oobbit.orm.Users.java Source code

Introduction

Here is the source code for oobbit.orm.Users.java

Source

/*
 * Aineopintojen harjoitusty: Tietokantasovellus
 * Helsingin yliopisto Tietojenksittelytieteen laitos
 * Ooppa 2015 - GNU General Public License, version 3.
 */
package oobbit.orm;

import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.sql.Statement;
import java.util.ArrayList;
import javax.annotation.Resource;
import oobbit.database.DatabaseSettings;
import oobbit.entities.User;
import oobbit.orm.exceptions.FailedLoginException;
import oobbit.orm.exceptions.NotLoggedInException;
import oobbit.orm.exceptions.NothingWasFoundException;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.stereotype.Component;

/**
 *
 * @author Ooppa
 */
@Component
public class Users extends BasicORM {

    @Resource(name = "DatabaseSettings")
    private DatabaseSettings settings;

    public User getCurrentUser() throws SQLException, NothingWasFoundException, NotLoggedInException {
        Authentication auth = SecurityContextHolder.getContext().getAuthentication();

        if (auth.getPrincipal().equals("anonymousUser")) {
            throw new NotLoggedInException("You are not logged in.");
        }

        return this.get((String) auth.getPrincipal());
    }

    public ArrayList<String> getCurrentUserRoles() {
        Authentication auth = SecurityContextHolder.getContext().getAuthentication();
        ArrayList<String> asStrings = new ArrayList<>();

        for (GrantedAuthority authority : auth.getAuthorities()) {
            asStrings.add(authority.getAuthority());
        }

        return asStrings;
    }

    public User attemptLogin(String email, String password) throws SQLException, FailedLoginException {
        PreparedStatement statement = getConnection()
                .prepareStatement("SELECT * FROM `users` WHERE `email` = ? AND `password` = ?;");
        statement.setString(1, email);
        statement.setString(2, hash(password));

        ResultSet query = statement.executeQuery();

        if (query.next()) {
            User user = new User();
            user.parse(query);
            return user;
        }

        throw new FailedLoginException();
    }

    public User get(String username) throws SQLException, NothingWasFoundException {
        PreparedStatement statement = getConnection().prepareStatement(
                "SELECT user_id, username, email, access_level, create_time FROM oobbit.users WHERE username = ?;");
        statement.setString(1, username);

        ResultSet query = statement.executeQuery();

        if (query.next()) {
            User user = new User();
            user.parse(query);
            return user;
        }

        throw new NothingWasFoundException("No user found with that username: " + username);
    }

    public User get(int id) throws SQLException, NothingWasFoundException {
        PreparedStatement statement = getConnection().prepareStatement(
                "SELECT user_id, username, email, access_level, create_time FROM oobbit.users WHERE user_id = ?;");
        statement.setInt(1, id);

        ResultSet query = statement.executeQuery();

        if (query.next()) {
            User user = new User();
            user.parse(query);
            return user;
        }

        throw new NothingWasFoundException("No user found with that id.");
    }

    /**
     * Creates a user and returns its id.
     *
     * @param username Username for the user
     * @param email    Email for the user
     * @param password Hashed password
     *
     * @return ID of the registered user
     *
     * @throws SQLException
     */
    public int registerNewUser(String username, String email, String password) throws SQLException {
        PreparedStatement statement = getConnection().prepareStatement(
                "INSERT INTO `oobbit`.`users` (`user_id`, `username`, `email`, `password`, `access_level`, `create_time`) VALUES (NULL, ?, ?, ?, '1', CURRENT_TIMESTAMP);",
                Statement.RETURN_GENERATED_KEYS);
        statement.setString(1, username);
        statement.setString(2, email);
        statement.setString(3, hash(password));

        statement.executeUpdate();
        ResultSet rs = statement.getGeneratedKeys();
        if (rs.next()) {
            return rs.getInt(1);
        }

        throw new SQLException("Could not add user!");
    }

    private String hash(String password) {
        // Apply your hashing here, you should never store plaintext passwords in your database.
        return password;
    }

}