org.bimserver.database.actions.AddUserDatabaseAction Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of BimServer Show documentation
There is a newer version: 1.5.9
package org.bimserver.database.actions;

/******************************************************************************
 * Copyright (C) 2009-2016  BIMserver.org
 * 
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
 * published by the Free Software Foundation, either version 3 of the
 * License, or (at your option) any later version.
 * 
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 * 
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see {@literal}.
 *****************************************************************************/

import java.security.SecureRandom;
import java.util.Date;
import java.util.HashMap;
import java.util.Map;

import javax.mail.Message;
import javax.mail.internet.InternetAddress;

import org.bimserver.Authenticator;
import org.bimserver.BimServer;
import org.bimserver.BimserverDatabaseException;
import org.bimserver.database.BimserverLockConflictException;
import org.bimserver.database.DatabaseSession;
import org.bimserver.database.PostCommitAction;
import org.bimserver.mail.EmailMessage;
import org.bimserver.mail.MailSystem;
import org.bimserver.models.log.AccessMethod;
import org.bimserver.models.log.NewUserAdded;
import org.bimserver.models.store.ServerSettings;
import org.bimserver.models.store.User;
import org.bimserver.models.store.UserType;
import org.bimserver.notifications.NewUserNotification;
import org.bimserver.shared.exceptions.UserException;
import org.bimserver.templating.TemplateIdentifier;
import org.bimserver.utils.GeneratorUtils;
import org.bimserver.utils.Hashers;
import org.bimserver.webservices.authorization.Authorization;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

public class AddUserDatabaseAction extends BimDatabaseAction {
	private static final Logger LOGGER = LoggerFactory.getLogger(AddUserDatabaseAction.class);
	private final String name;
	private final UserType userType;
	private final String username;
	private final boolean selfRegistration;
	private final String password;
	private boolean createSystemUser = false;
	private final BimServer bimServer;
	private String resetUrl;
	private static final SecureRandom secureRandom = new SecureRandom();

	public AddUserDatabaseAction(BimServer bimServer, DatabaseSession databaseSession, AccessMethod accessMethod, String username, String name, UserType userType,
			Authorization authorization, boolean selfRegistration, String resetUrl) {
		super(databaseSession, accessMethod);
		this.bimServer = bimServer;
		this.name = name;
		this.username = username;
		this.userType = userType;
		this.selfRegistration = selfRegistration;
		this.resetUrl = resetUrl;
		this.password = null;
	}

	public AddUserDatabaseAction(BimServer bimServer, DatabaseSession databaseSession, AccessMethod accessMethod, String username, String password, String name, UserType userType,
			Authorization authorization, boolean selfRegistration, String resetUrl) {
		super(databaseSession, accessMethod);
		this.bimServer = bimServer;
		this.password = password;
		this.name = name;
		this.username = username;
		this.userType = userType;
		this.selfRegistration = selfRegistration;
		this.resetUrl = resetUrl;
	}

	public User execute() throws UserException, BimserverDatabaseException, BimserverLockConflictException {
		String trimmedUserName = username.trim().toLowerCase();
		String trimmedName = name.trim();
		if (userType == UserType.SYSTEM && !createSystemUser) {
			throw new UserException("Cannot create system users");
		}
		if (selfRegistration && userType == UserType.ADMIN) {
			throw new UserException("Cannot create admin user with self registration");
		}
		if (trimmedUserName.equals("")) {
			throw new UserException("Invalid username");
		}
		if (!MailSystem.isValidEmailAddress(trimmedUserName) && !(trimmedUserName.equals("test") || trimmedUserName.equals("system"))) {
			throw new UserException("Username must be a valid e-mail address");
		}
		if (trimmedName.equals("")) {
			throw new UserException("Invalid name");
		}
		if (getUserByUserName(trimmedUserName) != null) {
			throw new UserException("A user with the username " + trimmedUserName + " already exists");
		}
		User actingUser = null;
//		if (bimServer.getServerSettingsCache() != null && !bimServer.getServerSettingsCache().getServerSettings().isAllowCreateValidatedUser()) {
//			if (authorization != null && !(authorization instanceof SystemAuthorization)) {
//				actingUser = getUserByUoid(authorization.getUoid());
//				if (actingUser == null || actingUser.getUserType() != UserType.SYSTEM) {
//					if (authorization.getUoid() != -1 && actingUser.getUserType() != UserType.ADMIN) {
//						throw new UserException("Only admin users can create other users");
//					}
//				}
//			}
//		}
		final User user = getDatabaseSession().create(User.class);
		if (password != null) {
			byte[] salt = new byte[32];
			secureRandom.nextBytes(salt);
			user.setPasswordHash(new Authenticator().createHash(password, salt));
			user.setPasswordSalt(salt);
		}
		user.setToken(GeneratorUtils.generateToken());
		user.setName(trimmedName);
		user.setUsername(trimmedUserName);
		user.setCreatedOn(new Date());
		user.setCreatedBy(actingUser);
		user.setUserType(userType);
		user.setLastSeen(null);
		final String token = GeneratorUtils.generateToken();
		user.setValidationToken(Hashers.getSha256Hash(token));
		user.setValidationTokenCreated(new Date());
		
		if (!createSystemUser) {
			final NewUserAdded newUserAdded = getDatabaseSession().create(NewUserAdded.class);
			newUserAdded.setUser(user);
			newUserAdded.setExecutor(actingUser);
			newUserAdded.setDate(new Date());
			newUserAdded.setAccessMethod(getAccessMethod());
			getDatabaseSession().store(newUserAdded);
			getDatabaseSession().addPostCommitAction(new PostCommitAction() {
				@Override
				public void execute() throws UserException {
					bimServer.getNotificationsManager().notify(new NewUserNotification(bimServer, user.getOid()));
				}
			});
			bimServer.updateUserSettings(getDatabaseSession(), user);
		}
		
		getDatabaseSession().store(user);
		
		if (bimServer != null && bimServer.getServerSettingsCache() != null) { // this is only null on server/database initialization
			final ServerSettings serverSettings = bimServer.getServerSettingsCache().getServerSettings();
			if (serverSettings.isSendConfirmationEmailAfterRegistration()) {
				getDatabaseSession().addPostCommitAction(new PostCommitAction() {
					@Override
					public void execute() throws UserException {
						String body = null;
						try {
							if (MailSystem.isValidEmailAddress(user.getUsername())) {
								EmailMessage message = bimServer.getMailSystem().createMessage();
								
								String emailSenderAddress = serverSettings.getEmailSenderAddress();
								InternetAddress addressFrom = new InternetAddress(emailSenderAddress);
								message.setFrom(addressFrom);
								
								InternetAddress[] addressTo = new InternetAddress[1];
								addressTo[0] = new InternetAddress(user.getUsername());
								message.setRecipients(Message.RecipientType.TO, addressTo);
								
								Map context = new HashMap();
								context.put("name", user.getName());
								context.put("username", user.getUsername());
								context.put("siteaddress", serverSettings.getSiteAddress());
								context.put("validationlink", resetUrl + "&username=" + user.getUsername() + "&uoid=" + user.getOid() + "&validationtoken=" + token + "&address=" + bimServer.getServerSettingsCache().getServerSettings().getSiteAddress());
								String subject = null;
								if (selfRegistration) {
									body = bimServer.getTemplateEngine().process(context, TemplateIdentifier.SELF_REGISTRATION_EMAIL_BODY);
									subject = bimServer.getTemplateEngine().process(context, TemplateIdentifier.SELF_REGISTRATION_EMAIL_SUBJECT);
								} else {
									body = bimServer.getTemplateEngine().process(context, TemplateIdentifier.ADMIN_REGISTRATION_EMAIL_BODY);
									subject = bimServer.getTemplateEngine().process(context, TemplateIdentifier.ADMIN_REGISTRATION_EMAIL_SUBJECT);
								}
								message.setContent(body, "text/html");
								message.setSubject(subject.trim());
								
								LOGGER.info("Sending registration e-mail to " + user.getUsername());
								
								message.send();
							}
						} catch (Exception e) {
							LOGGER.error(body);
							LOGGER.error("", e);
						}
					}
				});
			}
		}
		return user;
	}

	public void setCreateSystemUser() {
		createSystemUser = true;
	}
}