Z-Archive » Maybank Projects » M2U UPASS Project

^\.project$

syntax: regexp

^\.externalToolBuilders$

			type="com.ib.ibss.controller.actions.ss101_access.IBSSPortalAccessAction" validate="false">

			type="com.ib.ibss.controller.actions.ss101_access.IBSSPortalLoginAction" validate="false">

		<action name="ibssLoginForm" path="/ss101/notifAlert" scope="session"

			type="com.ib.ibss.controller.actions.ss101_access.IBSSNotificationAlertAction" validate="false">

		<action name="ibssLoginForm" path="/ss101/forceChangePassword" scope="session"

			type="com.ib.ibss.controller.actions.ss101_access.IBSSForceChangePasswordAction" validate="false">

		<action name="ibssLoginForm" path="/ss101/changeRootPassword" scope="request"

			type="com.ib.ibss.controller.actions.ss101_access.IBSSChangeRootPasswordAction" validate="false">

			<forward name="start" path=".ibss.changeRootPassword" />

			<forward name="success" path=".ibss.changeRootPassword.success" />

			<forward name="failure" path=".ibss.changeRootPassword" />

		</action>

		<action forward=".ibss.main.page" name="ibssLoginForm" path="/ss101/loginProceed" scope="session" validate="false" />

			type="com.ib.ibss.controller.actions.ss101_access.IBSSPortalLogoutAction" validate="false">

		<action forward=".ibss.main.page" name="ibssLoginForm" path="/ss101/MainProfile" scope="session" validate="false" />

	<definition name=".ibss.changeRootPassword" extends=".ibss.user.login.template">

		<put name="body" value="/jsp/ss101_access/ibssChangeRootPassword.jsp" />

	</definition>

	<definition name=".ibss.changeRootPassword.success" extends=".ibss.user.login.template">

		<put name="body" value="/jsp/ss101_access/ibssChangeRootPassword_success.jsp" />

	</definition>

<%@ taglib uri="/WEB-INF/tld/struts-html-el" prefix="htmlEL" %>

<%@ taglib uri="/WEB-INF/tld/struts-bean" prefix="bean" %>

<%@ taglib uri="/WEB-INF/tld/struts-logic" prefix="logic" %>

<%@ taglib uri="/WEB-INF/tld/struts-logic-el" prefix="logicEL" %>

<%@ taglib uri="/WEB-INF/tld/c" prefix="c" %>

<script type="text/javascript" src="../js/passwordmeter.js"></script>

<h3><bean:message key="general.rootPassword.update"/></h3>

<br/>

<table id="errorTable">

<tr>

	<td>

		<span id="serverSideError" class="error"><jsp:include flush="true" page="/jsp/errorHandler.jsp"></jsp:include></span>

	</td>

</tr>

</table>

<htmlEL:form action="/ss101/changeRootPassword.do">

<table class="tabularConfirm" width="517" height="97" border="1">

  <tr>

    <td width="71">&nbsp;</td>

    <td width="138">&nbsp;</td>

    <td width="60">&nbsp;</td>

    <td width="50%">&nbsp;</td>

    <td width="48">&nbsp;</td>

  </tr>

  <tr>

    <td>&nbsp;</td>

    <td width="138"><bean:message key="login.oldpassword"/>:</td>

    <td width="60"><htmlEL:password autocomplete="off" property="oldPassword" name="ibssLoginForm" maxlength="12"/></td>

    <td>&nbsp;</td>

    <td width="48">&nbsp;</td>

  </tr>

  <tr>

    <td>&nbsp;</td>

    <td><bean:message key="login.newpassword"/>:</td>

    <td><htmlEL:password autocomplete="off" property="newPassword" name="ibssLoginForm" 

    onkeyup="testPassword(document.forms.ibssLoginForm.newPassword.value)" /></td>

    <td>&nbsp;<span style="font-size: 11px;">Password Strength : </span><span id="passCheck" class="textColor0"></span><br>

    <span id="passwordStrength" class="strength0"></span></td>

    <td>&nbsp;</td>

  </tr>

  <tr>

    <td>&nbsp;</td>

    <td><bean:message key="login.confirmpassword"/>:</td>

    <td><htmlEL:password autocomplete="off" property="confirmPassword" name="ibssLoginForm" /></td>

    <td>&nbsp;</td>

    <td>&nbsp;</td>

  </tr>

  <tr>

    <td>&nbsp;</td>

    <td>&nbsp;</td>

    <td>&nbsp;</td>

    <td>&nbsp;</td>

    <td>&nbsp;</td>

  </tr>

  <tr>

    <td>&nbsp;</td>

    <td>&nbsp;</td>

    <td>&nbsp;</td>

    <td>&nbsp;</td>

    <td>

        <htmlEL:submit property="action" styleClass="button" onclick="overlay();">

			<bean:message key="general.button.change"/>						

		</htmlEL:submit>

	</td>

  </tr>

</table>

</htmlEL:form>

<style>

#passwordStrength

{

	height:3px;

	display:block;

	float:left;

}

</style>

<%@ taglib uri="/WEB-INF/tld/struts-html-el" prefix="htmlEL" %>

<%@ taglib uri="/WEB-INF/tld/struts-bean" prefix="bean" %>

<%@ taglib uri="/WEB-INF/tld/struts-logic" prefix="logic" %>

<%@ taglib uri="/WEB-INF/tld/struts-logic-el" prefix="logicEL" %>

<%@ taglib uri="/WEB-INF/tld/c" prefix="c" %>

<h3><bean:message key="general.rootPassword.update.result"/></h3>

<br/>

<table class="tabularForm" width="517" border="1">

  <tr>

    <td width="101">&nbsp;</td>

    <td class="success" width="277"><strong><bean:message key="general.status.successful"/></strong></td>

    <td width="150">&nbsp;</td>

    <td width="64">&nbsp;</td>

  </tr>

  <tr>

    <td height="28">&nbsp;</td>

    <td colspan="2"><bean:message key="general.changedpassword"/></td>

    <td>&nbsp;</td>

    <td>&nbsp;</td>

  </tr>  

</table>

general.rootPassword.update=Root Password Update

general.rootPassword.update.result=Root Password Update - Result

		<priority value="info" />

	public static final String PRELOAD_SETTINGS = "AppConfig";

/**

 * Copyright (M) 2009 Penril Datability (M) Sdn Bhd All rights reserved.

 *

 * This software is copyrighted. Under the copyright laws, this software

 * may not be copied, in whole or in part, without prior written consent

 * of Penril Datability (M) Sdn Bhd or its assignees. This software is

 * provided under the terms of a license between Penril Datability (M)

 * Sdn Bhd and the recipient, and its use is subject to the terms of that

 * license.

 */

package com.ib.ibss.controller.actions.ss101_access;

import java.util.Map.Entry;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import org.apache.struts.action.ActionErrors;

import org.apache.struts.action.ActionForm;

import org.apache.struts.action.ActionForward;

import org.apache.struts.action.ActionMapping;

import com.ib.ibss.common.constant.JSPValidator;

import com.ib.ibss.common.utils.IBSSNavigationUtil;

import com.ib.ibss.enterprise.services.ss101_access.IBSSChangeRootPasswordServices;

import com.ib.ibss.error.exception.IBSSGenericException;

import com.ib.ibss.struts.utils.IBSSControllerAction;

import com.ib.ibss.struts.utils.IBSSDynaBean;

import com.ib.ibss.struts.utils.IBSSDynaBeanManager;

import com.ib.ibss.struts.utils.IBSSSessionObjects;

/**

 * This is the Action controller class to go to load home screen after successful login

 */

public class IBSSChangeRootPasswordAction extends IBSSControllerAction {

	/**

	 * @param mapping

	 *            The ActionMapping used to select this instance

	 * @param form

	 *            The optional ActionForm bean for this request which is from form-bean.xml(if any)

	 * @param request

	 *            The HTTP request we are processing

	 * @param response

	 *            The HTTP response we are creating

	 * @return The requested ActionForward object

	 * @throws Exception

	 *             if the application business logic throws an exception

	 * 

	 * @see com.ib.ibss.struts.utils.IBSSControllerAction#execute(org.apache.struts.action.ActionMapping,

	 *      org.apache.struts.action.ActionForm, javax.servlet.http.HttpServletRequest,

	 *      javax.servlet.http.HttpServletResponse)

	 */

	public ActionForward execute(

			ActionMapping mapping, ActionForm form, HttpServletRequest request, HttpServletResponse response)

			throws Exception {

		noErrorHandling(request, mapping);

		final boolean hasRequestParams = request.getParameterMap().size() > 0;

		ActionErrors errors = null;

		if (hasRequestParams)

			errors = form.validate(createNewActionMapping(

					mapping, JSPValidator.FORCE_RESET_PASS_VALIDATION), request);

		if (errors != null && !errors.isEmpty()) {

			errorHandling(request, mapping, errors);

		} else if (hasRequestParams) {

			IBSSDynaBean dynaBean = IBSSDynaBeanManager.createIBSSDynaBean(form, mapping);

			IBSSSessionObjects sessionObjects = new IBSSSessionObjects(request);

			try {

				IBSSChangeRootPasswordServices services = new IBSSChangeRootPasswordServices(sessionObjects);

				services.setIBSSDynaBean(dynaBean);

				services.saveNewRootPassword();

			} catch (IBSSGenericException e) {

				errorHandling(request, mapping, e);

			}

		} else {

			setForwardPage("start");

		}

		return super.execute(mapping, form, request, response);

	}

}

/**

 * Copyright (M) 2009 Penril Datability (M) Sdn Bhd All rights reserved.

 *

 * This software is copyrighted. Under the copyright laws, this software

 * may not be copied, in whole or in part, without prior written consent

 * of Penril Datability (M) Sdn Bhd or its assignees. This software is

 * provided under the terms of a license between Penril Datability (M)

 * Sdn Bhd and the recipient, and its use is subject to the terms of that

 * license.

 */

package com.ib.ibss.enterprise.services.ss101_access;

import my.com.upass.ConfigBean;

import net.penril.ibss.audit.log.AuditLogConstants;

import net.penril.ibss.audit.log.USER_ACTIVITY_TYTPE;

import com.ib.ibss.common.constant.ExceptionErrors;

import com.ib.ibss.common.utils.IBSSLogger;

import com.ib.ibss.enterprise.services.IBSSEnterpriseServicesWorkspace;

import com.ib.ibss.enterprise.services.StatusConstants;

import com.ib.ibss.error.exception.IBSSBusinessException;

import com.ib.ibss.error.exception.IBSSGenericException;

import com.ib.ibss.error.handler.IBSSErrorHandler;

import com.ib.ibss.struts.utils.IBSSSessionObjects;

/**

 * Get necessary details information to perform force change password if needed

 */

public class IBSSChangeRootPasswordServices extends IBSSEnterpriseServicesWorkspace {

	/**

	 * Class constructor specifying session object.

	 * 

	 * @param sessionObject

	 *            Session object contains all information stored in HTTP session.

	 */

	public IBSSChangeRootPasswordServices(IBSSSessionObjects sessionObject) {

		super(sessionObject);

	}

	public void saveNewRootPassword() throws IBSSGenericException {

		IBSSLogger.debug(getClass(), "Entering saveNewRootPassword");

		String oldPassword = null;

		String newPassword = null;

		String confirmPassword = null;

		int errorCode = 0;

		long status = AuditLogConstants.UNSUCCESSFUL;

		try {

			oldPassword = getBeanMessage(IBSSAccessConstants.OLD_PASSWORD);

			newPassword = getBeanMessage(IBSSAccessConstants.NEW_PASSWORD);

			confirmPassword = getBeanMessage(IBSSAccessConstants.CONFIRM_PASSWORD);

			if (newPassword.equals(confirmPassword)) {

				errorCode = getUPassService().changeRootPassword(newPassword, oldPassword);

				if (errorCode != StatusConstants.ERR_SUCCESS) {

					if (errorCode == StatusConstants.ERR_INVALID_CREDENTIAL) {

						throw IBSSErrorHandler.createBusinessException(IBSSBusinessException.LOGIN,

								ExceptionErrors.LOGIN_INVALID_EXISTING_PWD);

					} else if (errorCode == StatusConstants.ERR_PASSWORD_CHANGE_INTERVAL) {

						final int changePasswordInterval = new ConfigBean().getChangePasswordInterval();

						throw IBSSErrorHandler.createBusinessException(IBSSBusinessException.UPASS,

								ExceptionErrors.ERR_PASSWORD_CHANGE_INTERVAL,

								new String[] { String.valueOf(changePasswordInterval) });

					} else {

						throw IBSSErrorHandler.createBusinessException(

								IBSSBusinessException.LOGIN, String.valueOf(errorCode));

					}

				}

			} else {

				throw IBSSErrorHandler.createBusinessException(

						IBSSBusinessException.LOGIN, ExceptionErrors.LOGIN_INVALID_EXISTING_PWD);

			}

			/* Logging section */

			status = AuditLogConstants.SUCCESSFUL;

		} catch (Exception e) {

			IBSSErrorHandler.handleServiceError(e, getClass());

		} finally {

			try {

				getAuditLogDAO().logActivity(

						USER_ACTIVITY_TYTPE.CHANGE_PASSWORD.getID(),

						"A change request recieved for the root password",

						status, "Accessed 'Change Root Password' form from IP: "

								+ getIBSSessionObjects().getRemoteIPAddress(),

						"root");

			} catch (Exception e) {

				IBSSErrorHandler.handleServiceError(e, getClass());

			}

		}

		IBSSLogger.debug(getClass(), "Exiting saveNewRootPassword");

	}

}

	int changeRootPassword(String newPassword, String oldPassword);

import java.io.File;

import java.io.FileWriter;

import java.io.IOException;

import java.io.InputStream;

import java.net.URISyntaxException;

import java.net.URL;

import java.util.Properties;

import my.com.upass.Constants;

import com.ib.common.utils.IBLoggerInf;

import com.ib.common.utils.ResourcesUtils;

	@Override

	public int changeRootPassword(String newPassword, String oldPassword) {

		final int returnCode = upassController.SP_ChangeStaticPassword(

				adminUserAlias,

				inMigrationPeriod ? newPassword : sha256(newPassword),

				inMigrationPeriod ? oldPassword : sha256(oldPassword));

		if (returnCode == Constants.ERR_SUCCESS) {

			final String propsLocator = "/" + SettingsUtils.PRELOAD_SETTINGS + ".properties";

			final URL settingsUrl = getClass().getResource(propsLocator);

			Properties props = new Properties();

			InputStream propsStream = ResourcesUtils.class.getClassLoader()

					.getResourceAsStream(propsLocator);

			try {

				props.load(propsStream);

				final String newPasswordBase64 = Base64.encodeBase64String(newPassword.getBytes());

				props.setProperty(StatusConstants.APPLICATION_ADMIN_PASS, newPasswordBase64);

				final File propsFile = new File(settingsUrl.toURI());

				props.store(new FileWriter(propsFile),

						"Updated programmatically by UPassServiceImpl,"

								+ " as a result of root password modification.");

			} catch (IOException e) {

				IBLoggerInf.getLogger().error(e.getMessage(), e);

			} catch (URISyntaxException e) {

				IBLoggerInf.getLogger().error(e.getMessage(), e);

			} finally {

				try {

					propsStream.close();

				} catch (IOException e) {

					IBLoggerInf.getLogger().error(e.getMessage(), e);

				}

			}

		}

		return returnCode;

	}

	@Override

	public int changeRootPassword(String newPassword, String oldPassword) {

		// TODO Auto-generated method stub

		return 0;

	}