controllerClasses.security.SiteuserControl.java Source code

Introduction

Here is the source code for controllerClasses.security.SiteuserControl.java

Source

/*
 * To change this license header, choose License Headers in Project Properties.
 * To change this template file, choose Tools | Templates
 * and open the template in the editor.
 */
package controllerClasses.security;

import entityModels.City;
import entityModels.Roles;
import entityModels.Siteuser;
import java.io.UnsupportedEncodingException;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.util.Random;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.annotation.Resource;
import javax.annotation.security.DeclareRoles;
import javax.annotation.security.RolesAllowed;
import javax.ejb.EJB;
import javax.faces.bean.ManagedBean;
import javax.faces.bean.ViewScoped;
import javax.faces.context.FacesContext;
import javax.mail.MessagingException;
import javax.naming.NamingException;
import javax.servlet.http.HttpServletRequest;
import org.apache.commons.lang.StringEscapeUtils;
import org.apache.commons.lang.StringUtils;
import org.apache.mina.proxy.utils.StringUtilities;
import org.primefaces.event.FlowEvent;
import persistClasses.CityFacade;
import persistClasses.RolesFacade;
import persistClasses.SiteuserFacade;

/**
 *
 * @author simond
 */
@ManagedBean
@ViewScoped
@DeclareRoles({ "admin" })
public class SiteuserControl {

    private Siteuser user = new Siteuser();
    private Roles roleObject = new Roles();
    private String role = "";
    private City city = new City();
    @Resource(name = "mail/AOSMail")
    private javax.mail.Session mailAOSMail;
    @EJB
    private SiteuserFacade suF;
    @EJB
    private RolesFacade rF;
    @EJB
    private CityFacade cF;
    private String[] userRoles = { "admin", "superuser" };
    private String text = "";

    public String getText() {
        return text;
    }

    public void setText(String text) {
        this.text = text;
    }

    public String getRole() {
        return role;
    }

    public void setRole(String role) {
        this.role = role;
    }

    public Roles getRoleObject() {
        return roleObject;
    }

    public void setRoleObject(Roles roleObject) {
        this.roleObject = roleObject;
    }

    public City getCity() {
        return city;
    }

    public void setCity(City city) {
        this.city = city;
    }

    public Siteuser getUser() {
        return user;
    }

    public void setUser(Siteuser user) {
        this.user = user;
    }

    public String[] getUserRoles() {
        return userRoles;
    }

    public void setUserRoles(String[] userRoles) {
        this.userRoles = userRoles;
    }

    @RolesAllowed("admin")
    public void saveSU() {
        try {
            char firstInitial = user.getFirstname().charAt(0);
            String shortened2 = user.getLastname().length() > 7 ? user.getLastname().substring(0, 7)
                    : user.getLastname();
            String userName = (firstInitial + shortened2);
            user.setUsername(userName.toLowerCase());
            user.setPostalcode(city.getPostalcode());
            cF.create(city);
            user.setPassword(passGenerator());
            user.setPassword(encryptPassword(user.getPassword()));
            suF.create(user);
            roleObject = new Roles(user.getUsername(), role);
            rF.create(roleObject);

        } catch (Exception e) {

        }
    }

    private String encryptPassword(String planepassword) {
        try {
            MessageDigest md = java.security.MessageDigest.getInstance("SHA-256");
            md.update(planepassword.getBytes("UTF-8"));
            byte[] passwordDigest = md.digest();
            String encodedPasswordHash = new sun.misc.BASE64Encoder().encode(passwordDigest);

            return encodedPasswordHash;

        } catch (NoSuchAlgorithmException | UnsupportedEncodingException ex) {

        }
        return "";
    }

    public String onFlowProcess(FlowEvent event) {

        return event.getNewStep();
    }

    private String passGenerator() {
        String dCase = "abcdefghijklmnopqrstuvwxyz";
        String uCase = "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
        String sChar = "!@#$%^&*";
        String intChar = "0123456789";
        Random r = new Random();
        String pass = "";
        while (pass.length() != 16) {
            int rPick = r.nextInt(4);
            if (rPick == 0) {
                int spot = r.nextInt(25);
                pass += dCase.charAt(spot);
            } else if (rPick == 1) {
                int spot = r.nextInt(25);
                pass += uCase.charAt(spot);
            } else if (rPick == 2) {
                int spot = r.nextInt(7);
                pass += sChar.charAt(spot);
            } else if (rPick == 3) {
                int spot = r.nextInt(9);
                pass += intChar.charAt(spot);
            }
        }
        return pass;
    }

    public void callEditor() {
        HttpServletRequest req = (HttpServletRequest) FacesContext.getCurrentInstance().getExternalContext()
                .getRequest();
        String url = req.getRequestURL().toString();
        url = url.substring(0, url.length() - req.getRequestURI().length()) + req.getContextPath() + "/index.xhtml";
        String password = passGenerator();
        Siteuser su = this.user;
        su.setPassword(encryptPassword(password));
        suF.edit(su);
        String line = url + " Password: " + password + " Username: " + su.getUsername() + "";
        setText(line);

    }

    public void sendInvite() {

        try {
            sendMail(user.getEmail(), "AOS user generation (Do not reply)", getText());
        } catch (NamingException | MessagingException ex) {
            Logger.getLogger(SiteuserControl.class.getName()).log(Level.SEVERE, null, ex);
        }
    }

    private void sendMail(String email, String subject, String body)
            throws NamingException, javax.mail.MessagingException {

        javax.mail.internet.MimeMessage message = new javax.mail.internet.MimeMessage(mailAOSMail);
        message.setSubject(subject);
        message.setRecipients(javax.mail.Message.RecipientType.TO,
                javax.mail.internet.InternetAddress.parse(email, false));
        message.setContent(body, "text/html");
        javax.mail.Transport.send(message);
    }
}