|
1
31 package org.blojsom.plugin.admin;
32
33 import org.apache.commons.logging.Log;
34 import org.apache.commons.logging.LogFactory;
35 import org.apache.commons.mail.Email;
36 import org.apache.commons.mail.EmailException;
37 import org.apache.commons.mail.HtmlEmail;
38 import org.blojsom.blog.Blog;
39 import org.blojsom.blog.Entry;
40 import org.blojsom.blog.User;
41 import org.blojsom.fetcher.Fetcher;
42 import org.blojsom.fetcher.FetcherException;
43 import org.blojsom.plugin.PluginException;
44 import org.blojsom.plugin.email.EmailConstants;
45 import org.blojsom.util.BlojsomConstants;
46 import org.blojsom.util.BlojsomUtils;
47
48 import javax.mail.Session  ;
49 import javax.naming.Context ;
50 import javax.naming.InitialContext ;
51 import javax.naming.NamingException ;
52 import javax.servlet.http.HttpServletRequest ;
53 import javax.servlet.http.HttpServletResponse ;
54 import java.util.Date ;
55 import java.util.Map ;
56 import java.util.Random ;
57
58
65 public class ForgottenPasswordPlugin extends BaseAdminPlugin {
66
67 private Log _logger = LogFactory.getLog(ForgottenPasswordPlugin.class);
68
69 private static final String FAILED_PASSWORD_CHANGE_KEY = "failed.password.change.text";
71 private static final String CONSTRUCTED_PASSWORD_EMAIL_KEY = "constructed.password.email.text";
72 private static final String USERNAME_BLANK_KEY = "username.blank.text";
73
74 private static final String FORGOTTEN_USERNAME_PARAM = "forgotten-username";
75 private static final String FORGOTTEN_PASSWORD_PAGE = "forgotten-password";
76
77 private Fetcher _fetcher;
78 private String _mailServer;
79 private String _mailServerUsername;
80 private String _mailServerPassword;
81 private Session _session;
82
83
86 public ForgottenPasswordPlugin() {
87 }
88
89
94 public void setFetcher(Fetcher fetcher) {
95 _fetcher = fetcher;
96 }
97
98
104 public void init() throws PluginException {
105 super.init();
106
107 _mailServer = _servletConfig.getInitParameter(EmailConstants.SMTPSERVER_IP);
108
109 if (_mailServer != null) {
110 if (_mailServer.startsWith("java:comp/env")) {
111 try {
112 Context context = new InitialContext ();
113 _session = (Session ) context.lookup(_mailServer);
114 } catch (NamingException e) {
115 if (_logger.isErrorEnabled()) {
116 _logger.error(e);
117 }
118
119 throw new PluginException(e);
120 }
121 } else {
122 _mailServerUsername = _servletConfig.getInitParameter(EmailConstants.SMTPSERVER_USERNAME_IP);
123 _mailServerPassword = _servletConfig.getInitParameter(EmailConstants.SMTPSERVER_PASSWORD_IP);
124 }
125 } else {
126 if (_logger.isErrorEnabled()) {
127 _logger.error("Missing SMTP servername servlet initialization parameter: " + EmailConstants.SMTPSERVER_IP);
128 }
129 }
130 }
131
132
140 protected void setupEmail(Blog blog, User user, Email email) throws EmailException {
141 email.setCharset(BlojsomConstants.UTF8);
142
143 if (_session != null) {
145 email.setMailSession(_session);
146 } else {
147 if (!BlojsomUtils.checkNullOrBlank(_mailServerUsername) && !BlojsomUtils.checkNullOrBlank(_mailServerPassword)) {
149 email.setHostName(_mailServer);
150 email.setAuthentication(_mailServerUsername, _mailServerPassword);
151 } else {
152 email.setHostName(_mailServer);
153 }
154 }
155
156 email.setFrom(blog.getBlogOwnerEmail(), "Blojsom Forgotten Password");
157
158 String authorizedUserEmail = user.getUserEmail();
159 if (BlojsomUtils.checkNullOrBlank(authorizedUserEmail)) {
160 authorizedUserEmail = blog.getBlogOwnerEmail();
161 }
162
163 String authorizedUser = user.getUserName();
164 if (BlojsomUtils.checkNullOrBlank(authorizedUser)) {
165 authorizedUser = user.getUserLogin();
166 }
167
168 email.addTo(authorizedUserEmail, authorizedUser);
169 email.setSentDate(new Date ());
170 }
171
172
184 public Entry[] process(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse, Blog blog, Map context, Entry[] entries) throws PluginException {
185 String username = BlojsomUtils.getRequestValue(FORGOTTEN_USERNAME_PARAM, httpServletRequest);
186 String action = BlojsomUtils.getRequestValue(ACTION_PARAM, httpServletRequest);
187
188 if (!BlojsomUtils.checkNullOrBlank(username)) {
189 User user;
190
191 try {
192 user = _fetcher.loadUser(blog, username);
193
194 HtmlEmail email = new HtmlEmail();
195 setupEmail(blog, user, email);
196
197 if (blog.getUseEncryptedPasswords().booleanValue()) {
198 Random random = new Random (new Date ().getTime() + System.currentTimeMillis());
200 int password = random.nextInt(Integer.MAX_VALUE);
201 String updatedPassword = Integer.toString(password);
202
203 user.setUserPassword(updatedPassword);
204 _fetcher.saveUser(blog, user);
205 }
206
207 String emailText = "Here's your password: " + user.getUserPassword();
208 email.setHtmlMsg(emailText);
209 email.setTextMsg(emailText);
210
211 String to = user.getUserName();
212 if (BlojsomUtils.checkNullOrBlank(to)) {
213 to = user.getUserLogin();
214 }
215
216 email.setSubject("Forgotten password e-mail for " + to);
217
218 if (_logger.isDebugEnabled()) {
219 _logger.debug("Constructed forgotten password e-mail message for username: " + username);
220 }
221
222 email.send();
223
224 addOperationResultMessage(context, formatAdminResource(CONSTRUCTED_PASSWORD_EMAIL_KEY, CONSTRUCTED_PASSWORD_EMAIL_KEY, blog.getBlogAdministrationLocale(), new Object [] {to}));
225 httpServletRequest.setAttribute(BlojsomConstants.PAGE_PARAM, ADMIN_LOGIN_PAGE);
226 } catch (FetcherException e) {
227 if (_logger.isErrorEnabled()) {
228 _logger.error(e);
229 }
230
231 addOperationResultMessage(context, formatAdminResource(FAILED_PASSWORD_CHANGE_KEY, FAILED_PASSWORD_CHANGE_KEY, blog.getBlogAdministrationLocale(), new Object [] {username}));
232 httpServletRequest.setAttribute(BlojsomConstants.PAGE_PARAM, ADMIN_LOGIN_PAGE);
233
234 return entries;
235 } catch (EmailException e) {
236 if (_logger.isErrorEnabled()) {
237 _logger.error(e);
238 }
239
240 addOperationResultMessage(context, formatAdminResource(FAILED_PASSWORD_CHANGE_KEY, FAILED_PASSWORD_CHANGE_KEY, blog.getBlogAdministrationLocale(), new Object [] {username}));
241 httpServletRequest.setAttribute(BlojsomConstants.PAGE_PARAM, ADMIN_LOGIN_PAGE);
242
243 return entries;
244 }
245 } else {
246 if (BlojsomUtils.checkNullOrBlank(action)) {
247 addOperationResultMessage(context, getAdminResource(USERNAME_BLANK_KEY, USERNAME_BLANK_KEY, blog.getBlogAdministrationLocale()));
248 }
249
250 httpServletRequest.setAttribute(BlojsomConstants.PAGE_PARAM, FORGOTTEN_PASSWORD_PAGE);
251 }
252
253 return entries;
254 }
255
256
262 public void cleanup() throws PluginException {
263 }
264
265
271 public void destroy() throws PluginException {
272 }
273 } |
Popular Tags |
Java API By Example, From Geeks To Geeks.