import org.cacert.gigi.GigiApiException;
import org.cacert.gigi.database.GigiPreparedStatement;
import org.cacert.gigi.database.GigiResultSet;
+import org.cacert.gigi.dbObjects.Assurance.AssuranceType;
+import org.cacert.gigi.dbObjects.CATS.CATSType;
import org.cacert.gigi.localisation.Language;
import org.cacert.gigi.output.DateSelector;
+import org.cacert.gigi.pages.PasswordResetPage;
import org.cacert.gigi.util.CalendarUtil;
import org.cacert.gigi.util.DayDate;
import org.cacert.gigi.util.Notary;
import org.cacert.gigi.util.PasswordHash;
import org.cacert.gigi.util.PasswordStrengthChecker;
+import org.cacert.gigi.util.TimeConditions;
/**
* Represents an acting, assurable, user. Synchronizing on user means: no
*/
public class User extends CertificateOwner {
- private Name name = new Name(null, null, null, null);
-
private DayDate dob;
private String email;
private final Set<Group> groups = new HashSet<>();
+ public static final int MINIMUM_AGE = 16;
+
+ public static final int MAXIMUM_PLAUSIBLE_AGE = 120;
+
+ public static final int POJAM_AGE = 14;
+
+ public static final int ADULT_AGE = 18;
+
+ public static final boolean POJAM_ENABLED = false;
+
+ public static final int EXPERIENCE_POINTS = 4;
+
+ /**
+ * Time in months a verification is considered "recent".
+ */
+ public static final int VERIFICATION_MONTHS = TimeConditions.getInstance().getVerificationMonths();
+
+ private Name preferredName;
+
protected User(GigiResultSet rs) {
super(rs.getInt("id"));
updateName(rs);
}
private void updateName(GigiResultSet rs) {
- name = new Name(rs.getString("fname"), rs.getString("lname"), rs.getString("mname"), rs.getString("suffix"));
dob = new DayDate(rs.getDate("dob"));
email = rs.getString("email");
+ preferredName = Name.getById(rs.getInt("preferredName"));
String localeStr = rs.getString("language");
if (localeStr == null || localeStr.equals("")) {
}
}
- public User(String email, String password, Name name, DayDate dob, Locale locale) throws GigiApiException {
+ public User(String email, String password, DayDate dob, Locale locale, NamePart... preferred) throws GigiApiException {
this.email = email;
this.dob = dob;
- this.name = name;
this.locale = locale;
- try (GigiPreparedStatement query = new GigiPreparedStatement("INSERT INTO `users` SET `email`=?, `password`=?, " + "`fname`=?, `mname`=?, `lname`=?, " + "`suffix`=?, `dob`=?, `language`=?, id=?")) {
+ this.preferredName = new Name(this, preferred);
+ try (GigiPreparedStatement query = new GigiPreparedStatement("INSERT INTO `users` SET `email`=?, `password`=?, `dob`=?, `language`=?, id=?, `preferredName`=?")) {
query.setString(1, email);
query.setString(2, PasswordHash.hash(password));
- query.setString(3, name.getFname());
- query.setString(4, name.getMname());
- query.setString(5, name.getLname());
- query.setString(6, name.getSuffix());
- query.setDate(7, dob.toSQLDate());
- query.setString(8, locale.toString());
- query.setInt(9, getId());
+ query.setDate(3, dob.toSQLDate());
+ query.setString(4, locale.toString());
+ query.setInt(5, getId());
+ query.setInt(6, preferredName.getId());
query.execute();
}
new EmailAddress(this, email, locale);
}
- public Name getName() {
- return name;
+ public Name[] getNames() {
+ try (GigiPreparedStatement gps = new GigiPreparedStatement("SELECT `id` FROM `names` WHERE `uid`=? AND `deleted` IS NULL", true)) {
+ return fetchNamesToArray(gps);
+ }
+ }
+
+ public Name[] getNonDeprecatedNames() {
+ try (GigiPreparedStatement gps = new GigiPreparedStatement("SELECT `id` FROM `names` WHERE `uid`=? AND `deleted` IS NULL AND `deprecated` IS NULL", true)) {
+ return fetchNamesToArray(gps);
+ }
+ }
+
+ private Name[] fetchNamesToArray(GigiPreparedStatement gps) {
+ gps.setInt(1, getId());
+ GigiResultSet rs = gps.executeQuery();
+ rs.last();
+ Name[] dt = new Name[rs.getRow()];
+ rs.beforeFirst();
+ for (int i = 0; rs.next(); i++) {
+ dt[i] = Name.getById(rs.getInt(1));
+ }
+ return dt;
}
public DayDate getDoB() {
return dob;
}
- public void setDoB(DayDate dob) {
- this.dob = dob;
+ public void setDoB(DayDate dob) throws GigiApiException {
+ synchronized (Notary.class) {
+ if (getReceivedAssurances().length != 0) {
+ throw new GigiApiException("No change after assurance allowed.");
+ }
+
+ if ( !CalendarUtil.isOfAge(dob, User.MINIMUM_AGE)) {
+ throw new GigiApiException("Entered date of birth is below the restricted age requirements.");
+ }
+
+ if (CalendarUtil.isOfAge(dob, User.MAXIMUM_PLAUSIBLE_AGE)) {
+ throw new GigiApiException("Entered date of birth exceeds the maximum age set in our policies. Please check your DoB is correct and contact support if the issue persists.");
+ }
+ this.dob = dob;
+ rawUpdateUserData();
+ }
+
+ }
+
+ protected void setDoBAsSupport(DayDate dob) throws GigiApiException {
+ synchronized (Notary.class) {
+ this.dob = dob;
+ rawUpdateUserData();
+ }
+
}
public String getEmail() {
}
private void setPassword(String newPass) throws GigiApiException {
- PasswordStrengthChecker.assertStrongPassword(newPass, getName(), getEmail());
+ PasswordStrengthChecker.assertStrongPassword(newPass, getNames(), getEmail());
try (GigiPreparedStatement ps = new GigiPreparedStatement("UPDATE users SET `password`=? WHERE id=?")) {
ps.setString(1, PasswordHash.hash(newPass));
ps.setInt(2, getId());
}
}
- public void setName(Name name) {
- this.name = name;
- }
-
public boolean canAssure() {
- if ( !CalendarUtil.isOfAge(dob, 14)) { // PoJAM
- return false;
+ if (POJAM_ENABLED) {
+ if ( !CalendarUtil.isOfAge(dob, POJAM_AGE)) { // PoJAM
+ return false;
+ }
+ } else {
+ if ( !CalendarUtil.isOfAge(dob, ADULT_AGE)) {
+ return false;
+ }
}
if (getAssurancePoints() < 100) {
return false;
public boolean hasPassedCATS() {
try (GigiPreparedStatement query = new GigiPreparedStatement("SELECT 1 FROM `cats_passed` where `user_id`=? AND `variant_id`=?")) {
query.setInt(1, getId());
- query.setInt(2, CATS.ASSURER_CHALLANGE_ID);
+ query.setInt(2, CATSType.ASSURER_CHALLENGE.getId());
try (GigiResultSet rs = query.executeQuery()) {
if (rs.next()) {
return true;
}
public int getAssurancePoints() {
- try (GigiPreparedStatement query = new GigiPreparedStatement("SELECT sum(points) FROM `notary` where `to`=? AND `deleted` is NULL AND (`expire` IS NULL OR `expire` > CURRENT_TIMESTAMP)")) {
+ try (GigiPreparedStatement query = new GigiPreparedStatement("SELECT SUM(lastpoints) FROM ( SELECT DISTINCT ON (`from`) `from`, `points` as lastpoints FROM `notary` INNER JOIN `names` ON `names`.`id`=`to` WHERE `notary`.`deleted` is NULL AND (`expire` IS NULL OR `expire` > CURRENT_TIMESTAMP) AND `names`.`uid` = ? ORDER BY `from`, `when` DESC) as p")) {
query.setInt(1, getId());
GigiResultSet rs = query.executeQuery();
}
public int getExperiencePoints() {
- try (GigiPreparedStatement query = new GigiPreparedStatement("SELECT count(*) FROM `notary` where `from`=? AND `deleted` is NULL")) {
+ try (GigiPreparedStatement query = new GigiPreparedStatement("SELECT count(*) FROM ( SELECT `names`.`uid` FROM `notary` INNER JOIN `names` ON `names`.`id` = `to` WHERE `from`=? AND `notary`.`deleted` IS NULL AND `method` = ? ::`notaryType` GROUP BY `names`.`uid`) as p")) {
query.setInt(1, getId());
+ query.setString(2, AssuranceType.FACE_TO_FACE.getDescription());
GigiResultSet rs = query.executeQuery();
int points = 0;
if (rs.next()) {
- points = rs.getInt(1) * 2;
+ points = rs.getInt(1) * EXPERIENCE_POINTS;
}
return points;
*
* @return the maximal points @
*/
+ @SuppressWarnings("unused")
public int getMaxAssurePoints() {
- if ( !CalendarUtil.isOfAge(dob, 18)) {
+ if ( !CalendarUtil.isOfAge(dob, ADULT_AGE) && POJAM_ENABLED) {
return 10; // PoJAM
}
int exp = getExperiencePoints();
int points = 10;
- if (exp >= 10) {
+ if (exp >= 5 * EXPERIENCE_POINTS) {
points += 5;
}
- if (exp >= 20) {
+ if (exp >= 10 * EXPERIENCE_POINTS) {
points += 5;
}
- if (exp >= 30) {
+ if (exp >= 15 * EXPERIENCE_POINTS) {
points += 5;
}
- if (exp >= 40) {
+ if (exp >= 20 * EXPERIENCE_POINTS) {
points += 5;
}
- if (exp >= 50) {
+ if (exp >= 25 * EXPERIENCE_POINTS) {
points += 5;
}
}
public boolean isValidName(String name) {
- return getName().matches(name);
+ for (Name n : getNames()) {
+ if (n.matches(name) && n.getAssurancePoints() >= 50) {
+ return true;
+ }
+ }
+ return false;
}
public void updateDefaultEmail(EmailAddress newMail) throws GigiApiException {
public synchronized Assurance[] getReceivedAssurances() {
if (receivedAssurances == null) {
- try (GigiPreparedStatement query = new GigiPreparedStatement("SELECT * FROM `notary` WHERE `to`=? AND `deleted` IS NULL")) {
+ try (GigiPreparedStatement query = new GigiPreparedStatement("SELECT * FROM `notary` INNER JOIN `names` ON `names`.`id` = `notary`.`to` WHERE `names`.`uid`=? AND `notary`.`deleted` IS NULL ORDER BY `when` DESC")) {
query.setInt(1, getId());
GigiResultSet res = query.executeQuery();
public synchronized Assurance[] getMadeAssurances() {
if (madeAssurances == null) {
- try (GigiPreparedStatement query = new GigiPreparedStatement("SELECT * FROM notary WHERE `from`=? AND deleted is NULL")) {
+ try (GigiPreparedStatement query = new GigiPreparedStatement("SELECT * FROM notary WHERE `from`=? AND deleted is NULL ORDER BY `when` DESC")) {
query.setInt(1, getId());
try (GigiResultSet res = query.executeQuery()) {
receivedAssurances = null;
}
- public void updateUserData() throws GigiApiException {
- synchronized (Notary.class) {
- if (getReceivedAssurances().length != 0) {
- throw new GigiApiException("No change after assurance allowed.");
- }
- rawUpdateUserData();
- }
- }
-
- protected void rawUpdateUserData() {
- try (GigiPreparedStatement update = new GigiPreparedStatement("UPDATE users SET fname=?, lname=?, mname=?, suffix=?, dob=? WHERE id=?")) {
- update.setString(1, name.getFname());
- update.setString(2, name.getLname());
- update.setString(3, name.getMname());
- update.setString(4, name.getSuffix());
- update.setDate(5, getDoB().toSQLDate());
- update.setInt(6, getId());
+ private void rawUpdateUserData() {
+ try (GigiPreparedStatement update = new GigiPreparedStatement("UPDATE users SET dob=? WHERE id=?")) {
+ update.setDate(1, getDoB().toSQLDate());
+ update.setInt(2, getId());
update.executeUpdate();
}
}
}
- public boolean wantsDirectoryListing() {
- try (GigiPreparedStatement get = new GigiPreparedStatement("SELECT listme FROM users WHERE id=?")) {
- get.setInt(1, getId());
- GigiResultSet exec = get.executeQuery();
- return exec.next() && exec.getBoolean("listme");
- }
+ public synchronized Name getPreferredName() {
+ return preferredName;
}
- public String getContactInformation() {
- try (GigiPreparedStatement get = new GigiPreparedStatement("SELECT contactinfo FROM users WHERE id=?")) {
- get.setInt(1, getId());
-
- GigiResultSet exec = get.executeQuery();
- exec.next();
- return exec.getString("contactinfo");
+ public synchronized void setPreferredName(Name preferred) throws GigiApiException {
+ if (preferred.getOwner() != this) {
+ throw new GigiApiException("Cannot set a name as preferred one that does not belong to this account.");
}
- }
-
- public void setDirectoryListing(boolean on) {
- try (GigiPreparedStatement update = new GigiPreparedStatement("UPDATE users SET listme = ? WHERE id = ?")) {
- update.setBoolean(1, on);
- update.setInt(2, getId());
- update.executeUpdate();
+ this.preferredName = preferred;
+ try (GigiPreparedStatement ps = new GigiPreparedStatement("UPDATE `users` SET `preferredName`=? WHERE `id`=?")) {
+ ps.setInt(1, preferred.getId());
+ ps.setInt(2, getId());
+ ps.executeUpdate();
}
- }
- public void setContactInformation(String contactInfo) {
- try (GigiPreparedStatement update = new GigiPreparedStatement("UPDATE users SET contactinfo = ? WHERE id = ?")) {
- update.setString(1, contactInfo);
- update.setInt(2, getId());
- update.executeUpdate();
- }
}
public boolean isInGroup(Group g) {
}
public String[] getTrainings() {
- try (GigiPreparedStatement prep = new GigiPreparedStatement("SELECT `pass_date`, `type_text` FROM `cats_passed` LEFT JOIN `cats_type` ON `cats_type`.`id`=`cats_passed`.`variant_id` WHERE `user_id`=? ORDER BY `pass_date` ASC")) {
+ try (GigiPreparedStatement prep = new GigiPreparedStatement("SELECT `pass_date`, `type_text`, `language`, `version` FROM `cats_passed` LEFT JOIN `cats_type` ON `cats_type`.`id`=`cats_passed`.`variant_id` WHERE `user_id`=? ORDER BY `pass_date` ASC")) {
prep.setInt(1, getId());
GigiResultSet res = prep.executeQuery();
List<String> entries = new LinkedList<String>();
while (res.next()) {
-
- entries.add(DateSelector.getDateFormat().format(res.getTimestamp(1)) + " (" + res.getString(2) + ")");
+ StringBuilder training = new StringBuilder();
+ training.append(DateSelector.getDateFormat().format(res.getTimestamp(1)));
+ training.append(" (");
+ training.append(res.getString(2));
+ if (res.getString(3).length() > 0) {
+ training.append(" ");
+ training.append(res.getString(3));
+ }
+ if (res.getString(4).length() > 0) {
+ training.append(", ");
+ training.append(res.getString(4));
+ }
+ training.append(")");
+ entries.add(training.toString());
}
return entries.toArray(new String[0]);
}
public static User getResetWithToken(int id, String token) {
- try (GigiPreparedStatement ps = new GigiPreparedStatement("SELECT `memid` FROM `passwordResetTickets` WHERE `id`=? AND `token`=? AND `used` IS NULL")) {
+ try (GigiPreparedStatement ps = new GigiPreparedStatement("SELECT `memid` FROM `passwordResetTickets` WHERE `id`=? AND `token`=? AND `used` IS NULL AND `created` > CURRENT_TIMESTAMP - interval '1 hours' * ?")) {
ps.setInt(1, id);
ps.setString(2, token);
+ ps.setInt(3, PasswordResetPage.HOUR_MAX);
GigiResultSet res = ps.executeQuery();
if ( !res.next()) {
return null;
ps.setInt(2, getId());
GigiResultSet rs = ps.executeQuery();
if ( !rs.next()) {
- throw new GigiApiException("Token not found... very bad.");
+ throw new GigiApiException("Token could not be found, has already been used, or is expired.");
}
if (PasswordHash.verifyHash(private_token, rs.getString(1)) == null) {
throw new GigiApiException("Private token does not match.");
}
private Assurance assuranceByRes(GigiResultSet res) {
- return new Assurance(res.getInt("id"), User.getById(res.getInt("from")), User.getById(res.getInt("to")), res.getString("location"), res.getString("method"), res.getInt("points"), res.getString("date"));
+ return new Assurance(res.getInt("id"), User.getById(res.getInt("from")), Name.getById(res.getInt("to")), res.getString("location"), res.getString("method"), res.getInt("points"), res.getString("date"));
}
+
+ public boolean isInVerificationLimit() {
+ try (GigiPreparedStatement ps = new GigiPreparedStatement("SELECT 1 FROM `notary` INNER JOIN `names` ON `names`.`id`=`to` WHERE `names`.`uid` = ? AND `when` > (now() - (interval '1 month' * ?)) AND (`expire` IS NULL OR `expire` > now()) AND `notary`.`deleted` IS NULL;")) {
+ ps.setInt(1, getId());
+ ps.setInt(2, VERIFICATION_MONTHS);
+
+ GigiResultSet rs = ps.executeQuery();
+ return rs.next();
+ }
+ }
+
}
projects / gigi.git / blobdiff