src/org/cacert/gigi/EmailAddress.java

   1 package org.cacert.gigi;
   2
   3 import java.io.IOException;
   4 import java.sql.PreparedStatement;
   5 import java.sql.ResultSet;
   6 import java.sql.SQLException;
   7
   8 import org.cacert.gigi.database.DatabaseConnection;
   9 import org.cacert.gigi.email.EmailProvider;
  10 import org.cacert.gigi.email.MailProbe;
  11 import org.cacert.gigi.localisation.Language;
  12 import org.cacert.gigi.util.RandomToken;
  13
  14 public class EmailAddress implements IdCachable {
  15
  16     private String address;
  17
  18     private int id;
  19
  20     private User owner;
  21
  22     private String hash = null;
  23
  24     private EmailAddress(int id) throws SQLException {
  25         PreparedStatement ps = DatabaseConnection.getInstance().prepare("SELECT memid, email, hash FROM `emails` WHERE id=? AND deleted=0");
  26         ps.setInt(1, id);
  27
  28         ResultSet rs = ps.executeQuery();
  29         if ( !rs.next()) {
  30             throw new IllegalArgumentException("Invalid email id " + id);
  31         }
  32         this.id = id;
  33         owner = User.getById(rs.getInt(1));
  34         address = rs.getString(2);
  35         hash = rs.getString(3);
  36         rs.close();
  37     }
  38
  39     public EmailAddress(String address, User owner) {
  40         if ( !EmailProvider.MAIL.matcher(address).matches()) {
  41             throw new IllegalArgumentException("Invalid email.");
  42         }
  43         this.address = address;
  44         this.owner = owner;
  45         this.hash = RandomToken.generateToken(16);
  46     }
  47
  48     public void insert(Language l) {
  49         if (id != 0) {
  50             throw new IllegalStateException("already inserted.");
  51         }
  52         try {
  53             PreparedStatement ps = DatabaseConnection.getInstance().prepare("INSERT INTO `emails` SET memid=?, hash=?, email=?");
  54             ps.setInt(1, owner.getId());
  55             ps.setString(2, hash);
  56             ps.setString(3, address);
  57             synchronized (EmailAddress.class) {
  58                 ps.execute();
  59                 id = DatabaseConnection.lastInsertId(ps);
  60                 myCache.put(this);
  61             }
  62             MailProbe.sendMailProbe(l, "email", id, hash, address);
  63         } catch (SQLException e) {
  64             e.printStackTrace();
  65         } catch (IOException e) {
  66             e.printStackTrace();
  67         }
  68     }
  69
  70     public int getId() {
  71         return id;
  72     }
  73
  74     public String getAddress() {
  75         return address;
  76     }
  77
  78     public synchronized void verify(String hash) throws GigiApiException {
  79         if (this.hash.equals(hash)) {
  80
  81             try {
  82                 PreparedStatement ps = DatabaseConnection.getInstance().prepare("UPDATE `emails` SET hash='' WHERE id=?");
  83                 ps.setInt(1, id);
  84                 ps.execute();
  85                 hash = "";
  86
  87                 // Verify user with that primary email
  88                 PreparedStatement ps2 = DatabaseConnection.getInstance().prepare("update `users` set `verified`='1' where `id`=? and `email`=? and `verified`='0'");
  89                 ps2.setInt(1, owner.getId());
  90                 ps2.setString(2, address);
  91                 ps2.execute();
  92                 this.hash = "";
  93             } catch (SQLException e) {
  94                 throw new GigiApiException(e);
  95             }
  96
  97         } else {
  98             throw new GigiApiException("Email verification hash is invalid.");
  99         }
 100     }
 101
 102     public boolean isVerified() {
 103         return hash.isEmpty();
 104     }
 105
 106     private static ObjectCache<EmailAddress> myCache = new ObjectCache<>();
 107
 108     public static EmailAddress getById(int id) throws IllegalArgumentException {
 109         EmailAddress em = myCache.get(id);
 110         if (em == null) {
 111             try {
 112                 synchronized (EmailAddress.class) {
 113                     myCache.put(em = new EmailAddress(id));
 114                 }
 115             } catch (SQLException e1) {
 116                 throw new IllegalArgumentException(e1);
 117             }
 118         }
 119         return em;
 120     }
 121 }