Split rest authentication into two. For web apps integration url is /c/restful/

wise-webapp/src/main/java/com/wisemapping/webmvc/UsersController.java

@@ -0,0 +1,153 @@
+/*
+*    Copyright [2012] [wisemapping]
+*
+*   Licensed under WiseMapping Public License, Version 1.0 (the "License").
+*   It is basically the Apache License, Version 2.0 (the "License") plus the
+*   "powered by wisemapping" text requirement on every single page;
+*   you may not use this file except in compliance with the License.
+*   You may obtain a copy of the license at
+*
+*       http://www.wisemapping.org/license
+*
+*   Unless required by applicable law or agreed to in writing, software
+*   distributed under the License is distributed on an "AS IS" BASIS,
+*   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+*   See the License for the specific language governing permissions and
+*   limitations under the License.
+*/
+
+package com.wisemapping.webmvc;
+
+
+import com.wisemapping.validator.Messages;
+import com.wisemapping.exceptions.WiseMappingException;
+import com.wisemapping.model.User;
+import com.wisemapping.security.Utils;
+import com.wisemapping.service.InvalidUserEmailException;
+import com.wisemapping.service.UserService;
+import com.wisemapping.validator.UserValidator;
+import com.wisemapping.view.UserBean;
+import net.tanesha.recaptcha.ReCaptcha;
+import net.tanesha.recaptcha.ReCaptchaResponse;
+import org.jetbrains.annotations.NotNull;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Qualifier;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.validation.BindingResult;
+import org.springframework.web.bind.annotation.ModelAttribute;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestMethod;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.servlet.ModelAndView;
+
+import javax.servlet.http.HttpServletRequest;
+import java.util.Properties;
+
+@Controller
+public class UsersController {
+
+    @Qualifier("userService")
+    @Autowired
+    private UserService userService;
+
+    @Autowired
+    private ReCaptcha captchaService;
+
+    @Value("${google.recaptcha.enabled}")
+    private boolean captchaEnabled;
+
+
+    @RequestMapping(value = "user/resetPassword", method = RequestMethod.GET)
+    public ModelAndView showResetPasswordPage() {
+        return new ModelAndView("forgotPassword");
+    }
+
+    @RequestMapping(value = "user/resetPassword", method = RequestMethod.POST)
+    public ModelAndView resetPassword(@RequestParam(required = true) String email) {
+
+        ModelAndView result;
+        try {
+            userService.resetPassword(email);
+            result = new ModelAndView("forgotPasswordSuccess");
+
+        } catch (InvalidUserEmailException e) {
+            result = new ModelAndView("forgotPasswordError");
+
+        }
+        return result;
+    }
+
+    @RequestMapping(value = "user/registration", method = RequestMethod.GET)
+    public ModelAndView showRegistrationPage(@NotNull HttpServletRequest request) {
+        if (captchaEnabled) {
+            // If captcha is enabled, generate it ...
+            final Properties prop = new Properties();
+            prop.put("theme", "white");
+
+            final String captchaHtml = captchaService.createRecaptchaHtml(null, prop);
+            request.setAttribute("captchaHtml", captchaHtml);
+            request.setAttribute("captchaEnabled", true);
+        }
+        return new ModelAndView("userRegistration", "user", new UserBean());
+    }
+
+    @RequestMapping(value = "user/registration", method = RequestMethod.POST)
+    public ModelAndView registerUser(@ModelAttribute("user") UserBean userBean, @NotNull HttpServletRequest request, @NotNull BindingResult bindingResult) throws WiseMappingException {
+        ModelAndView result;
+        validateRegistrationForm(userBean, request, bindingResult);
+        if (bindingResult.hasErrors()) {
+            result = this.showRegistrationPage(request);
+            result.addObject("user", userBean);
+        } else {
+            final User user = new User();
+
+            // trim() the email email in order to remove spaces ...
+            user.setEmail(userBean.getEmail().trim());
+            user.setFirstname(userBean.getFirstname());
+            user.setLastname(userBean.getLastname());
+            user.setPassword(userBean.getPassword());
+
+            boolean confirmRegistrationByEmail = false;
+            userService.createUser(user, confirmRegistrationByEmail);
+
+            // Forward to the success view ...
+            result = new ModelAndView("userRegistrationSuccess");
+            result.addObject("confirmByEmail", confirmRegistrationByEmail);
+        }
+        return result;
+    }
+
+    @RequestMapping(value = "account/settings", method = RequestMethod.GET)
+    public String showUserSettingsPage(@NotNull Model model) {
+        model.addAttribute("user", Utils.getUser());
+        return "accountSettings";
+    }
+
+    private BindingResult validateRegistrationForm(@NotNull UserBean userBean, @NotNull HttpServletRequest request, @NotNull BindingResult bindingResult) {
+        final UserValidator userValidator = new UserValidator();
+        userValidator.setUserService(userService);
+        userValidator.setCaptchaService(captchaService);
+        userValidator.validate(userBean, bindingResult);
+
+        // If captcha is enabled, generate it ...
+        if (captchaEnabled) {
+            final String challenge = request.getParameter("recaptcha_challenge_field");
+            final String uresponse = request.getParameter("recaptcha_response_field");
+
+            if (challenge != null && uresponse != null) {
+                final String remoteAddr = request.getRemoteAddr();
+                final ReCaptchaResponse reCaptchaResponse = captchaService.checkAnswer(remoteAddr, challenge, uresponse);
+
+                if (!reCaptchaResponse.isValid()) {
+                    bindingResult.rejectValue("captcha", Messages.CAPTCHA_ERROR);
+                }
+
+            } else {
+                bindingResult.rejectValue("captcha", Messages.CAPTCHA_LOADING_ERROR);
+            }
+        }
+        return bindingResult;
+    }
+}