private String getAuthorizeUrl() { StringBuilder url = new StringBuilder(); url.append(this.service_.getAuthorizationEndpoint()); boolean hasQuery = url.toString().indexOf('?') != -1; url.append(hasQuery ? '&' : '?') .append("client_id=") .append(Utils.urlEncode(this.service_.getClientId())) .append("&redirect_uri=") .append(Utils.urlEncode(this.service_.getGenerateRedirectEndpoint())) .append("&scope=") .append(Utils.urlEncode(this.scope_)) .append("&response_type=code") .append("&state=") .append(Utils.urlEncode(this.oAuthState_)); return url.toString(); }
private boolean searchGeoDesc(LazyValidatorForm frm, String geoFlag) { boolean isValid = false; frm.set(GEO_DESC, ""); try { String geoSerial = ((String) frm.get(GEO_SERIAL)); if (!Utils.isEmpty(geoSerial)) { geoSerial = geoSerial.trim(); if (Utils.isValidNotZeroNumber(geoSerial, 6)) { String geoDesc = Geo.getGeoDesc(Integer.parseInt(geoSerial), geoFlag); if (!Utils.isEmpty(geoDesc)) { frm.set(GEO_DESC, geoDesc); isValid = true; } } } } catch (Exception ex) { } return isValid; }
void requestToken(String authorizationCode) { try { String url = this.service_.getTokenEndpoint(); StringBuilder ss = new StringBuilder(); ss.append("grant_type=authorization_code") .append("&client_id=") .append(Utils.urlEncode(this.service_.getClientId())) .append("&client_secret=") .append(Utils.urlEncode(this.service_.getClientSecret())) .append("&redirect_uri=") .append(Utils.urlEncode(this.service_.getGenerateRedirectEndpoint())) .append("&code=") .append(authorizationCode); HttpClient client = new HttpClient(this); client.setTimeout(15); client .done() .addListener( this, new Signal2.Listener<Exception, HttpMessage>() { public void trigger(Exception event1, HttpMessage event2) { OAuthProcess.this.handleToken(event1, event2); } }); Method m = this.service_.getTokenRequestMethod(); if (m == Method.Get) { boolean hasQuery = url.indexOf('?') != -1; url += (hasQuery ? '&' : '?') + ss.toString(); client.get(url); } else { HttpMessage post = new HttpMessage(); post.setHeader("Content-Type", "application/x-www-form-urlencoded"); post.addBodyText(ss.toString()); client.post(url, post); } } catch (Exception e) { e.printStackTrace(); } }
public ActionForward execute( ActionMapping actionMapping, ActionForm actionForm, HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse) { LazyValidatorForm frm = (LazyValidatorForm) actionForm; if (formCanceled(frm)) { return actionMapping.findForward(SUCCESS); } resetFocusControl(frm, CANCEL); ActionMessages msgs = new ActionMessages(); if (!formSaved(frm)) { setFormMode(frm, ((String) httpServletRequest.getParameter(BROWSE_ACTION))); setFormId(frm, (String) httpServletRequest.getParameter(BROWSE_ID)); try { httpServletRequest .getSession() .setAttribute("hozehKindList", Misc.listHardCode(Constants.TableId.HOZEH_KIND)); LoginInfo loginInfo = getLoginInfo(httpServletRequest); if (!loginInfo.userHasAccess(getFormId(frm), getFormMode(frm))) { if (isFormInModifyMode(frm) && loginInfo.userHasAccess(getFormId(frm), Constants.ActionType.ENQUERY)) { setFormMode(frm, Constants.ActionType.ENQUERY); } else { throw new Exception(INVALID_ACCESS); } } if (!isFormInAddMode(frm)) { String formKey = (String) httpServletRequest.getParameter(BROWSE_KEY); frm.set("formKey", formKey); String key[] = formKey.split(Constants.DATA_SEPARATOR_SPLIT); short officeCode = Short.parseShort(key[0]); short hozehCode = Short.parseShort(key[1]); String hozehKind = key[2]; HozehInfo inf = Place.getHozehDetails(officeCode, hozehCode, hozehKind); frm.set(OFFICE_CODE, Short.toString(inf.getOfficeCode())); frm.set(HOZEH_CODE, Short.toString(inf.getHozehCode())); frm.set(HOZEH_KIND, inf.getHozehKind()); frm.set(HOZEH_DESC, inf.getHozehDesc()); if (inf.isInactive()) { frm.set(CODE_ACTIVE_FLAG, "on"); } } String officeCode = (String) frm.get(OFFICE_CODE); if (Utils.isEmpty(officeCode)) { officeCode = "0"; frm.set(OFFICE_CODE, officeCode); } frm.set(OFFICE_NAME, Place.getOfficeName(Short.parseShort(officeCode))); if (isFormInAddMode(frm)) { resetFocusControl(frm, HOZEH_CODE); } else if (isFormInModifyMode(frm)) { resetFocusControl(frm, HOZEH_DESC); } } catch (Exception ex) { addError(msgs, ex.getMessage()); saveErrors(httpServletRequest, msgs); } return actionMapping.findForward(EDIT); } else { HozehInfo inf = new HozehInfo(); resetFocusControl(frm, ""); if (isFormInAddMode(frm)) { String officeCode = ((String) frm.get(OFFICE_CODE)).trim(); resetFocusControl(frm, ""); if (Utils.isEmpty(officeCode)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "اداره"); setFocusControl(frm, OFFICE_CODE); } else if (!Utils.isValidNotZeroNumber(officeCode, 3)) { addError(msgs, FIELD_INVALID, "اداره"); setFocusControl(frm, OFFICE_CODE); } else { inf.setOfficeCode(Short.parseShort(officeCode)); } String hozehCode = ((String) frm.get(HOZEH_CODE)).trim(); if (Utils.isEmpty(hozehCode)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "كد"); setFocusControl(frm, HOZEH_CODE); } else if (!Utils.isValidNotZeroNumber(hozehCode, 3)) { addError(msgs, FIELD_INVALID, "كد"); setFocusControl(frm, HOZEH_CODE); } else { inf.setHozehCode(Short.parseShort(hozehCode)); } String hozehKind = ((String) frm.get(HOZEH_KIND)).trim(); if (Utils.isEmpty(hozehKind)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "نوع"); setFocusControl(frm, HOZEH_KIND); } else if (hozehKind.length() > 1) { addError(msgs, FIELD_INVALID, "نوع"); setFocusControl(frm, HOZEH_KIND); } else { inf.setHozehKind(hozehKind); } } else { String formKey = (String) frm.get("formKey"); String key[] = formKey.split(Constants.DATA_SEPARATOR_SPLIT); inf.setOfficeCode(Short.parseShort(key[0])); inf.setHozehCode(Short.parseShort(key[1])); inf.setHozehKind(key[2]); } if (!isFormInDeleteMode(frm)) { String hozehDesc = Utils.charVal((String) frm.get(HOZEH_DESC)); frm.set(HOZEH_DESC, hozehDesc); if (Utils.isEmpty(hozehDesc)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "شرح"); setFocusControl(frm, HOZEH_DESC); } else if (hozehDesc.length() > 50) { addError(msgs, FIELD_INVALID, "شرح"); setFocusControl(frm, HOZEH_DESC); } else { inf.setHozehDesc(hozehDesc); } if (frm.get(CODE_ACTIVE_FLAG) == null) { inf.setCodeActiveFlag(Constants.CodeActiveFlag.ACTIVE); } else { inf.setCodeActiveFlag(Constants.CodeActiveFlag.INACTIVE); } } if (!msgs.isEmpty()) { saveErrors(httpServletRequest, msgs); return actionMapping.findForward(EDIT); } resetFocusControl(frm, CANCEL); try { Place.saveHozeh(getFormMode(frm), inf); httpServletRequest.setAttribute(BROWSE_KEY, inf.getKey()); return actionMapping.findForward(SUCCESS); } catch (Exception ex) { resetFocusControl(frm, CANCEL); addError(msgs, ex.getMessage()); saveErrors(httpServletRequest, msgs); return actionMapping.findForward(EDIT); } } }
protected void paintEvent(WPaintDevice paintDevice) { if (!(this.chart_ != null) || !this.chart_.cObjCreated_) { return; } if (this.chart_.getSeries(this.seriesColumn_).getType() != SeriesType.LineSeries && this.chart_.getSeries(this.seriesColumn_).getType() != SeriesType.CurveSeries) { if (this.getMethod() == WPaintedWidget.Method.HtmlCanvas) { StringBuilder ss = new StringBuilder(); ss.append("jQuery.removeData(").append(this.getJsRef()).append(",'sobj');"); ss.append("\nif (") .append(this.getObjJsRef()) .append(") {") .append(this.getObjJsRef()) .append(".canvas.style.cursor = 'auto';") .append("setTimeout(") .append(this.getObjJsRef()) .append(".repaint,0);}\n"); this.doJavaScript(ss.toString()); } logger.error( new StringWriter() .append("WAxisSliderWidget is not associated with a line or curve series.") .toString()); return; } WPainter painter = new WPainter(paintDevice); boolean horizontal = this.chart_.getOrientation() == Orientation.Vertical; double w = horizontal ? this.getWidth().getValue() : this.getHeight().getValue(); double h = horizontal ? this.getHeight().getValue() : this.getWidth().getValue(); boolean autoPadding = this.autoPadding_; if (autoPadding && EnumUtils.mask(paintDevice.getFeatures(), WPaintDevice.FeatureFlag.HasFontMetrics) .equals(0) && this.labelsEnabled_) { logger.error( new StringWriter() .append( "setAutoLayout(): device does not have font metrics (not even server-side font metrics).") .toString()); autoPadding = false; } if (autoPadding) { if (horizontal) { if (this.labelsEnabled_) { this.setSelectionAreaPadding(0, EnumSet.of(Side.Top)); this.setSelectionAreaPadding( (int) (this.chart_ .getAxis(Axis.XAxis) .calcMaxTickLabelSize(paintDevice, Orientation.Vertical) + 10), EnumSet.of(Side.Bottom)); this.setSelectionAreaPadding( (int) Math.max( this.chart_ .getAxis(Axis.XAxis) .calcMaxTickLabelSize(paintDevice, Orientation.Horizontal) / 2, 10.0), EnumSet.of(Side.Left, Side.Right)); } else { this.setSelectionAreaPadding(0, EnumSet.of(Side.Top)); this.setSelectionAreaPadding(5, EnumSet.of(Side.Left, Side.Right, Side.Bottom)); } } else { if (this.labelsEnabled_) { this.setSelectionAreaPadding(0, EnumSet.of(Side.Right)); this.setSelectionAreaPadding( (int) Math.max( this.chart_ .getAxis(Axis.XAxis) .calcMaxTickLabelSize(paintDevice, Orientation.Vertical) / 2, 10.0), EnumSet.of(Side.Top, Side.Bottom)); this.setSelectionAreaPadding( (int) (this.chart_ .getAxis(Axis.XAxis) .calcMaxTickLabelSize(paintDevice, Orientation.Horizontal) + 10), EnumSet.of(Side.Left)); } else { this.setSelectionAreaPadding(0, EnumSet.of(Side.Right)); this.setSelectionAreaPadding(5, EnumSet.of(Side.Top, Side.Bottom, Side.Left)); } } } double left = horizontal ? this.getSelectionAreaPadding(Side.Left) : this.getSelectionAreaPadding(Side.Top); double right = horizontal ? this.getSelectionAreaPadding(Side.Right) : this.getSelectionAreaPadding(Side.Bottom); double top = horizontal ? this.getSelectionAreaPadding(Side.Top) : this.getSelectionAreaPadding(Side.Right); double bottom = horizontal ? this.getSelectionAreaPadding(Side.Bottom) : this.getSelectionAreaPadding(Side.Left); double maxW = w - left - right; WRectF drawArea = new WRectF(left, 0, maxW, h); List<WAxis.Segment> segmentsBak = new ArrayList<WAxis.Segment>(this.chart_.getAxis(Axis.XAxis).segments_); double renderIntervalBak = this.chart_.getAxis(Axis.XAxis).renderInterval_; this.chart_ .getAxis(Axis.XAxis) .prepareRender( horizontal ? Orientation.Horizontal : Orientation.Vertical, drawArea.getWidth()); final WRectF chartArea = this.chart_.chartArea_; WRectF selectionRect = null; { double u = -this.chart_.xTransformHandle_.getValue().getDx() / (chartArea.getWidth() * this.chart_.xTransformHandle_.getValue().getM11()); selectionRect = new WRectF(0, top, maxW, h - (top + bottom)); this.transform_.setValue( new WTransform( 1 / this.chart_.xTransformHandle_.getValue().getM11(), 0, 0, 1, u * maxW, 0)); } WRectF seriesArea = new WRectF(left, top + 5, maxW, h - (top + bottom + 5)); WTransform selectionTransform = this.hv(new WTransform(1, 0, 0, 1, left, 0).multiply(this.transform_.getValue())); WRectF rect = selectionTransform.map(this.hv(selectionRect)); painter.fillRect(this.hv(new WRectF(left, top, maxW, h - top - bottom)), this.background_); painter.fillRect(rect, this.selectedAreaBrush_); final double TICK_LENGTH = 5; final double ANGLE1 = 15; final double ANGLE2 = 80; double tickStart = 0.0; double tickEnd = 0.0; double labelPos = 0.0; AlignmentFlag labelHFlag = AlignmentFlag.AlignCenter; AlignmentFlag labelVFlag = AlignmentFlag.AlignMiddle; final WAxis axis = this.chart_.getAxis(Axis.XAxis); if (horizontal) { tickStart = 0; tickEnd = TICK_LENGTH; labelPos = TICK_LENGTH; labelVFlag = AlignmentFlag.AlignTop; } else { tickStart = -TICK_LENGTH; tickEnd = 0; labelPos = -TICK_LENGTH; labelHFlag = AlignmentFlag.AlignRight; } if (horizontal) { if (axis.getLabelAngle() > ANGLE1) { labelHFlag = AlignmentFlag.AlignRight; if (axis.getLabelAngle() > ANGLE2) { labelVFlag = AlignmentFlag.AlignMiddle; } } else { if (axis.getLabelAngle() < -ANGLE1) { labelHFlag = AlignmentFlag.AlignLeft; if (axis.getLabelAngle() < -ANGLE2) { labelVFlag = AlignmentFlag.AlignMiddle; } } } } else { if (axis.getLabelAngle() > ANGLE1) { labelVFlag = AlignmentFlag.AlignBottom; if (axis.getLabelAngle() > ANGLE2) { labelHFlag = AlignmentFlag.AlignCenter; } } else { if (axis.getLabelAngle() < -ANGLE1) { labelVFlag = AlignmentFlag.AlignTop; if (axis.getLabelAngle() < -ANGLE2) { labelHFlag = AlignmentFlag.AlignCenter; } } } } EnumSet<AxisProperty> axisProperties = EnumSet.of(AxisProperty.Line); if (this.labelsEnabled_) { axisProperties.add(AxisProperty.Labels); } if (horizontal) { axis.render( painter, axisProperties, new WPointF(drawArea.getLeft(), h - bottom), new WPointF(drawArea.getRight(), h - bottom), tickStart, tickEnd, labelPos, EnumSet.of(labelHFlag, labelVFlag)); WPainterPath line = new WPainterPath(); line.moveTo(drawArea.getLeft() + 0.5, h - (bottom - 0.5)); line.lineTo(drawArea.getRight(), h - (bottom - 0.5)); painter.strokePath(line, this.chart_.getAxis(Axis.XAxis).getPen()); } else { axis.render( painter, axisProperties, new WPointF(this.getSelectionAreaPadding(Side.Left) - 1, drawArea.getLeft()), new WPointF(this.getSelectionAreaPadding(Side.Left) - 1, drawArea.getRight()), tickStart, tickEnd, labelPos, EnumSet.of(labelHFlag, labelVFlag)); WPainterPath line = new WPainterPath(); line.moveTo(this.getSelectionAreaPadding(Side.Left) - 0.5, drawArea.getLeft() + 0.5); line.lineTo(this.getSelectionAreaPadding(Side.Left) - 0.5, drawArea.getRight()); painter.strokePath(line, this.chart_.getAxis(Axis.XAxis).getPen()); } WPainterPath curve = new WPainterPath(); { WTransform t = new WTransform(1, 0, 0, 1, seriesArea.getLeft(), seriesArea.getTop()) .multiply( new WTransform( seriesArea.getWidth() / chartArea.getWidth(), 0, 0, seriesArea.getHeight() / chartArea.getHeight(), 0, 0)) .multiply(new WTransform(1, 0, 0, 1, -chartArea.getLeft(), -chartArea.getTop())); if (!horizontal) { t.assign( new WTransform( 0, 1, 1, 0, this.getSelectionAreaPadding(Side.Left) - this.getSelectionAreaPadding(Side.Right) - 5, 0) .multiply(t) .multiply(new WTransform(0, 1, 1, 0, 0, 0))); } curve.assign(t.map(this.chart_.pathForSeries(this.seriesColumn_))); } { WRectF leftHandle = this.hv(new WRectF(-5, top, 5, h - top - bottom)); WTransform t = new WTransform(1, 0, 0, 1, left, -top) .multiply( new WTransform() .translate(this.transform_.getValue().map(selectionRect.getTopLeft()))); painter.fillRect(this.hv(t).map(leftHandle), this.handleBrush_); } { WRectF rightHandle = this.hv(new WRectF(0, top, 5, h - top - bottom)); WTransform t = new WTransform(1, 0, 0, 1, left, -top) .multiply( new WTransform() .translate(this.transform_.getValue().map(selectionRect.getTopRight()))); painter.fillRect(this.hv(t).map(rightHandle), this.handleBrush_); } if (this.selectedSeriesPen_ != this.seriesPen_ && !this.selectedSeriesPen_.equals(this.seriesPen_)) { WPainterPath clipPath = new WPainterPath(); clipPath.addRect(this.hv(selectionRect)); painter.setClipPath(selectionTransform.map(clipPath)); painter.setClipping(true); painter.setPen(this.getSelectedSeriesPen()); painter.drawPath(curve); WPainterPath leftClipPath = new WPainterPath(); leftClipPath.addRect( this.hv(new WTransform(1, 0, 0, 1, -selectionRect.getWidth(), 0).map(selectionRect))); painter.setClipPath( this.hv( new WTransform(1, 0, 0, 1, left, -top) .multiply( new WTransform() .translate( this.transform_.getValue().map(selectionRect.getTopLeft())))) .map(leftClipPath)); painter.setPen(this.getSeriesPen()); painter.drawPath(curve); WPainterPath rightClipPath = new WPainterPath(); rightClipPath.addRect( this.hv(new WTransform(1, 0, 0, 1, selectionRect.getWidth(), 0).map(selectionRect))); painter.setClipPath( this.hv( new WTransform(1, 0, 0, 1, left - selectionRect.getRight(), -top) .multiply( new WTransform() .translate( this.transform_.getValue().map(selectionRect.getTopRight())))) .map(rightClipPath)); painter.drawPath(curve); painter.setClipping(false); } else { painter.setPen(this.getSeriesPen()); painter.drawPath(curve); } if (this.getMethod() == WPaintedWidget.Method.HtmlCanvas) { WApplication app = WApplication.getInstance(); StringBuilder ss = new StringBuilder(); ss.append("new Wt3_3_5.WAxisSliderWidget(") .append(app.getJavaScriptClass()) .append(",") .append(this.getJsRef()) .append(",") .append(this.getObjJsRef()) .append(",") .append("{chart:") .append(this.chart_.getCObjJsRef()) .append(",transform:") .append(this.transform_.getJsRef()) .append(",rect:function(){return ") .append(rect.getJsRef()) .append("},drawArea:") .append(drawArea.getJsRef()) .append(",series:") .append(this.seriesColumn_) .append("});"); this.doJavaScript(ss.toString()); } Utils.copyList(segmentsBak, this.chart_.getAxis(Axis.XAxis).segments_); this.chart_.getAxis(Axis.XAxis).renderInterval_ = renderIntervalBak; }
public ActionForward execute( ActionMapping actionMapping, ActionForm actionForm, HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse) { LazyValidatorForm frm = (LazyValidatorForm) actionForm; resetFocusControl(frm, CANCEL); ActionMessages msgs = new ActionMessages(); if (formCanceled(frm)) { return actionMapping.findForward(SUCCESS); } String geoFlag = (String) frm.get(GEO_FLAG); if (Utils.isEmpty(geoFlag)) { geoFlag = (String) httpServletRequest.getParameter(GEO_FLAG); frm.set(GEO_FLAG, geoFlag); } if (!formSaved(frm)) { setFormMode(frm, ((String) httpServletRequest.getParameter(BROWSE_ACTION))); setFormId(frm, (String) httpServletRequest.getParameter(BROWSE_ID)); try { LoginInfo loginInfo = getLoginInfo(httpServletRequest); String geoFlagDesc = Misc.getHardCodeDesc(Constants.TableId.GEO_FLAG, geoFlag); frm.set(GEO_FLAG_DESC, geoFlagDesc); if (!loginInfo.userHasAccess("Geo_Conversion", getFormMode(frm))) { if (isFormInModifyMode(frm) && loginInfo.userHasAccess("Geo_Conversion", Constants.ActionType.ENQUERY)) { setFormMode(frm, Constants.ActionType.ENQUERY); } else { throw new Exception(INVALID_ACCESS); } } if (!geoFlag.equals(Constants.GeoFlag.VILLAGE)) { throw new Exception(INVALID_ACCESS); } if (!isFormInAddMode(frm)) { String formKey = (String) httpServletRequest.getParameter(BROWSE_KEY); GeoFormationInfo inf = Geo.getGeoFormationDetails(Integer.parseInt(formKey)); frm.set(GEO_FORMATION_SERIAL, Integer.toString(inf.getGeoFormationSerial())); frm.set(GEO_SERIAL, Integer.toString(inf.getGeoSerial())); frm.set(APPROVAL_LETTER_NO, inf.getApprovalLetterNo()); frm.set(APPROVAL_LETTER_DATE, DateUtils.revFormatDate(inf.getApprovalLetterDate())); frm.set(GEO_DESC, Geo.getGeoDesc(inf.getGeoSerial())); } frm.set(GEO_FLAG_DESC, geoFlagDesc); if (isFormInModifyMode(frm)) { resetFocusControl(frm, APPROVAL_LETTER_NO); } } catch (Exception ex) { addError(msgs, ex.getMessage()); saveErrors(httpServletRequest, msgs); } return actionMapping.findForward(EDIT); } else { try { String geoFlagDesc = (String) frm.get(GEO_FLAG_DESC); if (!geoFlag.equals(Constants.GeoFlag.VILLAGE)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "علامت محل جغرافيايي"); setFocusControl(frm, GEO_SERIAL); } GeoFormationInfo inf = new GeoFormationInfo(); resetFocusControl(frm, ""); if (isFormInDeleteMode(frm) || isFormInModifyMode(frm)) { String geoFormationSerial = ((String) frm.get(GEO_FORMATION_SERIAL)).trim(); if (Utils.isEmpty(geoFormationSerial)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "سريال"); setFocusControl(frm, GEO_SERIAL); } else if (!Utils.isValidNotZeroNumber(geoFormationSerial, 6)) { addError(msgs, FIELD_INVALID, "سريال"); setFocusControl(frm, GEO_SERIAL); } else { inf.setGeoFormationSerial(Integer.parseInt(geoFormationSerial)); } } if (isFormInAddMode(frm)) { String geoSerial = ((String) frm.get(GEO_SERIAL)).trim(); if (Utils.isEmpty(geoSerial)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "سريال " + geoFlagDesc); setFocusControl(frm, GEO_SERIAL); } /* else if (searchGeoDesc(frm, geoFlag) == false) { addError(msgs, FIELD_INVALID, "سريال " + geoFlagDesc); setFocusControl(frm, GEO_SERIAL); } */ else { inf.setGeoSerial(Integer.parseInt(geoSerial)); } } if (!isFormInDeleteMode(frm)) { String approvalLetterNo = Utils.trimConvert((String) frm.get(APPROVAL_LETTER_NO)); frm.set(APPROVAL_LETTER_NO, approvalLetterNo); if (Utils.isEmpty(approvalLetterNo)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "شماره تصويب نامه"); setFocusControl(frm, APPROVAL_LETTER_NO); } else if (approvalLetterNo.length() > 20) { addError(msgs, FIELD_INVALID, "شماره تصويب نامه"); setFocusControl(frm, APPROVAL_LETTER_NO); } else { inf.setApprovalLetterNo(approvalLetterNo); } String approvalLetterDate = ((String) frm.get(APPROVAL_LETTER_DATE)).trim(); if (Utils.isEmpty(approvalLetterDate)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "تاريخ تصويب نامه"); setFocusControl(frm, APPROVAL_LETTER_DATE); } else if (!DateUtils.isValidRevFormattedFDate(approvalLetterDate)) { addError(msgs, FIELD_INVALID, "تاريخ تصويب نامه"); setFocusControl(frm, APPROVAL_LETTER_DATE); } else if (DateUtils.unformatRevFormattedFdate(approvalLetterDate) .compareTo(DateUtils.fDate()) > 0) { addError(msgs, FIELD_SHOULD_BE_LESS_THAN, "تاريخ تصويب نامه", "تاريخ روز"); setFocusControl(frm, APPROVAL_LETTER_DATE); } else { inf.setApprovalLetterDate(DateUtils.unformatRevFormattedFdate(approvalLetterDate)); } } if (!msgs.isEmpty()) { saveErrors(httpServletRequest, msgs); return actionMapping.findForward(EDIT); } resetFocusControl(frm, CANCEL); Geo.saveConversion(getFormMode(frm), inf, geoFlag); httpServletRequest.setAttribute(BROWSE_KEY, inf.getKey()); return actionMapping.findForward(SUCCESS); } catch (Exception ex) { resetFocusControl(frm, CANCEL); addError(msgs, ex.getMessage()); saveErrors(httpServletRequest, msgs); return actionMapping.findForward(EDIT); } } }
public ActionForward execute( ActionMapping actionMapping, ActionForm actionForm, HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse) { LazyValidatorForm frm = (LazyValidatorForm) actionForm; if (formCanceled(frm)) { return actionMapping.findForward(SUCCESS); } resetFocusControl(frm, CANCEL); ActionMessages msgs = new ActionMessages(); if (!formSaved(frm)) { setFormMode(frm, ((String) httpServletRequest.getParameter(BROWSE_ACTION))); setFormId(frm, (String) httpServletRequest.getParameter(BROWSE_ID)); try { LoginInfo loginInfo = getLoginInfo(httpServletRequest); if (!loginInfo.userHasAccess(getFormId(frm), getFormMode(frm))) { if (isFormInModifyMode(frm) && loginInfo.userHasAccess(getFormId(frm), Constants.ActionType.ENQUERY)) { setFormMode(frm, Constants.ActionType.ENQUERY); } else { throw new Exception(INVALID_ACCESS); } } if (!isFormInAddMode(frm)) { String formKey = (String) httpServletRequest.getParameter(BROWSE_KEY); VillageInfo inf = Geo.getVillageDetails(Integer.parseInt(formKey)); frm.set(GEO_SERIAL, Integer.toString(inf.getGeoSerial())); frm.set(GEO_DESC, inf.getGeoDesc()); frm.set(OSTAN_SERIAL, Integer.toString(inf.getOstanSerial())); frm.set(SHAHRESTAN_SERIAL, Integer.toString(inf.getShahrestanSerial())); frm.set(BAKHSH_SERIAL, Integer.toString(inf.getBakhshSerial())); frm.set(DEHESTAN_SERIAL, Integer.toString(inf.getDehestanSerial())); if (inf.isInactive()) { frm.set(CODE_ACTIVE_FLAG, "on"); } } else { frm.set(GEO_SERIAL, Integer.toString(Geo.getNewGeoSerial(Constants.GeoFlag.VILLAGE))); } String serial; serial = (String) frm.get(OSTAN_SERIAL); if (Utils.isEmpty(serial)) { serial = "0"; frm.set(OSTAN_SERIAL, serial); } frm.set(OSTAN_DESC, Geo.getOstanDesc(Integer.parseInt(serial))); serial = (String) frm.get(SHAHRESTAN_SERIAL); if (Utils.isEmpty(serial)) { serial = "0"; frm.set(SHAHRESTAN_SERIAL, serial); } frm.set(SHAHRESTAN_DESC, Geo.getShahrestanDesc(Integer.parseInt(serial))); serial = (String) frm.get(BAKHSH_SERIAL); if (Utils.isEmpty(serial)) { serial = "0"; frm.set(BAKHSH_SERIAL, serial); } frm.set(BAKHSH_DESC, Geo.getBakhshDesc(Integer.parseInt(serial))); serial = (String) frm.get(DEHESTAN_SERIAL); if (Utils.isEmpty(serial)) { serial = "0"; frm.set(DEHESTAN_SERIAL, serial); } frm.set(DEHESTAN_DESC, Geo.getDehestanDesc(Integer.parseInt(serial))); if (isFormInAddMode(frm)) { resetFocusControl(frm, GEO_SERIAL); } else if (isFormInModifyMode(frm)) { resetFocusControl(frm, GEO_DESC); } } catch (Exception ex) { addError(msgs, ex.getMessage()); saveErrors(httpServletRequest, msgs); } return actionMapping.findForward(EDIT); } else { VillageInfo inf = new VillageInfo(); String geoSerial = ((String) frm.get(GEO_SERIAL)).trim(); resetFocusControl(frm, ""); if (Utils.isEmpty(geoSerial)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "كد"); setFocusControl(frm, GEO_SERIAL); } else if (!Utils.isValidNotZeroNumber(geoSerial, 6)) { addError(msgs, FIELD_INVALID, "كد"); setFocusControl(frm, GEO_SERIAL); } else { inf.setGeoSerial(Integer.parseInt(geoSerial)); } if (!isFormInDeleteMode(frm)) { String geoDesc = Utils.charVal((String) frm.get(GEO_DESC)); frm.set(GEO_DESC, geoDesc); if (Utils.isEmpty(geoDesc)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "نام"); setFocusControl(frm, GEO_DESC); } else if (geoDesc.length() > 50) { addError(msgs, FIELD_INVALID, "نام"); setFocusControl(frm, GEO_DESC); } else { inf.setGeoDesc(geoDesc); } String ostanSerial = (String) frm.get(OSTAN_SERIAL).toString(); if (Utils.isEmpty(ostanSerial)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "استان"); setFocusControl(frm, GEO_DESC); } else if (!Utils.isValidNotZeroNumber(ostanSerial, 6)) { addError(msgs, FIELD_INVALID, "استان"); setFocusControl(frm, GEO_DESC); } else { inf.setOstanSerial(Integer.parseInt(ostanSerial)); } String shahrestanSerial = (String) frm.get(SHAHRESTAN_SERIAL).toString(); if (Utils.isEmpty(shahrestanSerial)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "شهرستان"); setFocusControl(frm, GEO_DESC); } else if (!Utils.isValidNotZeroNumber(shahrestanSerial, 6)) { addError(msgs, FIELD_INVALID, "شهرستان"); setFocusControl(frm, GEO_DESC); } else { inf.setShahrestanSerial(Integer.parseInt(shahrestanSerial)); } String bakhshSerial = (String) frm.get(BAKHSH_SERIAL).toString(); if (Utils.isEmpty(bakhshSerial)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "بخش"); setFocusControl(frm, GEO_DESC); } else if (!Utils.isValidNotZeroNumber(bakhshSerial, 6)) { addError(msgs, FIELD_INVALID, "بخش"); setFocusControl(frm, GEO_DESC); } else { inf.setBakhshSerial(Integer.parseInt(bakhshSerial)); } String dehestanSerial = (String) frm.get(DEHESTAN_SERIAL).toString(); if (Utils.isEmpty(dehestanSerial)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "دهستان"); setFocusControl(frm, GEO_DESC); } else if (!Utils.isValidNotZeroNumber(dehestanSerial, 6)) { addError(msgs, FIELD_INVALID, "دهستان"); setFocusControl(frm, GEO_DESC); } else { inf.setDehestanSerial(Integer.parseInt(dehestanSerial)); } if (Utils.isEmpty(frm.get(CODE_ACTIVE_FLAG))) { inf.setCodeActiveFlag(Constants.CodeActiveFlag.ACTIVE); } else { inf.setCodeActiveFlag(Constants.CodeActiveFlag.INACTIVE); } } if (!msgs.isEmpty()) { saveErrors(httpServletRequest, msgs); return actionMapping.findForward(EDIT); } resetFocusControl(frm, CANCEL); try { Geo.saveVillage(getFormMode(frm), inf); httpServletRequest.setAttribute(BROWSE_KEY, inf.getKey()); return actionMapping.findForward(SUCCESS); } catch (Exception ex) { resetFocusControl(frm, CANCEL); addError(msgs, ex.getMessage()); saveErrors(httpServletRequest, msgs); return actionMapping.findForward(EDIT); } } }
/** * Created with IntelliJ IDEA. User: ciobi Date: 2013-06-15 Time: 09:56 * * <p> */ public class ReaderHandler extends WebAppContext { public static final Log LOG = LogFactory.getLog(ReaderHandler.class); // ttt1 option that on http only redirects to https, for all paths public static final String ACTION_LOGIN = "******"; public static final String ACTION_SIGNUP = "signup"; public static final String ACTION_CHANGE_PASSWORD = "******"; public static final String ACTION_CHANGE_SETTINGS = "change_settings"; public static final String ACTION_ADD_FEED = "add_feed"; public static final String ACTION_REMOVE_FEED = "remove_feed"; public static final String ACTION_UPDATE_FEED_LIST = "update_feed_list"; // for ordering, //ttt2 public static final String PATH_LOGIN = "******" + ACTION_LOGIN; public static final String PATH_CHANGE_PASSWORD = "******" + ACTION_CHANGE_PASSWORD; public static final String PATH_CHANGE_SETTINGS = "/" + ACTION_CHANGE_SETTINGS; public static final String PATH_SIGNUP = "/" + ACTION_SIGNUP; public static final String PATH_ADD_FEED = "/" + ACTION_ADD_FEED; public static final String PATH_REMOVE_FEED = "/" + ACTION_REMOVE_FEED; public static final String PATH_UPDATE_FEED_LIST = "/" + ACTION_UPDATE_FEED_LIST; public static final String PATH_ERROR = "/error"; public static final String PATH_LOGOUT = "/logout"; public static final String PATH_SETTINGS = "/settings"; public static final String PATH_FEEDS = "/feeds"; public static final String PATH_FEED = "/feed"; public static final String PATH_ADMIN = "/admin"; public static final String PATH_FEED_ADMIN = "/feed_admin"; public static final String PATH_OPEN_ARTICLE = "/open_article/"; // !!! it's easier to end this one with a slash // params we use to send strings to the JSPs or to get user input in POST, via // request.getParameter(), or both public static final String PARAM_USER_ID = "userId"; public static final String PARAM_USER_NAME = "name"; public static final String PARAM_EMAIL = "email"; public static final String PARAM_CURRENT_PASSWORD = "******"; public static final String PARAM_PASSWORD = "******"; public static final String PARAM_PASSWORD_CONFIRM = "passwordConfirm"; public static final String PARAM_PATH = "path"; // public static final String PARAM_ERROR = "error"; public static final String PARAM_REMEMBER_ACCOUNT = "rememberAccount"; public static final String PARAM_NEW_FEED_URL = "feedUrl"; public static final String PARAM_FEED_ID = "feedId"; public static final String PARAM_ITEMS_PER_PAGE = "itemsPerPage"; public static final String PARAM_STYLE = "style"; public static final String PARAM_FEED_DATE_FORMAT = "feedDateFormat"; // variable names, used to give JSPs access to Java objects in the handler via // request.getAttribute(() public static final String VAR_USER = "******"; public static final String VAR_LOGIN_INFO = "loginInfo"; public static final String VAR_USER_DB = "userDb"; public static final String VAR_FEED_DB = "feedDb"; public static final String VAR_ARTICLE_DB = "articleDb"; public static final String VAR_READ_ARTICLES_COLL_DB = "readArticlesCollDb"; public static final String BROWSER_ID = "browserId"; public static final String SESSION_ID = "sessionId"; private LoginInfo.DB loginInfoDb; private User.DB userDb; private Feed.DB feedDb; private Article.DB articleDb; private ReadArticlesColl.DB readArticlesCollDb; private UserHelpers userHelpers; private boolean isInJar = Utils.isInJar(); private static class ReaderErrorHandler extends ErrorHandler { @Override // !!! note that this gets called for missing pages, but not if exceptions are thrown; // exceptions are handled separately public void handle( String target, Request request, HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse) throws IOException { request.setHandled(true); httpServletResponse .getWriter() .println( String.format("<h1>Page doesn't exist: %s</h1>", request.getUri().getDecodedPath())); } } private static HashMap<String, String> PATH_MAPPING = new HashMap<>(); static { PATH_MAPPING.put("", "home_page"); PATH_MAPPING.put(PATH_LOGIN, "login"); PATH_MAPPING.put(PATH_LOGOUT, "login"); // !!! after logout we get redirected to /login PATH_MAPPING.put(PATH_SIGNUP, "signup"); PATH_MAPPING.put(PATH_ERROR, "error"); PATH_MAPPING.put(PATH_FEED_ADMIN, "feed_admin"); PATH_MAPPING.put(PATH_SETTINGS, "settings"); PATH_MAPPING.put(PATH_FEEDS, "feeds"); PATH_MAPPING.put(PATH_FEED + "/*", "feed"); PATH_MAPPING.put(PATH_ADMIN, "admin"); } public ReaderHandler(LowLevelDbAccess lowLevelDbAccess, String webDir) { loginInfoDb = new LoginInfo.DB(lowLevelDbAccess); userDb = new User.DB(lowLevelDbAccess); feedDb = new Feed.DB(lowLevelDbAccess); articleDb = new Article.DB(lowLevelDbAccess); readArticlesCollDb = new ReadArticlesColl.DB(lowLevelDbAccess); userHelpers = new UserHelpers(loginInfoDb, userDb); setContextPath("/"); File warPath = new File(webDir); setWar(warPath.getAbsolutePath()); if (isInJar) { for (Map.Entry<String, String> entry : PATH_MAPPING.entrySet()) { addPrebuiltJsp(entry.getKey(), "jsp." + entry.getValue().replaceAll("_", "_005f") + "_jsp"); } } else { for (Map.Entry<String, String> entry : PATH_MAPPING.entrySet()) { addServlet( new ServletHolder(new RedirectServlet("/" + entry.getValue() + ".jsp")), entry.getKey()); } } setErrorHandler(new ReaderErrorHandler()); } private void addPrebuiltJsp(String path, String className) { try { Class clazz = Class.forName( className); // ttt2 see if possible to not use this, preferably without doing // redirections like RedirectServlet Object obj = clazz.newInstance(); addServlet(new ServletHolder((Servlet) obj), path); LOG.info("Added prebuilt JSP: " + obj.toString()); } catch (Exception e) { LOG.fatal(String.format("Failed to load prebuilt JSP for %s and %s", path, className), e); } } @Override public void doHandle( String target, Request request, HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse) throws IOException, ServletException { LOG.info("handling " + target); // !!! doHandle() is called twice for a request when using redirectiion, first time with // request.getPathInfo() // set to the URI and target set to the path, then with request.getPathInfo() set to null and // target set to the .jsp try { // request.setHandled(true); boolean secured; if (request.getScheme().equals("https")) { secured = true; } else if (request.getScheme().equals("http")) { secured = false; } else { httpServletResponse .getWriter() .println( String.format( "<h1>Unknown scheme %s at %s</h1>", request.getScheme(), request.getUri().getDecodedPath())); return; } if (request.getMethod().equals("GET")) { if (isInJar || target.endsWith(".jsp")) { // !!! when not in jar there's no need to do anything about params if it's not a .jsp, // as this will get called again for the corresponding .jsp if (prepareForJspGet(target, request, httpServletResponse, secured)) { return; } } if (target.startsWith(PATH_OPEN_ARTICLE)) { handleOpenArticle(request, httpServletResponse, target); return; } super.doHandle(target, request, httpServletRequest, httpServletResponse); LOG.info("handling of " + target + " went to super"); // httpServletResponse.setDateHeader("Date", System.currentTimeMillis()); //ttt2 review // these, probably not use // httpServletResponse.setDateHeader("Expires", System.currentTimeMillis() + 60000); return; } if (request.getMethod().equals("POST")) { if (request.getUri().getDecodedPath().equals(PATH_LOGIN)) { handleLoginPost(request, httpServletResponse, secured); } else if (request.getUri().getDecodedPath().equals(PATH_SIGNUP)) { handleSignupPost(request, httpServletResponse); } else if (request.getUri().getDecodedPath().equals(PATH_CHANGE_PASSWORD)) { handleChangePasswordPost(request, httpServletResponse); } else if (request.getUri().getDecodedPath().equals(PATH_UPDATE_FEED_LIST)) { handleUpdateFeedListPost(request, httpServletResponse); } else if (request.getUri().getDecodedPath().equals(PATH_ADD_FEED)) { handleAddFeedPost(request, httpServletResponse); } else if (request.getUri().getDecodedPath().equals(PATH_REMOVE_FEED)) { handleRemoveFeedPost(request, httpServletResponse); } else if (request.getUri().getDecodedPath().equals(PATH_CHANGE_SETTINGS)) { handleChangeSettingsPost(request, httpServletResponse); } } /*{ // for tests only; httpServletResponse.getWriter().println(String.format("<h1>Unable to process request %s</h1>", request.getUri().getDecodedPath())); request.setHandled(true); }*/ } catch (Exception e) { LOG.error("Error processing request", e); try { // redirectToError(e.toString(), request, httpServletResponse); //!!! redirectToError leads // to infinite loop, probably related to // the fact that we get 2 calls for a regular request when redirecting httpServletResponse .getWriter() .println( String.format( "<h1>Unable to process request %s</h1>", // ttt1 generate some HTML request.getUri().getDecodedPath())); request.setHandled(true); } catch (Exception e1) { LOG.error("Error redirecting", e1); } } } /** * Normally sets the path and a few attributes that the JSPs are likely to need. Also verifies the * login information. If necessary, just redirects to the login page. * * @param target * @param request * @param httpServletResponse * @param secured * @return true if the request is already handled so the .jsp shouldn't get called * @throws Exception */ private boolean prepareForJspGet( String target, Request request, HttpServletResponse httpServletResponse, boolean secured) throws Exception { LoginInfo.SessionInfo sessionInfo = UserHelpers.getSessionInfo(request); LOG.info( String.format( "hndl - %s ; %s; %s ; %s", target, request.getPathInfo(), request.getMethod(), secured ? "secured" : "not secured")); String path = request.getUri().getDecodedPath(); boolean redirectToLogin = path.equals(PATH_LOGOUT); LoginInfo loginInfo = null; if (sessionInfo.isNull()) { redirectToLogin = true; LOG.info("Null session info. Logging in again."); } else { loginInfo = loginInfoDb.get( sessionInfo.browserId, sessionInfo.sessionId); // ttt2 use a cache, to avoid going to DB if (loginInfo == null || loginInfo.expiresOn < System.currentTimeMillis()) { LOG.info("Session has expired. Logging in again. Info: " + loginInfo); redirectToLogin = true; } } if (!path.equals(PATH_LOGIN) && !path.equals(PATH_SIGNUP) && !path.equals(PATH_ERROR)) { if (redirectToLogin) { // ttt2 perhaps store URI, to return to it after login logOut(sessionInfo.browserId); addLoginParams(request, loginInfo); httpServletResponse.sendRedirect(PATH_LOGIN); return true; } User user = userDb.get(loginInfo.userId); if (user == null) { WebUtils.redirectToError("Unknown user", request, httpServletResponse); return true; } if (!user.active) { WebUtils.redirectToError("Account is not active", request, httpServletResponse); return true; } request.setAttribute(VAR_FEED_DB, feedDb); request.setAttribute(VAR_USER_DB, userDb); request.setAttribute(VAR_ARTICLE_DB, articleDb); request.setAttribute(VAR_READ_ARTICLES_COLL_DB, readArticlesCollDb); request.setAttribute(VAR_USER, user); request.setAttribute(VAR_LOGIN_INFO, loginInfo); MultiMap<String> params = new MultiMap<>(); params.put(PARAM_PATH, path); request.setParameters(params); } if (path.equals(PATH_LOGIN)) { addLoginParams(request, loginInfo); } return false; } private void handleOpenArticle( Request request, HttpServletResponse httpServletResponse, String target) throws Exception { try { int k1 = target.indexOf('/', 1); int k2 = target.indexOf('/', k1 + 1); String feedId = target.substring(k1 + 1, k2); String strSeq = target.substring(k2 + 1); int seq = Integer.parseInt(strSeq); Article article = articleDb.get(feedId, seq); LoginInfo loginInfo = userHelpers.getLoginInfo(request); // ttt2 using the link from a non-authenticated browser causes a NPE; maybe do something // better, e.g. sign up ReadArticlesColl readArticlesColl = readArticlesCollDb.get(loginInfo.userId, feedId); if (readArticlesColl == null) { readArticlesColl = new ReadArticlesColl(loginInfo.userId, feedId); } if (!readArticlesColl.isRead(seq)) { readArticlesColl.markRead(seq, Config.getConfig().maxSizeForReadArticles); readArticlesCollDb.add(readArticlesColl); } String s = URIUtil.encodePath(article.url) .replace("%3F", "?") .replace("%23", "#"); // ttt2 see how to do this right httpServletResponse.sendRedirect(s); } catch (Exception e) { WebUtils.showResult( String.format("Failed to get article for path %s. %s", target, e), "/", request, httpServletResponse); } } private void handleSignupPost(Request request, HttpServletResponse httpServletResponse) throws Exception { String userId = request.getParameter(PARAM_USER_ID); String userName = request.getParameter(PARAM_USER_NAME); String email = request.getParameter(PARAM_EMAIL); String stringPassword = request.getParameter(PARAM_PASSWORD); String stringPasswordConfirm = request.getParameter(PARAM_PASSWORD_CONFIRM); if (!stringPassword.equals(stringPasswordConfirm)) { WebUtils.redirectToError( "Mismatch between password and password confirmation", request, httpServletResponse); return; } SecureRandom secureRandom = new SecureRandom(); String salt = "" + secureRandom.nextLong(); byte[] password = User.computeHashedPassword(stringPassword, salt); User user = userDb.get(userId); if (user != null) { WebUtils.redirectToError( "There already exists a user with the ID " + userId, request, httpServletResponse); return; } user = new User( userId, userName, password, salt, email, new ArrayList<String>(), Config.getConfig().activateAccountsAtCreation, false); // ttt2 add confirmation by email, captcha, ... List<String> fieldErrors = user.checkFields(); if (!fieldErrors.isEmpty()) { StringBuilder bld = new StringBuilder("Invalid values when trying to create user with ID ") .append(userId) .append("<br/>"); for (String s : fieldErrors) { bld.append(s).append("<br/>"); } WebUtils.redirectToError(bld.toString(), request, httpServletResponse); return; } // ttt2 2 clients can add the same userId simultaneously userDb.add(user); httpServletResponse.sendRedirect("/"); } private void handleChangePasswordPost(Request request, HttpServletResponse httpServletResponse) throws Exception { LoginInfo loginInfo = userHelpers.getLoginInfo(request); if (loginInfo == null) { WebUtils.redirectToError("Couldn't determine the current user", request, httpServletResponse); return; } String userId = loginInfo.userId; String stringCrtPassword = request.getParameter(PARAM_CURRENT_PASSWORD); String stringNewPassword = request.getParameter(PARAM_PASSWORD); String stringNewPasswordConfirm = request.getParameter(PARAM_PASSWORD_CONFIRM); if (!stringNewPassword.equals(stringNewPasswordConfirm)) { showResult( "Mismatch between password and password confirmation", PATH_SETTINGS, request, httpServletResponse); return; } User user = userDb.get( userId); // ttt1 crashes for wrong ID; 2013.07.20 - no longer have an idea what this is // about if (user == null) { WebUtils.redirectToError("Couldn't find the current user", request, httpServletResponse); return; } if (!user.checkPassword(stringCrtPassword)) { showResult("Incorrect current password", PATH_SETTINGS, request, httpServletResponse); return; } SecureRandom secureRandom = new SecureRandom(); String salt = "" + secureRandom.nextLong(); byte[] password = User.computeHashedPassword(stringNewPassword, salt); user.salt = salt; user.password = password; // ttt3 2 clients can change the password simultaneously userDb.add(user); // httpServletResponse.sendRedirect(PATH_SETTINGS); showResult("Password changed", PATH_SETTINGS, request, httpServletResponse); } private void handleChangeSettingsPost(Request request, HttpServletResponse httpServletResponse) throws Exception { LoginInfo loginInfo = userHelpers.getLoginInfo(request); if (loginInfo == null) { WebUtils.redirectToError("Couldn't determine the current user", request, httpServletResponse); return; } String stringItemsPerPage = request.getParameter(PARAM_ITEMS_PER_PAGE); try { loginInfo.itemsPerPage = Integer.parseInt(stringItemsPerPage); } catch (Exception e) { showResult( "Error trying to set the items per page. Expected integer value but got " + stringItemsPerPage, PATH_SETTINGS, request, httpServletResponse); return; } loginInfo.style = request.getParameter(PARAM_STYLE); loginInfo.feedDateFormat = request.getParameter(PARAM_FEED_DATE_FORMAT); // ttt2 validate, better in JSP loginInfoDb.add(loginInfo); // httpServletResponse.sendRedirect(PATH_SETTINGS); showResult("Settings changed", "/", request, httpServletResponse); } private void handleUpdateFeedListPost(Request request, HttpServletResponse httpServletResponse) throws Exception { LOG.info("updating feed list"); // ttt2 implement httpServletResponse.sendRedirect(PATH_FEED_ADMIN); } private void handleAddFeedPost(Request request, HttpServletResponse httpServletResponse) throws Exception { LOG.info("adding feed"); User user = userHelpers.getUser(request); try { if (user == null) { LOG.error("User not found"); return; } String url = request.getParameter(PARAM_NEW_FEED_URL); // ttt1 add some validation; probably best try to actually get data, set the title, ... if (url == null || url.equals("")) { LOG.error("New feed not specified"); // ttt1 show some error return; } MessageDigest digest = MessageDigest.getInstance("MD5"); String feedId = PrintUtils.byteArrayAsUrlString(digest.digest(url.getBytes("UTF-8"))); feedId = feedId.substring(0, Config.getConfig().feedIdSize); Feed feed = feedDb.get(feedId); if (feed == null) { feed = new Feed(feedId, url); feedDb.add(feed); } if (user.feedIds.contains(feedId)) { LOG.error(String.format("Trying to add existing feed %s to user %s", feedId, user)); } else { user.feedIds.add(feedId); userDb.updateFeeds(user); } } finally { httpServletResponse.sendRedirect(PATH_FEED_ADMIN); } } private void handleRemoveFeedPost(Request request, HttpServletResponse httpServletResponse) throws Exception { LOG.info("removing feed"); User user = userHelpers.getUser(request); try { if (user == null) { LOG.error("User not found"); return; } String feedId = request.getParameter(PARAM_FEED_ID); LOG.info(String.format("Removing feed %s for user %s", feedId, user)); // ttt1 add some validation; probably best try to actually get data, set the title, ... if (feedId == null || feedId.equals("")) { LOG.error("feed not specified"); // ttt1 show some error return; } if (user.feedIds.remove( feedId)) { // ttt2 clean up the global feed table; that's probably better done if nobody // accesses a feed for 3 months or so userDb.updateFeeds(user); LOG.info(String.format("Removed feed %s for user %s", feedId, user)); } else { LOG.info(String.format("No feed found with ID %s for user %s", feedId, user)); } } finally { httpServletResponse.sendRedirect(PATH_FEED_ADMIN); } } private void handleLoginPost( Request request, HttpServletResponse httpServletResponse, boolean secured) throws Exception { String userId = request.getParameter(PARAM_USER_ID); String password = request.getParameter(PARAM_PASSWORD); String rememberAccountStr = request.getParameter(PARAM_REMEMBER_ACCOUNT); boolean rememberAccount = Boolean.parseBoolean(rememberAccountStr); LoginInfo.SessionInfo sessionInfo = UserHelpers.getSessionInfo(request); logOut(sessionInfo.browserId); User user = userDb.get(userId); if (user == null) { WebUtils.redirectToError("User " + userId + " not found", request, httpServletResponse); return; } if (!user.checkPassword(password)) { WebUtils.redirectToError("Invalid password", request, httpServletResponse); return; } if (!user.active) { WebUtils.redirectToError( "Account for User " + userId + " needs to be activated", request, httpServletResponse); return; } LOG.info("Logged in user " + userId); sessionInfo.sessionId = null; if (sessionInfo.browserId == null) { sessionInfo.browserId = getRandomId(); } else { for (LoginInfo loginInfo : loginInfoDb.getLoginsForBrowser(sessionInfo.browserId)) { if (userId.equals(loginInfo.userId)) { sessionInfo.sessionId = loginInfo.sessionId; break; } } } long expireOn = System.currentTimeMillis() + Config.getConfig().loginExpireInterval; if (sessionInfo.sessionId == null) { sessionInfo.sessionId = getRandomId(); Config config = Config.getConfig(); loginInfoDb.add( new LoginInfo( sessionInfo.browserId, sessionInfo.sessionId, userId, expireOn, rememberAccount, config.defaultStyle, config.defaultItemsPerPage, config.defaultFeedDateFormat)); LOG.info(String.format("Logging in in a new session. User: %s", user)); } else { loginInfoDb.updateExpireTime(sessionInfo.browserId, sessionInfo.sessionId, expireOn); LOG.info(String.format("Logging in in an existing session. User: %s", user)); } WebUtils.saveCookies( httpServletResponse, secured, sessionInfo.browserId, sessionInfo.sessionId); httpServletResponse.sendRedirect("/"); } private String getRandomId() { SecureRandom secureRandom = new SecureRandom(); return "" + secureRandom.nextLong(); } private void addLoginParams(Request request, LoginInfo loginInfo) { MultiMap<String> params = new MultiMap<>(); if (loginInfo != null && loginInfo.rememberAccount) { params.put(PARAM_USER_ID, loginInfo.userId); } request.setParameters(params); } private void logOut(String browserId) throws Exception { // ttt2 the right way to do it is to go through all the sessions of the current browser, which // would require a new field and a new index; // not sure if it's worth it, but this would work: A logs in, forgets to log out, B delets the // cookies, logs in, A sees B is logged in, then B // restores the cookies and uses A's account if (browserId == null) { return; } List<LoginInfo> loginInfos = loginInfoDb.getLoginsForBrowser(browserId); long expireTarget = System.currentTimeMillis() - Utils.ONE_DAY; for (LoginInfo loginInfo : loginInfos) { if (loginInfo.expiresOn <= expireTarget) { LOG.info(String.format("LoginInfo %s is enough in the past", loginInfo)); } else { LOG.info(String.format("Logging out: %s", loginInfo)); loginInfoDb.updateExpireTime(browserId, loginInfo.sessionId, expireTarget); } } } public static class FeedInfo { public String feedId; public int maxSeq; public FeedInfo(String feedId, int maxSeq) { this.feedId = feedId; this.maxSeq = maxSeq; } } // !!! IDEA reports this as unused, but it is called from JSP public static FeedInfo getFeedInfo(String feedPath) { if (feedPath.startsWith(PATH_FEED + "/")) { try { if (feedPath.endsWith("/")) { feedPath = feedPath.substring(0, feedPath.length() - 1); } int k = PATH_FEED.length() + 1; int p = feedPath.indexOf('/', k); return p >= 0 ? new FeedInfo(feedPath.substring(k, p), Integer.parseInt(feedPath.substring(p + 1))) : new FeedInfo(feedPath.substring(k), -1); } catch (Exception e) { LOG.error("Exception trying to parse the feed info", e); } } LOG.error("Invalid path from feed: " + feedPath); return new FeedInfo("INVALID", -1); } // !!! IDEA reports this as unused, but it is called from JSP public static String getStyle(LoginInfo loginInfo) { StringBuilder bld = new StringBuilder(); bld.append("<style media=\"screen\" type=\"text/css\">\n\n"); if (loginInfo == null) { bld.append(Config.getConfig().defaultStyle); } else { bld.append(loginInfo.style); // ttt3 detect broken styles and return default } bld.append("</style>\n"); return bld.toString(); } /* private void jspCodeCheck() throws Exception { Article.DB articleDb; Request request; String path = ""; String feedId = ReaderHandler.getFeedId(path); int maxSeq = ReaderHandler.getSeq(path); Feed.DB feedDb = (Feed.DB)request.getAttribute(ReaderHandler.VAR_FEED_DB); Feed feed = feedDb.get(feedId); if (feed == null) { out.println("Feed " + feedId + " not found"); } else { if (maxSeq == -1) { maxSeq = feed.maxSeq; } if (maxSeq < 0) { out.println("Feed " + feedId + " is empty"); } else { ++maxSeq; LoginInfo loginInfo = (LoginInfo)request.getAttribute(ReaderHandler.VAR_LOGIN_INFO); int minSeq = Math.max(maxSeq - loginInfo.itemsPerPage, 0); List<Article> articles = articleDb.get(feedId, minSeq, maxSeq); for (Article article : articles) { out.println("<a href=\"" + article.url + "\">" + article.title + "</a><br/>"); } } } } //*/ }
public ActionForward execute( ActionMapping actionMapping, ActionForm actionForm, HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse) throws Exception { LazyValidatorForm frm = (LazyValidatorForm) actionForm; LoginInfo loginInfo = (LoginInfo) httpServletRequest.getSession().getAttribute("loginInfo"); if (formCanceled(frm)) { return actionMapping.findForward(SUCCESS); } resetFocusControl(frm, CANCEL); ActionMessages msgs = new ActionMessages(); DocInvTransactionInfo inf = new DocInvTransactionInfo(); if (!formSaved(frm)) { setFormMode(frm, ((String) httpServletRequest.getParameter(BROWSE_ACTION))); setFormId(frm, (String) httpServletRequest.getParameter(BROWSE_ID)); try { short officeCode = loginInfo.getOfficeCode(); if (!loginInfo.userHasAccess(getFormId(frm), getFormMode(frm))) { if (isFormInModifyMode(frm) && loginInfo.userHasAccess(getFormId(frm), Constants.ActionType.ENQUERY)) { setFormMode(frm, Constants.ActionType.ENQUERY); } else { throw new Exception(INVALID_ACCESS); } } if (!isFormInAddMode(frm)) { String formKey = (String) httpServletRequest.getParameter(BROWSE_KEY); frm.set("formKey", formKey); StringTokenizer st = new StringTokenizer(formKey, Constants.DATA_SEPARATOR); officeCode = Short.parseShort(st.nextToken()); String eventType = st.nextToken(); String docType = st.nextToken(); String docSeri = st.nextToken().trim(); int docStartSrno = Integer.parseInt(st.nextToken()); inf = Inventory.getDetails(officeCode, eventType, docType, docSeri, docStartSrno); frm.set(ASSIGN_DATE, DateUtils.revFormatDate(inf.getEventDate())); frm.set(DOC_SERI, inf.getDocSeri()); frm.set(DOC_START_SRNO, Integer.toString(inf.getDocStartSrno())); frm.set(DOC_END_SRNO, Integer.toString(inf.getDocEndSrno())); } if (isFormInAddMode(frm)) { frm.set(ASSIGN_DATE, DateUtils.fDateRevFormatted()); resetFocusControl(frm, DOC_SERI); } } catch (Exception ex) { addError(msgs, ex.getMessage()); saveErrors(httpServletRequest, msgs); } return actionMapping.findForward(EDIT); } else { String assignDate = ((String) frm.get(ASSIGN_DATE)).trim(); if (Utils.isEmpty(assignDate)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "تاريخ تخصيص"); setFocusControl(frm, ASSIGN_DATE); } else if (!DateUtils.isValidRevFormattedFDate(assignDate) || Integer.parseInt(DateUtils.unformatRevFormattedFdate(assignDate)) > Integer.parseInt(DateUtils.fDate())) { addError(msgs, FIELD_INVALID, "تاريخ تخصيص"); setFocusControl(frm, ASSIGN_DATE); } else { inf.setEventDate(DateUtils.unformatRevFormattedFdate(assignDate)); } inf.setOfficeCode(loginInfo.getOfficeCode()); inf.setEventType(Constants.EventType.ASSIGN); String docSeri = Utils.charVal2((String) frm.get(DOC_SERI)); if (Utils.isEmpty(docSeri)) { addError(msgs, FIELD_INVALID, "سري كارتهاي شناسايي"); setFocusControl(frm, DOC_SERI); } else { inf.setDocSeri(docSeri); frm.set(DOC_SERI, docSeri); } String docStartSrno = ((String) frm.get(DOC_START_SRNO)).trim(); if (Utils.isEmpty(docStartSrno)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "سريال شروع"); setFocusControl(frm, DOC_START_SRNO); } String docEndSrno = ((String) frm.get(DOC_END_SRNO)).trim(); if (Utils.isEmpty(docEndSrno)) { addError(msgs, FIELD_CAN_NOT_BE_EMPTY, "سريال خاتمه"); setFocusControl(frm, DOC_END_SRNO); } else { if (!Utils.isValidNumber(docStartSrno, 6) || !Utils.isValidNumber(docEndSrno, 6)) { addError(msgs, FIELD_INVALID, "محدوده سريال كارت شناسايي"); setFocusControl(frm, DOC_START_SRNO); } else { if (Integer.parseInt(docStartSrno) > Integer.parseInt(docEndSrno)) { addError(msgs, FIELD_INVALID, "محدوده سريال كارت شناسايي"); setFocusControl(frm, DOC_START_SRNO); } else { inf.setDocStartSrno(Integer.parseInt(docStartSrno)); inf.setDocEndSrno(Integer.parseInt(docEndSrno)); } } } inf.setMamoorId("9991"); inf.setUserId(loginInfo.getUserId()); inf.setDocType(Constants.DocType.ID_CARD_CENTRAL_BANK); if (!msgs.isEmpty()) { saveErrors(httpServletRequest, msgs); return actionMapping.findForward(EDIT); } resetFocusControl(frm, CANCEL); // Save Data try { String eventErrorCode = null; if (isFormInDeleteMode(frm)) { eventErrorCode = Inventory.deleteAssign(inf); } else { eventErrorCode = Inventory.addAssign(inf); } if (!Utils.isEmpty(eventErrorCode)) { StringTokenizer st = new StringTokenizer(eventErrorCode, Constants.FIELD_SEPARATOR); int countErrorToken = st.countTokens(); for (int countError = 1; countError <= countErrorToken; countError++) { addError(msgs, st.nextToken()); } saveErrors(httpServletRequest, msgs); return actionMapping.findForward(EDIT); } else { httpServletRequest.setAttribute(BROWSE_KEY, inf.getKey()); return actionMapping.findForward(SUCCESS); } } catch (Exception ex) { resetFocusControl(frm, CANCEL); addError(msgs, ex.getMessage()); saveErrors(httpServletRequest, msgs); return actionMapping.findForward(EDIT); } } }