X-Git-Url: https://code.wpia.club/?p=gigi.git;a=blobdiff_plain;f=src%2Forg%2Fcacert%2Fgigi%2Futil%2FNotary.java;h=2f3a3aec56764dc520898aeea1b292ba91cf3b95;hp=89fb5bc0837e90f4274272bfb621371f033461c9;hb=d1080ab12183cad2bab5d1f94bafe67960fbf4c8;hpb=943d8e7ed0ea5a9d56e7e694a3cbd849c52bad16 diff --git a/src/org/cacert/gigi/util/Notary.java b/src/org/cacert/gigi/util/Notary.java index 89fb5bc0..2f3a3aec 100644 --- a/src/org/cacert/gigi/util/Notary.java +++ b/src/org/cacert/gigi/util/Notary.java @@ -1,82 +1,192 @@ package org.cacert.gigi.util; -import java.sql.PreparedStatement; -import java.sql.ResultSet; -import java.sql.SQLException; +import java.text.ParseException; +import java.util.Calendar; +import java.util.Date; +import java.util.GregorianCalendar; -import org.cacert.gigi.User; -import org.cacert.gigi.database.DatabaseConnection; +import org.cacert.gigi.GigiApiException; +import org.cacert.gigi.database.GigiPreparedStatement; +import org.cacert.gigi.database.GigiResultSet; +import org.cacert.gigi.dbObjects.Assurance.AssuranceType; +import org.cacert.gigi.dbObjects.Group; +import org.cacert.gigi.dbObjects.Name; +import org.cacert.gigi.dbObjects.User; +import org.cacert.gigi.output.DateSelector; public class Notary { - public static void writeUserAgreement(int memid, String document, String method, String comment, boolean active, int secmemid) throws SQLException { - PreparedStatement q = DatabaseConnection.getInstance().prepare("insert into `user_agreements` set `memid`=?, `secmemid`=?," + " `document`=?,`date`=NOW(), `active`=?,`method`=?,`comment`=?"); - q.setInt(1, memid); - q.setInt(2, secmemid); - q.setString(3, document); - q.setInt(4, active ? 1 : 0); - q.setString(5, method); - q.setString(6, comment); - q.execute(); + public static void writeUserAgreement(User member, String document, String method, String comment, boolean active, int secmemid) { + try (GigiPreparedStatement q = new GigiPreparedStatement("INSERT INTO `user_agreements` SET `memid`=?, `secmemid`=?," + " `document`=?,`date`=NOW(), `active`=?,`method`=?,`comment`=?")) { + q.setInt(1, member.getId()); + q.setInt(2, secmemid); + q.setString(3, document); + q.setBoolean(4, active); + q.setString(5, method); + q.setString(6, comment); + q.execute(); + } } - public static AssuranceResult checkAssuranceIsPossible(User assurer, User target) { + public static void checkAssuranceIsPossible(User assurer, User target) throws GigiApiException { if (assurer.getId() == target.getId()) { - return AssuranceResult.CANNOT_ASSURE_SELF; + throw new GigiApiException("You cannot assure yourself."); } - try { - PreparedStatement ps = DatabaseConnection.getInstance().prepare("SELECT 1 FROM `notary` where `to`=? and `from`=? AND `deleted`=0"); + try (GigiPreparedStatement ps = new GigiPreparedStatement("SELECT 1 FROM `notary` where `to`=? and `from`=? AND `deleted` IS NULL")) { ps.setInt(1, target.getId()); ps.setInt(2, assurer.getId()); - ResultSet rs = ps.executeQuery(); + GigiResultSet rs = ps.executeQuery(); if (rs.next()) { rs.close(); - return AssuranceResult.ALREADY_ASSUREED; + throw new GigiApiException("You have already assured this member."); } - rs.close(); - if ( !assurer.canAssure()) { - return AssuranceResult.CANNOT_ASSURE; - } - } catch (SQLException e) { - e.printStackTrace(); } - return AssuranceResult.ASSURANCE_SUCCEDED; + if ( !assurer.canAssure()) { + throw new GigiApiException("You are not an assurer."); + } } - public enum AssuranceResult { - CANNOT_ASSURE("You cannot assure."), ALREADY_ASSUREED("You already assured this person."), CANNOT_ASSURE_SELF("Cannot assure myself."), ASSURANCE_SUCCEDED(""), ASSUREE_CHANGED("Person details changed. Please start over again."), POINTS_OUT_OF_RANGE("Points out of range."); + public static final Group ASSURER_BLOCKED = Group.getByString("blockedassurer"); - private final String message; + public static final Group ASSUREE_BLOCKED = Group.getByString("blockedassuree"); - private AssuranceResult(String message) { - this.message = message; + /** + * This method assures another user. + * + * @see User#canAssure() (for assurer) + * @see #checkAssuranceIsPossible(User, User) (for assurer or assuree) + * @param assurer + * the person that wants to assure + * @param assuree + * the person that should be assured + * @param assureeName + * the Name that was personally verified + * @param dob + * the Date of birth that the assurer verified + * @param awarded + * the points that should be awarded in total + * @param location + * the location where the assurance took place + * @param date + * the date when the assurance took place + * @throws GigiApiException + * if the assurance fails (for various reasons) + */ + public synchronized static void assure(User assurer, User assuree, Name assureeName, Date dob, int awarded, String location, String date, AssuranceType type) throws GigiApiException { + may(assurer, assuree, AssuranceType.FACE_TO_FACE); + GigiApiException gae = new GigiApiException(); + if ( !gae.isEmpty()) { + throw gae; + } + if (date == null || date.equals("")) { + gae.mergeInto(new GigiApiException("You must enter the date when you met the assuree.")); + } else { + try { + Date d = DateSelector.getDateFormat().parse(date); + Calendar gc = GregorianCalendar.getInstance(); + gc.setTimeInMillis(System.currentTimeMillis()); + gc.add(Calendar.HOUR_OF_DAY, 12); + if (d.getTime() > gc.getTimeInMillis()) { + gae.mergeInto(new GigiApiException("You must not enter a date in the future.")); + } + } catch (ParseException e) { + gae.mergeInto(new GigiApiException("You must enter the date in this format: YYYY-MM-DD.")); + } + } + // check location, min 3 characters + if (location == null || location.equals("")) { + gae.mergeInto(new GigiApiException("You failed to enter a location of your meeting.")); + } else if (location.length() <= 2) { + gae.mergeInto(new GigiApiException("You must enter a location with at least 3 characters eg town and country.")); } - public String getMessage() { - return message; + try { + checkAssuranceIsPossible(assurer, assuree); + } catch (GigiApiException e) { + gae.mergeInto(e); + } + + if ( !assuree.getName().equals(assureeName) || !assuree.getDoB().equals(dob)) { + gae.mergeInto(new GigiApiException("The person you are assuring changed his personal details.")); + } + if (awarded < 0) { + gae.mergeInto(new GigiApiException("The points you are trying to award are out of range.")); + } else { + if (type == AssuranceType.NUCLEUS) { + if (awarded > 50) { + gae.mergeInto(new GigiApiException("The points you are trying to award are out of range.")); + } + } else { + if (awarded > assurer.getMaxAssurePoints()) { + gae.mergeInto(new GigiApiException("The points you are trying to award are out of range.")); + } + } + } + + if ( !gae.isEmpty()) { + throw gae; + } + + if (type == AssuranceType.FACE_TO_FACE) { + assureF2F(assurer, assuree, awarded, location, date); + } else if (type == AssuranceType.TTP_ASSISTED) { + assureTTP(assurer, assuree, awarded, location, date); + } else { + throw new GigiApiException("Unknown Assurance type: " + type); + } + assurer.invalidateMadeAssurances(); + assuree.invalidateReceivedAssurances(); + } + + private static void assureF2F(User assurer, User assuree, int awarded, String location, String date) throws GigiApiException { + may(assurer, assuree, AssuranceType.FACE_TO_FACE); + try (GigiPreparedStatement ps = new GigiPreparedStatement("INSERT INTO `notary` SET `from`=?, `to`=?, `points`=?, `location`=?, `date`=?")) { + ps.setInt(1, assurer.getId()); + ps.setInt(2, assuree.getId()); + ps.setInt(3, awarded); + ps.setString(4, location); + ps.setString(5, date); + ps.execute(); } } - public synchronized static AssuranceResult assure(User assurer, User target, int awarded, String location, String date) throws SQLException { - AssuranceResult can = checkAssuranceIsPossible(assurer, target); - if (can != AssuranceResult.ASSURANCE_SUCCEDED) { - return can; + private static void assureTTP(User assurer, User assuree, int awarded, String location, String date) throws GigiApiException { + may(assurer, assuree, AssuranceType.TTP_ASSISTED); + try (GigiPreparedStatement ps = new GigiPreparedStatement("INSERT INTO `notary` SET `from`=?, `to`=?, `points`=?, `location`=?, `date`=?, `method`='TTP-Assisted'")) { + ps.setInt(1, assurer.getId()); + ps.setInt(2, assuree.getId()); + ps.setInt(3, awarded); + ps.setString(4, location); + ps.setString(5, date); + ps.execute(); + assuree.revokeGroup(assurer, Group.TTP_APPLICANT); } - User u = new User(target.getId()); - if ( !u.equals(target)) { - return AssuranceResult.ASSUREE_CHANGED; + } + + public static void may(User assurer, User assuree, AssuranceType t) throws GigiApiException { + if (assuree.isInGroup(ASSUREE_BLOCKED)) { + throw new GigiApiException("The assuree is blocked."); } - if (awarded > assurer.getMaxAssurePoints() || awarded < 0) { - return AssuranceResult.POINTS_OUT_OF_RANGE; + if (assurer.isInGroup(ASSURER_BLOCKED)) { + throw new GigiApiException("The assurer is blocked."); } - PreparedStatement ps = DatabaseConnection.getInstance().prepare("INSERT INTO `notary` SET `from`=?, `to`=?, `points`=?, `location`=?, `date`=?"); - ps.setInt(1, assurer.getId()); - ps.setInt(2, target.getId()); - ps.setInt(3, awarded); - ps.setString(4, location); - ps.setString(5, date); - ps.execute(); - return AssuranceResult.ASSURANCE_SUCCEDED; + if (t == AssuranceType.NUCLEUS) { + if ( !assurer.isInGroup(Group.NUCLEUS_ASSURER)) { + throw new GigiApiException("Assurer needs to be Nucleus Assurer."); + } + return; + } else if (t == AssuranceType.TTP_ASSISTED) { + if ( !assurer.isInGroup(Group.TTP_ASSURER)) { + throw new GigiApiException("Assurer needs to be TTP Assurer."); + } + if ( !assuree.isInGroup(Group.TTP_APPLICANT)) { + throw new GigiApiException("Assuree needs to be TTP Applicant."); + } + return; + } else if (t == AssuranceType.FACE_TO_FACE) { + return; + } + throw new GigiApiException("Assurance type not possible."); } }