72 satır
2.3 KiB
C++
72 satır
2.3 KiB
C++
|
#include "handlerusersettings.h"
|
||
|
|
#include "../authenticator.h"
|
||
|
|
#include "../random.h"
|
||
|
|
|
||
|
|
Response HandlerUserSettings::handleRequest(const Request &r)
|
||
|
|
{
|
||
|
|
if(r.getRequestMethod() == "POST")
|
||
|
|
{
|
||
|
|
if(r.post("do") == "submit")
|
||
|
|
{
|
||
|
|
std::string oldpassword = r.post("oldpassword");
|
||
|
|
std::string newpassword = r.post("newpassword");
|
||
|
|
std::string newpasswordconfirm = r.post("newpasswordconfirm");
|
||
|
|
|
||
|
|
if(newpassword != newpasswordconfirm)
|
||
|
|
{
|
||
|
|
//TODO: is not nice, users has to hit the back button...
|
||
|
|
return this->errorResponse("Passwords don't match", "The entered new passwords don't match");
|
||
|
|
}
|
||
|
|
auto userDao = this->database->createUserDao();
|
||
|
|
Authenticator authenticator(*userDao);
|
||
|
|
|
||
|
|
std::variant<User, AuthenticationError> authresult = authenticator.authenticate(this->userSession->user.login, oldpassword);
|
||
|
|
if(std::holds_alternative<AuthenticationError>(authresult))
|
||
|
|
{
|
||
|
|
return this->errorResponse("Invalid current password", "The old password you entered is invalid");
|
||
|
|
}
|
||
|
|
Random r;
|
||
|
|
std::vector<char> salt = r.getRandom(23);
|
||
|
|
User user = std::get<User>(authresult);
|
||
|
|
user.salt = salt;
|
||
|
|
user.password = authenticator.hash(newpassword, user.salt);
|
||
|
|
if(user.password.empty())
|
||
|
|
{
|
||
|
|
Logger::error() << "Authenticator pbkdf5 returned emptys hash";
|
||
|
|
return this->errorResponse("Error", "An error occured while trying to store new password");
|
||
|
|
}
|
||
|
|
try
|
||
|
|
{
|
||
|
|
userDao->save(user);
|
||
|
|
}
|
||
|
|
catch(const DatabaseException &e)
|
||
|
|
{
|
||
|
|
Logger::debug() << "Error saving user: " << e.what();
|
||
|
|
return errorResponse("Error", "A database error occured while trying to save user with new settings");
|
||
|
|
}
|
||
|
|
|
||
|
|
return Response::redirectTemporarily(this->urlProvider->userSettings());
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
TemplatePage &userSettingsPage = this->templ->getPage("usersettings");
|
||
|
|
setGeneralVars(userSettingsPage);
|
||
|
|
userSettingsPage.setVar("usersettingsurl", urlProvider->userSettings());
|
||
|
|
userSettingsPage.setVar("title", createPageTitle("User settings - " + this->userSession->user.login));
|
||
|
|
Response result;
|
||
|
|
result.setStatus(200);
|
||
|
|
result.setBody(userSettingsPage.render());
|
||
|
|
|
||
|
|
return result;
|
||
|
|
}
|
||
|
|
|
||
|
|
bool HandlerUserSettings::canAccess(const Permissions &perms)
|
||
|
|
{
|
||
|
|
return this->userSession->loggedIn;
|
||
|
|
}
|
||
|
|
|
||
|
|
std::string HandlerUserSettings::accessErrorMessage()
|
||
|
|
{
|
||
|
|
return "Only logged-in users can change their settings";
|
||
|
|
}
|