com.networknt.oauth.user.handler.Oauth2PasswordUserIdPostHandler Maven / Gradle / Ivy

Go to download
package com.networknt.oauth.user.handler;

import com.hazelcast.map.IMap;
import com.networknt.body.BodyHandler;
import com.networknt.handler.LightHttpHandler;
import com.networknt.oauth.cache.CacheStartupHookProvider;
import com.networknt.oauth.cache.model.User;
import com.networknt.status.Status;
import com.networknt.utility.HashUtil;
import io.undertow.server.HttpHandler;
import io.undertow.server.HttpServerExchange;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import java.util.Map;

public class Oauth2PasswordUserIdPostHandler extends UserAuditHandler implements LightHttpHandler {
    static final String INCORRECT_PASSWORD = "ERR12016";
    static final String PASSWORD_PASSWORDCONFIRM_NOT_MATCH = "ERR12012";
    static final String USER_NOT_FOUND = "ERR12013";

    static Logger logger = LoggerFactory.getLogger(Oauth2PasswordUserIdPostHandler.class);
    @SuppressWarnings("unchecked")
    @Override
    public void handleRequest(HttpServerExchange exchange) throws Exception {
        Map body = (Map)exchange.getAttachment(BodyHandler.REQUEST_BODY);
        String userId = exchange.getQueryParameters().get("userId").getFirst();
        char[] password = null;
        if(body.get("password") != null) {
            password = ((String)body.get("password")).toCharArray();
        }
        String newPassword = (String)body.get("newPassword");
        String newPasswordConfirm = (String)body.get("newPasswordConfirm");

        IMap users = CacheStartupHookProvider.hz.getMap("users");
        User user = users.get(userId);
        if(user == null) {
            setExchangeStatus(exchange, USER_NOT_FOUND, userId);
            processAudit(exchange);
        } else {
            if(!HashUtil.validatePassword(password, user.getPassword())) {
                setExchangeStatus(exchange, INCORRECT_PASSWORD);
                processAudit(exchange);
                return;
            }
            if(newPassword.equals(newPasswordConfirm)) {
                String hashedPass = HashUtil.generateStrongPasswordHash(newPassword);
                user.setPassword(hashedPass);
                users.set(userId, user);
            } else {
                setExchangeStatus(exchange, PASSWORD_PASSWORDCONFIRM_NOT_MATCH, newPassword, newPasswordConfirm);
            }
            processAudit(exchange);
        }
    }
}