153 lines
6.0 KiB
JavaScript
153 lines
6.0 KiB
JavaScript
// The contents of this file are subject to the Mozilla Public License Version 1.1
|
|
// (the "License"); you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at <http://www.mozilla.org/MPL/>.
|
|
//
|
|
// Software distributed under the License is distributed on an "AS IS" basis, WITHOUT
|
|
// WARRANTY OF ANY KIND, either express or implied. See the License for the specific
|
|
// language governing rights and limitations under the License.
|
|
//
|
|
// The Original Code is the Venice Web Communities System.
|
|
//
|
|
// The Initial Developer of the Original Code is Eric J. Bowersox <erbo@silcom.com>,
|
|
// for Silverwrist Design Studios. Portions created by Eric J. Bowersox are
|
|
// Copyright (C) 2003 Eric J. Bowersox/Silverwrist Design Studios. All Rights Reserved.
|
|
//
|
|
// Contributor(s):
|
|
|
|
importClass(Packages.com.silverwrist.dynamo.Namespaces);
|
|
importPackage(Packages.com.silverwrist.dynamo.iface);
|
|
importPackage(Packages.com.silverwrist.dynamo.mail);
|
|
importPackage(Packages.com.silverwrist.dynamo.security);
|
|
importPackage(Packages.com.silverwrist.dynamo.util);
|
|
importClass(Packages.com.silverwrist.venice.VeniceNamespaces);
|
|
|
|
req = bsf.lookupBean("request");
|
|
req_help = bsf.lookupBean("request_help");
|
|
target = req_help.getParameterString("tgt");
|
|
if (target==null)
|
|
target = "top.js.vs";
|
|
vlib.setOnError(req,target);
|
|
|
|
// Check the user account.
|
|
user = vlib.getUser(req);
|
|
if (user.isAnonymous())
|
|
{ // user not logged in, must log in first - so bounce us to the login dialog
|
|
new_target = "verify_email.js.vs?tgt=" + stringutils.encodeURL(target);
|
|
dynamo.scriptReturn(new Redirect("SERVLET","login.js.vs?tgt=" + stringutils.encodeURL(new_target)));
|
|
|
|
} // end if
|
|
|
|
// If user is already verified, this is a no-op.
|
|
if (!PropertyUtils.hasProperty(user,VeniceNamespaces.USER_SETTINGS_NAMESPACE,"confirmation.number"))
|
|
dynamo.scriptReturn(new Redirect("SERVLET",target));
|
|
confnum = cast.toInteger(user.getObject(VeniceNamespaces.USER_SETTINGS_NAMESPACE,"confirmation.number"));
|
|
|
|
// Load the verification dialog.
|
|
loader = cast.queryDialogLoader(req);
|
|
dlg = loader.loadDialogResource("verify.dlg.xml");
|
|
|
|
if (req_help.isVerb("GET"))
|
|
{ // fill in the dialog for a GET and return it
|
|
dlg.setValue("tgt",target);
|
|
vlib.setLocation(req,target);
|
|
vlib.setDisplayLogin(req,false);
|
|
dynamo.scriptReturn(new FrameDialog(dlg));
|
|
|
|
} // end if
|
|
|
|
// Everything that follows is for a POST operation
|
|
op = dlg.getClickedButton(req) + "";
|
|
if (op=="cancel") // user cancelled verification - bounce us back to the target
|
|
dynamo.scriptReturn(new Redirect("SERVLET",target));
|
|
else if (op=="send.again")
|
|
{ // generate a new confirmation number before we re-send the message
|
|
confnum = vlib.randomConfirmationNumber();
|
|
user.setObject(user,VeniceNamespaces.USER_SETTINGS_NAMESPACE,"confirmation.number",
|
|
cast.toIntegerObject(confnum));
|
|
|
|
// send the verification E-mail message again
|
|
mailprov = cast.queryMailMessageProvider(req);
|
|
msg = mailprov.createSystemMessage(req);
|
|
msg.addRecipient(MailMessage.RECIP_TO,user.getEMailAddress());
|
|
globals = vcast.getGlobalPropertiesStore(req);
|
|
msg.setSubject(globals.getObject(VeniceNamespaces.MAIL_MESSAGES_NAMESPACE,
|
|
"confirm.message.title").toString());
|
|
blocks = vcast.getGlobalBlocksStore(req);
|
|
msg.setText(blocks.getObject(VeniceNamespaces.MAIL_MESSAGES_NAMESPACE,"confirm.message").toString());
|
|
msg.setVariable("username",user.getName());
|
|
msg.setVariable("confnum",cast.toIntegerObject(confnum));
|
|
msg.send();
|
|
|
|
// Record an audit message.
|
|
audit.write(req,user,VeniceNamespaces.USER_EVENT_NAMESPACE,"resend.confirm.email",
|
|
user.getEMailAddress());
|
|
|
|
// bounce us back to the dialog
|
|
dlg.setErrorMessage("New confirmation message sent.");
|
|
dlg.setValue("tgt",target);
|
|
vlib.setLocation(req,target);
|
|
vlib.setDisplayLogin(req,false);
|
|
dynamo.scriptReturn(new FrameDialog(dlg));
|
|
|
|
} // end else if
|
|
|
|
dlg.load(req); // load dialog contents
|
|
try
|
|
{ // validate the dialog contents
|
|
dlg.validate(req);
|
|
|
|
} // end try
|
|
catch (e)
|
|
{ // the validation failed - throw an error message
|
|
logger.error("Verify E-Mail dialog failed validation",e);
|
|
dlg.setErrorMessage(dynamo.exceptionMessage(e) + " Please try again.");
|
|
dlg.setValue("num",null);
|
|
vlib.setLocation(req,target);
|
|
vlib.setDisplayLogin(req,false);
|
|
dynamo.scriptReturn(new FrameDialog(dlg));
|
|
|
|
} // end catch
|
|
|
|
if (op=="ok")
|
|
{ // the button has been pressed - is the confirmation number correct?
|
|
if (!(dlg.containsValue("num")))
|
|
{ // no confirmation number entered!!!
|
|
dlg.setErrorMessage("No confirmation number entered. Please try again.");
|
|
vlib.setLocation(req,target);
|
|
vlib.setDisplayLogin(req,false);
|
|
dynamo.scriptReturn(new FrameDialog(dlg));
|
|
|
|
} // end if
|
|
|
|
new_num = cast.toInteger(dlg.getValue("num"));
|
|
if (new_num!=confnum)
|
|
{ // confirmation numbers don't match - bogus!
|
|
audit.write(req,user,VeniceNamespaces.USER_EVENT_NAMESPACE,"verify.fail");
|
|
dlg.setErrorMessage("Sorry, the confirmation number doesn't match. Please try again.");
|
|
dlg.setValue("num",null);
|
|
vlib.setLocation(req,target);
|
|
vlib.setDisplayLogin(req,false);
|
|
dynamo.scriptReturn(new FrameDialog(dlg));
|
|
|
|
} // end if
|
|
|
|
// we're verified - remove our confirmation number attribute
|
|
audit.write(req,user,VeniceNamespaces.USER_EVENT_NAMESPACE,"verify.ok");
|
|
user.removeObject(user,VeniceNamespaces.USER_SETTINGS_NAMESPACE,"confirmation.number");
|
|
|
|
// add us to the "verified users" group
|
|
srm = cast.querySecurityReferenceMonitor(req_help.getRequestObject(Namespaces.DYNAMO_OBJECT_NAMESPACE,
|
|
"srm"));
|
|
srm.getVerifiedUsersGroup().addMember(user);
|
|
|
|
// and that does it - bounce us on to whereever we were going
|
|
dynamo.scriptOutput(new Redirect("SERVLET",target));
|
|
|
|
} // end if
|
|
else
|
|
{ // unknown command button pressed!
|
|
logger.error("no known button click on POST to verify_email.js");
|
|
dynamo.scriptOutput(new ErrorBox("Internal Error","Unknown command button pressed","SERVLET",target));
|
|
|
|
} // end else
|