/*
|
* Nutzerverwaltung - User and role management in your browser
|
* Copyright (C) 2011-2017 Ulrich Hilger, http://uhilger.de
|
*
|
* This program is free software: you can redistribute it and/or modify
|
* it under the terms of the GNU General Public License as published by
|
* the Free Software Foundation, either version 3 of the License, or
|
* (at your option) any later version.
|
*
|
* This program is distributed in the hope that it will be useful,
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
* GNU General Public License for more details.
|
*
|
* You should have received a copy of the GNU General Public License
|
* along with this program. If not, see http://www.gnu.org/licenses/
|
*/
|
|
|
package de.uhilger.um.api;
|
|
import de.uhilger.baselink.PersistenceManager;
|
import de.uhilger.baselink.Record;
|
import de.uhilger.um.Digester;
|
import static de.uhilger.um.api.UserMgr.MP_USER;
|
import static de.uhilger.um.api.UserMgr.P_DIGESTER;
|
import de.uhilger.um.daten.User;
|
import java.util.List;
|
import java.util.logging.Level;
|
import java.util.logging.Logger;
|
|
/**
|
* API-Methoden fuer die Aenderung der eigenen Nutzerdaten
|
*/
|
public class Profil extends Api {
|
private static final Logger logger = Logger.getLogger(Profil.class.getName());
|
|
public static final String SQL_GET_USER = "getUser";
|
|
public String setUserPw(String userId, String currentPw, String newPw) {
|
String result = "Kennwort nicht geändert";
|
try {
|
|
String digesterClassName = getServletContext().getInitParameter(P_DIGESTER);
|
Digester digester = (Digester) Class.forName(digesterClassName).newInstance();
|
/*
|
MD5 geht nicht mehr,
|
vgl. http://stackoverflow.com/questions/39967289/how-to-use-digest-authentication-in-tomcat-8-5
|
*/
|
String digestedCurrentPw = digester.digest(currentPw, Digester.SHA256, null);
|
PersistenceManager pm = getDb();
|
logger.fine(getSql(SQL_GET_USER));
|
List list = pm.select(getSql(SQL_GET_USER), getMapper(MP_USER), Record.WITHOUT_BLOBS, userId);
|
if(list != null && list.size() > 0) {
|
Object o = list.get(0);
|
if(o instanceof User) {
|
User u = (User) o;
|
if(u.getPw().equals(digestedCurrentPw)) {
|
String digestedNewPw = digester.digest(newPw, Digester.SHA256, null);
|
u.setPw(digestedNewPw);
|
pm.update(u, getMapper(MP_USER));
|
result = "Kennwort geaendert";
|
} else {
|
result = "Das Kennwort ist falsch";
|
}
|
}
|
} else {
|
result = "Benutzer " + userId + " nicht gefunden";
|
}
|
} catch (ClassNotFoundException|InstantiationException|IllegalAccessException ex) {
|
logger.log(Level.SEVERE, ex.getLocalizedMessage(), ex);
|
}
|
return result;
|
}
|
}
|
