Subversion Repositories SmartDukaan

package com.spice.profitmandi.service;

import java.nio.charset.StandardCharsets;

import org.apache.commons.lang.RandomStringUtils;

import org.apache.logging.log4j.LogManager;

import org.apache.logging.log4j.Logger;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.mail.javamail.JavaMailSender;

import org.springframework.stereotype.Component;

import com.google.common.hash.Hashing;

import com.spice.profitmandi.common.exception.ProfitMandiBusinessException;

import com.spice.profitmandi.common.util.Utils;

import com.spice.profitmandi.dao.entity.auth.AuthUser;

import com.spice.profitmandi.dao.repository.auth.AuthRepository;

@Component

public class AuthServiceImpl implements AuthService {

	// private static final String RESET_PASSWORD_BODY = "Dear %s, your password has

	// been reset. Please click this <a href=\"%s\">link</a> to reset your

	// password.\n\nRegards\nSmartdukaan";

	private static final String RESET_PASSWORD_BODY = "Dear %s, your password has been reset to %s. Regards\nSmartdukaan";

	private static final String RESET_PASSWORD_SUBJECT = "Password Reset request";

	private static final Logger LOGGER = LogManager.getLogger(AuthServiceImpl.class);

	@Autowired

	AuthRepository authRepository;

	@Autowired

	JavaMailSender mailSender;

	private String getHash256(String originalString) {

		return Hashing.sha256().hashString(originalString, StandardCharsets.UTF_8).toString();

	}

	@Override

	public boolean authenticate(String emailOrMobile, String password) {

		return authRepository.authenticate(emailOrMobile, getHash256(password));

	}

	@Override

	public void resetPassword(String emailOrMobile) throws ProfitMandiBusinessException {

		AuthUser authUser = authRepository.selectByEmailOrMobile(emailOrMobile);

		String password = getRandomString();

		try {

			Utils.sendMailWithAttachments(mailSender, authUser.getEmailId(), null, RESET_PASSWORD_SUBJECT,

					String.format(RESET_PASSWORD_BODY, authUser.getFirstName(), password), null);

		} catch (Exception e) {

			throw new ProfitMandiBusinessException("Password Reset Email", emailOrMobile,

					"Could not send password reset mail. Password Could not be reset");

		}

		authUser.setPassword(getHash256(password));

		authRepository.persist(authUser);

	}

	@Override

	public void changePassword(String emailOrMobile, String oldPassword, String newPassword)

			throws ProfitMandiBusinessException {

		if (authRepository.authenticate(emailOrMobile, getHash256(oldPassword))) {

			AuthUser authUser = authRepository.selectByEmailOrMobile(emailOrMobile);

			authUser.setPassword(getHash256(newPassword));

			authRepository.persist(authUser);

		} else {

			throw new ProfitMandiBusinessException("Authentication", "Credentials", "Invalid email/mobile or password");

		}

	}

	@Override

	public void addAuthUser(AuthUser authUser) throws ProfitMandiBusinessException {

		try {

			authRepository.selectByEmailOrMobile(authUser.getEmailId());

		} catch(ProfitMandiBusinessException pbse) {

			try {

				authRepository.selectByEmailOrMobile(authUser.getMobileNumber());

			} catch(ProfitMandiBusinessException e) {

				authRepository.persist(authUser);

				this.resetPassword(authUser.getEmailId());

				return;

			}

			throw new ProfitMandiBusinessException("Mobile", authUser.getMobileNumber(), "Mobile number already exist");

		}	

		throw new ProfitMandiBusinessException("Email", authUser.getEmailId(), "Email Id already exist");

	}

	private String getRandomString() {

		int length = 10;

		boolean useLetters = true;

		boolean useNumbers = false;

		String generatedString = RandomStringUtils.random(length, useLetters, useNumbers);

		return generatedString;

	}

}