id=?, `preferredName`=?")) {
+ try (GigiPreparedStatement query = new GigiPreparedStatement("INSERT INTO `users` SET `email`=?, `password`=?, `dob`=?, `language`=?, id=?, `preferredName`=?, `country` = ?")) {
query.setString(1, email);
query.setString(2, PasswordHash.hash(password));
query.setDate(3, dob.toSQLDate());
query.setString(4, locale.toString());
query.setInt(5, getId());
query.setInt(6, preferredName.getId());
+ query.setString(7, residenceCountry == null ? null : residenceCountry.getCode());
query.execute();
}
new EmailAddress(this, email, locale);
public Name[] getNames() {
try (GigiPreparedStatement gps = new GigiPreparedStatement("SELECT `id` FROM `names` WHERE `uid`=? AND `deleted` IS NULL", true)) {
+ gps.setInt(1, getId());
return fetchNamesToArray(gps);
}
}
public Name[] getNonDeprecatedNames() {
try (GigiPreparedStatement gps = new GigiPreparedStatement("SELECT `id` FROM `names` WHERE `uid`=? AND `deleted` IS NULL AND `deprecated` IS NULL", true)) {
+ gps.setInt(1, getId());
return fetchNamesToArray(gps);
}
}
private Name[] fetchNamesToArray(GigiPreparedStatement gps) {
- gps.setInt(1, getId());
GigiResultSet rs = gps.executeQuery();
rs.last();
Name[] dt = new Name[rs.getRow()];
public void setDoB(DayDate dob) throws GigiApiException {
synchronized (Notary.class) {
if (getReceivedAssurances().length != 0) {
- throw new GigiApiException("No change after assurance allowed.");
+ throw new GigiApiException("No change after verification allowed.");
+ }
+
+ if ( !CalendarUtil.isOfAge(dob, User.MINIMUM_AGE)) {
+ throw new GigiApiException("Entered date of birth is below the restricted age requirements.");
+ }
+
+ if (CalendarUtil.isOfAge(dob, User.MAXIMUM_PLAUSIBLE_AGE)) {
+ throw new GigiApiException("Entered date of birth exceeds the maximum age set in our policies. Please check your DoB is correct and contact support if the issue persists.");
}
this.dob = dob;
rawUpdateUserData();
}
public int getAssurancePoints() {
- try (GigiPreparedStatement query = new GigiPreparedStatement("SELECT SUM(lastpoints) FROM ( SELECT DISTINCT ON (`from`) `from`, `points` as lastpoints FROM `notary` INNER JOIN `names` ON `names`.`id`=`to` WHERE `notary`.`deleted` is NULL AND (`expire` IS NULL OR `expire` > CURRENT_TIMESTAMP) AND `names`.`uid` = ? ORDER BY `from`, `when` DESC) as p")) {
+ try (GigiPreparedStatement query = new GigiPreparedStatement("SELECT SUM(lastpoints) FROM ( SELECT DISTINCT ON (`from`, `method`) `from`, `points` as lastpoints FROM `notary` INNER JOIN `names` ON `names`.`id`=`to` WHERE `notary`.`deleted` is NULL AND (`expire` IS NULL OR `expire` > CURRENT_TIMESTAMP) AND `names`.`uid` = ? ORDER BY `from`, `method`, `when` DESC) as p")) {
query.setInt(1, getId());
GigiResultSet rs = query.executeQuery();
public int getExperiencePoints() {
try (GigiPreparedStatement query = new GigiPreparedStatement("SELECT count(*) FROM ( SELECT `names`.`uid` FROM `notary` INNER JOIN `names` ON `names`.`id` = `to` WHERE `from`=? AND `notary`.`deleted` IS NULL AND `method` = ? ::`notaryType` GROUP BY `names`.`uid`) as p")) {
query.setInt(1, getId());
- query.setString(2, AssuranceType.FACE_TO_FACE.getDescription());
+ query.setEnum(2, AssuranceType.FACE_TO_FACE);
GigiResultSet rs = query.executeQuery();
int points = 0;
*
* @return the maximal points @
*/
+ @SuppressWarnings("unused")
public int getMaxAssurePoints() {
if ( !CalendarUtil.isOfAge(dob, ADULT_AGE) && POJAM_ENABLED) {
return 10; // PoJAM
public synchronized Assurance[] getReceivedAssurances() {
if (receivedAssurances == null) {
- try (GigiPreparedStatement query = new GigiPreparedStatement("SELECT * FROM `notary` INNER JOIN `names` ON `names`.`id` = `notary`.`to` WHERE `names`.`uid`=? AND `notary`.`deleted` IS NULL")) {
+ try (GigiPreparedStatement query = new GigiPreparedStatement("SELECT * FROM `notary` INNER JOIN `names` ON `names`.`id` = `notary`.`to` WHERE `names`.`uid`=? AND `notary`.`deleted` IS NULL ORDER BY `when` DESC")) {
query.setInt(1, getId());
GigiResultSet res = query.executeQuery();
public synchronized Assurance[] getMadeAssurances() {
if (madeAssurances == null) {
- try (GigiPreparedStatement query = new GigiPreparedStatement("SELECT * FROM notary WHERE `from`=? AND deleted is NULL")) {
+ try (GigiPreparedStatement query = new GigiPreparedStatement("SELECT * FROM notary WHERE `from`=? AND deleted is NULL ORDER BY `when` DESC")) {
query.setInt(1, getId());
try (GigiResultSet res = query.executeQuery()) {
}
- public Name getPreferredName() {
+ public synchronized Name getPreferredName() {
return preferredName;
}
return Collections.unmodifiableSet(groups);
}
- public void grantGroup(User granter, Group toGrant) {
+ public void grantGroup(User granter, Group toGrant) throws GigiApiException {
+ if (toGrant.isManagedBySupport() && !granter.isInGroup(Group.SUPPORTER)) {
+ throw new GigiApiException("Group may only be managed by supporter");
+ }
+ if (toGrant.isManagedBySupport() && granter == this) {
+ throw new GigiApiException("Group may only be managed by supporter that is not oneself");
+ }
groups.add(toGrant);
try (GigiPreparedStatement ps = new GigiPreparedStatement("INSERT INTO `user_groups` SET `user`=?, `permission`=?::`userGroup`, `grantedby`=?")) {
ps.setInt(1, getId());
- ps.setString(2, toGrant.getDatabaseName());
+ ps.setEnum(2, toGrant);
ps.setInt(3, granter.getId());
ps.execute();
}
}
- public void revokeGroup(User revoker, Group toRevoke) {
+ public void revokeGroup(User revoker, Group toRevoke) throws GigiApiException {
+ if (toRevoke.isManagedBySupport() && !revoker.isInGroup(Group.SUPPORTER)) {
+ throw new GigiApiException("Group may only be managed by supporter");
+ }
groups.remove(toRevoke);
try (GigiPreparedStatement ps = new GigiPreparedStatement("UPDATE `user_groups` SET `deleted`=CURRENT_TIMESTAMP, `revokedby`=? WHERE `deleted` IS NULL AND `permission`=?::`userGroup` AND `user`=?")) {
ps.setInt(1, revoker.getId());
- ps.setString(2, toRevoke.getDatabaseName());
+ ps.setEnum(2, toRevoke);
ps.setInt(3, getId());
ps.execute();
}
}
private Assurance assuranceByRes(GigiResultSet res) {
- return new Assurance(res.getInt("id"), User.getById(res.getInt("from")), Name.getById(res.getInt("to")), res.getString("location"), res.getString("method"), res.getInt("points"), res.getString("date"));
+ try {
+ return new Assurance(res.getInt("id"), User.getById(res.getInt("from")), Name.getById(res.getInt("to")), res.getString("location"), res.getString("method"), res.getInt("points"), res.getString("date"), res.getString("country") == null ? null : Country.getCountryByCode(res.getString("country"), CountryCodeType.CODE_2_CHARS));
+ } catch (GigiApiException e) {
+ throw new Error(e);
+ }
}
public boolean isInVerificationLimit() {
}
}
+ private void writeObject(ObjectOutputStream oos) throws IOException {}
+
+ private void readObject(ObjectInputStream ois) throws IOException, ClassNotFoundException {}
+
+ public Country getResidenceCountry() {
+ return residenceCountry;
+ }
+
+ public void setResidenceCountry(Country residenceCountry) {
+ this.residenceCountry = residenceCountry;
+ rawUpdateCountryData();
+ }
+
+ private void rawUpdateCountryData() {
+ try (GigiPreparedStatement update = new GigiPreparedStatement("UPDATE users SET country=? WHERE id=?")) {
+ update.setString(1, residenceCountry == null ? null : residenceCountry.getCode());
+ update.setInt(2, getId());
+ update.executeUpdate();
+ }
+ }
}