auth/auth-gui/src/main/java/org/onap/aaf/auth/gui/pages/PassChangeAction.java

   1 /**
   2  * ============LICENSE_START====================================================
   3  * org.onap.aaf
   4  * ===========================================================================
   5  * Copyright (c) 2018 AT&T Intellectual Property. All rights reserved.
   6  * ===========================================================================
   7  * Licensed under the Apache License, Version 2.0 (the "License");
   8  * you may not use this file except in compliance with the License.
   9  * You may obtain a copy of the License at
  10  *
  11  *      http://www.apache.org/licenses/LICENSE-2.0
  12  *
  13  * Unless required by applicable law or agreed to in writing, software
  14  * distributed under the License is distributed on an "AS IS" BASIS,
  15  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  16  * See the License for the specific language governing permissions and
  17  * limitations under the License.
  18  * ============LICENSE_END====================================================
  19  *
  20  */
  21
  22 package org.onap.aaf.auth.gui.pages;
  23
  24 import java.io.IOException;
  25 import java.net.ConnectException;
  26 import java.text.ParseException;
  27 import java.util.GregorianCalendar;
  28
  29 import org.onap.aaf.auth.cmd.AAFcli;
  30 import org.onap.aaf.auth.cmd.user.Cred;
  31 import org.onap.aaf.auth.env.AuthzTrans;
  32 import org.onap.aaf.auth.gui.AAF_GUI;
  33 import org.onap.aaf.auth.gui.BreadCrumbs;
  34 import org.onap.aaf.auth.gui.NamedCode;
  35 import org.onap.aaf.auth.gui.Page;
  36 import org.onap.aaf.auth.org.Organization;
  37 import org.onap.aaf.auth.org.OrganizationException;
  38 import org.onap.aaf.auth.org.OrganizationFactory;
  39 import org.onap.aaf.cadi.CadiException;
  40 import org.onap.aaf.cadi.LocatorException;
  41 import org.onap.aaf.cadi.client.Future;
  42 import org.onap.aaf.cadi.client.Rcli;
  43 import org.onap.aaf.cadi.client.Retryable;
  44 import org.onap.aaf.misc.env.APIException;
  45 import org.onap.aaf.misc.env.Env;
  46 import org.onap.aaf.misc.env.Slot;
  47 import org.onap.aaf.misc.env.TimeTaken;
  48 import org.onap.aaf.misc.env.util.Chrono;
  49 import org.onap.aaf.misc.xgen.Cache;
  50 import org.onap.aaf.misc.xgen.DynamicCode;
  51 import org.onap.aaf.misc.xgen.html.HTMLGen;
  52
  53 import aaf.v2_0.CredRequest;
  54 import aaf.v2_0.Users;
  55
  56 public class PassChangeAction extends Page {
  57
  58         public PassChangeAction(final AAF_GUI gui, final Page ... breadcrumbs) throws APIException, IOException {
  59                 super(gui.env,PassChangeForm.NAME,PassChangeForm.HREF, PassChangeForm.fields,
  60                         new BreadCrumbs(breadcrumbs),
  61                         new NamedCode(true,"content") {
  62                                 final Slot sID = gui.env.slot(PassChangeForm.NAME+'.'+PassChangeForm.fields[0]);
  63                                 final Slot sCurrPass = gui.env.slot(PassChangeForm.NAME+'.'+PassChangeForm.fields[1]);
  64                                 final Slot sPassword = gui.env.slot(PassChangeForm.NAME+'.'+PassChangeForm.fields[2]);
  65                                 final Slot sPassword2 = gui.env.slot(PassChangeForm.NAME+'.'+PassChangeForm.fields[3]);
  66                                 final Slot startDate = gui.env.slot(PassChangeForm.NAME+'.'+PassChangeForm.fields[4]);
  67                                 final Slot sNS = gui.env.slot(PassChangeForm.NAME+'.'+PassChangeForm.fields[5]);
  68
  69                                 @Override
  70                                 public void code(final Cache<HTMLGen> cache, final HTMLGen hgen) throws APIException, IOException {
  71                                         cache.dynamic(hgen, new DynamicCode<HTMLGen,AAF_GUI, AuthzTrans>() {
  72                                                 @Override
  73                                                 public void code(final AAF_GUI gui, final AuthzTrans trans,final Cache<HTMLGen> cache, final HTMLGen hgen) throws APIException, IOException {
  74                                                         final String id = trans.get(sID,null);
  75                                                         final String currPass = trans.get(sCurrPass,null);
  76                                                         final String password = trans.get(sPassword,null);
  77                                                         final String password2 = trans.get(sPassword2,null);
  78                                                         final String ns = trans.get(sNS, null);
  79
  80                                                         // Run Validations
  81                                                         boolean fail = true;
  82
  83                                                         if (id==null || id.indexOf('@')<=0) {
  84                                                                 hgen.p("Data Entry Failure: Please enter a valid ID, including domain.");
  85                                                         } else if(password == null || password2 == null) {
  86                                                                 hgen.p("Data Entry Failure: Both Password Fields need entries.");
  87                                                         } else if(!password.equals(password2)) {
  88                                                                 hgen.p("Data Entry Failure: Passwords do not match.");
  89                                                         } else { // everything else is checked by Server
  90                                                                 final CredRequest cred = new CredRequest();
  91                                                                 cred.setId(id);
  92                                                                 cred.setPassword("".equals(currPass)?null:currPass);
  93                                                                 try {
  94                                                                         fail = gui.clientAsUser(trans.getUserPrincipal(), new Retryable<Boolean>() {
  95                                                                                 @Override
  96                                                                                 public Boolean code(Rcli<?> client)throws CadiException, ConnectException, APIException {
  97                                                                                         boolean fail = true;
  98                                                                                         boolean go = false;
  99                                                                                         try {
 100                                                                                                 Organization org = OrganizationFactory.obtain(trans.env(), id);
 101                                                                                                 if(org!=null) {
 102                                                                                                         go = PassChangeForm.skipCurrent(trans, org.getIdentity(trans, id));
 103                                                                                                 }
 104                                                                                         } catch(OrganizationException e) {
 105                                                                                                 trans.error().log(e);
 106                                                                                         }
 107
 108                                                                                         if(cred.getPassword()==null) {
 109                                                                                                 try {
 110                                                                                                         if(!go) {
 111                                                                                                                 go=gui.clientAsUser(trans.getUserPrincipal(), new Retryable<Boolean>() {
 112                                                                                                                         @Override
 113                                                                                                                         public Boolean code(Rcli<?> client)     throws CadiException, ConnectException, APIException {
 114                                                                                                                                 Future<Users> fc = client.read("/authn/creds/id/"+id,gui.getDF(Users.class));
 115                                                                                                                                 if(fc.get(AAFcli.timeout())) {
 116                                                                                                                                         GregorianCalendar now = new GregorianCalendar();
 117                                                                                                                                         for(aaf.v2_0.Users.User u : fc.value.getUser()) {
 118                                                                                                                                                 if(u.getType()<10 && u.getExpires().toGregorianCalendar().after(now)) {
 119                                                                                                                                                         return false; // an existing, non expired, password type exists
 120                                                                                                                                                 }
 121                                                                                                                                         }
 122                                                                                                                                         return true; // no existing, no expired password
 123                                                                                                                                 } else {
 124                                                                                                                                         if(fc.code()==404) { // not found...
 125                                                                                                                                                 return true;
 126                                                                                                                                         } else {
 127                                                                                                                                                 trans.error().log(gui.aafCon.readableErrMsg(fc));
 128                                                                                                                                         }
 129                                                                                                                                 }
 130                                                                                                                                 return false;
 131                                                                                                                         }
 132                                                                                                                 });
 133                                                                                                         }
 134                                                                                                         if(!go) {
 135                                                                                                                 hgen.p("Current Password required").br();
 136                                                                                                         }
 137                                                                                                 } catch (LocatorException e) {
 138                                                                                                         trans.error().log(e);
 139                                                                                                 }
 140
 141                                                                                         } else {
 142                                                                                                 TimeTaken tt = trans.start("Check Current Password",Env.REMOTE);
 143                                                                                                 try {
 144                                                                                                         // Note: Need "Post", because of hiding password in SSL Data
 145                                                                                                         Future<CredRequest> fcr = client.create("/authn/validate",gui.getDF(CredRequest.class),cred);
 146                                                                                                         fcr.get(5000);
 147                                                                                                         if(fcr.code() == 200) {
 148                                                                                                                 hgen.p("Current Password validated").br();
 149                                                                                                                 go = true;
 150                                                                                                         } else {
 151                                                                                                                 hgen.p(Cred.ATTEMPT_FAILED_SPECIFICS_WITHELD).br();
 152                                                                                                                 trans.info().log("Failed Validation",fcr.code(),fcr.body());
 153                                                                                                                 go = false;
 154                                                                                                         }
 155                                                                                                 } finally {
 156                                                                                                         tt.done();
 157                                                                                                 }
 158                                                                                         }
 159                                                                                         if(go) {
 160                                                                                                 TimeTaken tt = trans.start("AAF Change Password",Env.REMOTE);
 161                                                                                                 try {
 162                                                                                                         // Change over Cred to reset mode
 163                                                                                                         cred.setPassword(password);
 164                                                                                                         String start = trans.get(startDate, null);
 165                                                                                                         if(start!=null) {
 166                                                                                                                 try {
 167                                                                                                                         cred.setStart(Chrono.timeStamp(Chrono.dateOnlyFmt.parse(start)));
 168                                                                                                                 } catch (ParseException e) {
 169                                                                                                                         throw new CadiException(e);
 170                                                                                                                 }
 171                                                                                                         }
 172
 173                                                                                                         Future<CredRequest> fcr = gui.clientAsUser(trans.getUserPrincipal()).create("/authn/cred",gui.getDF(CredRequest.class),cred);
 174                                                                                                         if(fcr.get(AAFcli.timeout())) {
 175                                                                                                                 // Do Remote Call
 176                                                                                                                 hgen.p("New Password has been added.  The previous one is still valid until Expiration.");
 177                                                                                                                 fail = false;
 178                                                                                                         } else {
 179                                                                                                                 hgen.p(Cred.ATTEMPT_FAILED_SPECIFICS_WITHELD).br();
 180                                                                                                                 trans.info().log("Failed Validation",fcr.code(),fcr.body());
 181                                                                                                         }
 182                                                                                                 } finally {
 183                                                                                                         tt.done();
 184                                                                                                 }
 185                                                                                         }
 186                                                                                         return fail;
 187                                                                                 }
 188
 189                                                                         });
 190                                                         } catch (Exception e) {
 191                                                                 hgen.p("Unknown Error");
 192                                                                 e.printStackTrace();
 193                                                         }
 194
 195                                                 }
 196                                                 hgen.br();
 197                                                 if(fail) {
 198                                                         hgen.incr(HTMLGen.A,true,"class=greenbutton","href="+PassChangeForm.HREF+"?id="+id).text("Try again").end();
 199                                                 } else {
 200                                                         if(ns==null) {
 201                                                                 hgen.incr(HTMLGen.A,true,"class=greenbutton","href="+Home.HREF).text("Back").end();
 202                                                         } else {
 203                                                                 hgen.incr(HTMLGen.A,true,"class=greenbutton","href="+CredDetail.HREF+"?id="+id+"&ns="+ns).text("Back").end();
 204                                                         }
 205                                                 }
 206                                         }
 207                                 });
 208                         }
 209                 });
 210         }
 211 }