]> WPIA git - gigi.git/blob - src/club/wpia/gigi/pages/account/ChangeForm.java
add: password reset after certificate login
[gigi.git] / src / club / wpia / gigi / pages / account / ChangeForm.java
1 package club.wpia.gigi.pages.account;
2
3 import java.io.PrintWriter;
4 import java.util.Map;
5
6 import javax.servlet.http.HttpServletRequest;
7
8 import club.wpia.gigi.GigiApiException;
9 import club.wpia.gigi.dbObjects.User;
10 import club.wpia.gigi.localisation.Language;
11 import club.wpia.gigi.output.template.Form;
12 import club.wpia.gigi.output.template.Template;
13 import club.wpia.gigi.output.template.TranslateCommand;
14 import club.wpia.gigi.pages.LoginPage;
15 import club.wpia.gigi.util.AuthorizationContext;
16
17 public class ChangeForm extends Form {
18
19     private User target;
20
21     private AuthorizationContext c;
22
23     public ChangeForm(HttpServletRequest hsr, User target) {
24         super(hsr);
25         this.target = target;
26         c = LoginPage.getAuthorizationContext(hsr);
27     }
28
29     private static final Template t = new Template(ChangePasswordPage.class.getResource("ChangePasswordForm.templ"));
30
31     @Override
32     public void outputContent(PrintWriter out, Language l, Map<String, Object> vars) {
33         if ( !c.isStronglyAuthenticated()) {
34             vars.put("currentLoginMethod", "pw");
35         }
36         t.output(out, l, vars);
37     }
38
39     @Override
40     public SubmissionResult submit(HttpServletRequest req) throws GigiApiException {
41         String oldpassword = req.getParameter("oldpassword");
42         String p1 = req.getParameter("pword1");
43         String p2 = req.getParameter("pword2");
44         GigiApiException error = new GigiApiException();
45         if ((oldpassword == null && !c.isStronglyAuthenticated()) || p1 == null || p2 == null) {
46             throw new GigiApiException("All fields are required.");
47         }
48         if ( !p1.equals(p2)) {
49             throw new GigiApiException("New passwords do not match.");
50         }
51         try {
52             if (c.isStronglyAuthenticated()) {
53                 target.setPassword(p1);
54             } else {
55                 target.changePassword(oldpassword, p1);
56             }
57             target.writeUserLog(target, "User triggered password reset");
58         } catch (GigiApiException e) {
59             error.mergeInto(e);
60         }
61         if ( !error.isEmpty()) {
62             throw error;
63         }
64         return new SuccessMessageResult(new TranslateCommand("Password changed."));
65     }
66
67 }