WebSVN – SmartDukaan – Diff – //trunk/profitmandi-fofo/src/main/java/com/spice/profitmandi/web/controller/AuthUserController.java

 package com.spice.profitmandi.web.controller;
 import com.spice.profitmandi.common.exception.ProfitMandiBusinessException;
 import com.spice.profitmandi.common.model.ProfitMandiConstants;
+import com.spice.profitmandi.common.util.ExcelUtils;
 import com.spice.profitmandi.dao.entity.auth.AuthUser;
+import com.spice.profitmandi.dao.model.PasswordOverrideRow;
 import com.spice.profitmandi.dao.entity.cs.PartnerPosition;
 import com.spice.profitmandi.dao.entity.cs.Position;
 import com.spice.profitmandi.dao.entity.dtr.Role;
 import com.spice.profitmandi.dao.entity.dtr.User;
 import com.spice.profitmandi.dao.entity.dtr.UserRole;
 import com.spice.profitmandi.dao.repository.cs.PartnerPositionRepository;
 import com.spice.profitmandi.dao.repository.cs.PositionRepository;
 import com.spice.profitmandi.dao.repository.dtr.RoleRepository;
 import com.spice.profitmandi.dao.repository.dtr.UserRepository;
 import com.spice.profitmandi.dao.repository.dtr.UserRoleRepository;
+import com.spice.profitmandi.dao.repository.devtools.PasswordOverrideRepository;
 import com.spice.profitmandi.service.AuthService;
 import com.spice.profitmandi.service.user.UserService;
 import com.spice.profitmandi.web.model.LoginDetails;
 import com.spice.profitmandi.web.util.CookiesProcessor;
 import com.spice.profitmandi.web.util.MVCResponseSender;
 import org.apache.logging.log4j.LogManager;
 import org.apache.logging.log4j.Logger;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.beans.factory.annotation.Qualifier;
 import org.springframework.beans.factory.annotation.Value;
+import org.springframework.core.io.InputStreamResource;
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
 import org.springframework.stereotype.Controller;
 import org.springframework.transaction.annotation.Transactional;
 import org.springframework.ui.Model;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RequestPart;
+import org.springframework.web.multipart.MultipartFile;
 import javax.servlet.http.HttpServletRequest;
 import java.time.LocalDateTime;
+import java.util.ArrayList;
 import java.util.HashMap;
 import java.util.List;
 import java.util.Map;
 import java.util.stream.Collectors;
 	private AuthService authService;
 	@Autowired
 	private UserService userService;
+	@Autowired
+	private PasswordOverrideRepository passwordOverrideRepository;
 	@Value("${prod}")
 	private boolean isProd;
 	@Autowired
 	private AuthRepository authRepository;
 			throws Exception {
 		if (isProd) {
 			throw new ProfitMandiBusinessException("Access Denied", "Environment",
 					"Password override is disabled in production");
+		}
+		LoginDetails loginDetails = cookiesProcessor.getCookiesObject(request);
+		applyOverride(type, retailerId, identifier, newPassword, loginDetails.getEmailId());
+		model.addAttribute("response1", mvcResponseSender.createResponseString(true));
+		return "response";
+	}
+	// Reset one target's live password and record it in devtools.password_override.
+	private void applyOverride(String type, int retailerId, String identifier, String newPassword, String setBy)
+			throws ProfitMandiBusinessException {
-		if (newPassword.trim().isEmpty()) {
+		if (newPassword == null || newPassword.trim().isEmpty()) {
 			throw new ProfitMandiBusinessException("Password", "newPassword", "New password cannot be blank");
+		}
-		LoginDetails loginDetails = cookiesProcessor.getCookiesObject(request);
 		if ("PARTNER".equalsIgnoreCase(type)) {
 			if (retailerId <= 0) {
 				throw new ProfitMandiBusinessException("Partner", "retailerId", "Please select a partner");
+			}
-			userService.resetPasswordById(retailerId, newPassword);
+			String stored = userService.resetPasswordById(retailerId, newPassword);
+			passwordOverrideRepository.upsert("PARTNER", 0, retailerId,
+					identifier == null ? "" : identifier.trim(), stored, newPassword, setBy);
-			LOGGER.info("Password override for partner retailerId={} by {}", retailerId, loginDetails.getEmailId());
+			LOGGER.info("Password override for partner retailerId={} by {}", retailerId, setBy);
 		} else {
-			if (identifier.trim().isEmpty()) {
+			if (identifier == null || identifier.trim().isEmpty()) {
 				throw new ProfitMandiBusinessException("Auth User", "identifier", "Please enter an email or mobile");
+			}
 			authService.resetPassword(identifier.trim(), newPassword);
+			AuthUser authUser = authRepository.selectByEmailOrMobile(identifier.trim());
+			passwordOverrideRepository.upsert("AUTH_USER", authUser.getId(), 0, identifier.trim(),
+					authUser.getPassword(), newPassword, setBy);
-			LOGGER.info("Password override for authUser={} by {}", identifier.trim(), loginDetails.getEmailId());
+			LOGGER.info("Password override for authUser={} by {}", identifier.trim(), setBy);
+		}
+	}
+	@GetMapping(value = "/passwordOverride/download")
+	public ResponseEntity<?> downloadPasswordOverrides(HttpServletRequest request) throws Exception {
+		if (isProd) {
+			throw new ProfitMandiBusinessException("Access Denied", "Environment",
+					"Password override is disabled in production");
+		}
+		java.io.ByteArrayOutputStream out = new java.io.ByteArrayOutputStream();
+		ExcelUtils.writePasswordOverrides(passwordOverrideRepository.selectAll(), out);
+		byte[] bytes = out.toByteArray();
+		HttpHeaders headers = new HttpHeaders();
+		headers.set("Content-Type", "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet");
+		headers.set("Content-disposition", "attachment; filename=password-overrides.xlsx");
+		headers.setContentLength(bytes.length);
+		return new ResponseEntity<>(new InputStreamResource(new java.io.ByteArrayInputStream(bytes)), headers,
+				HttpStatus.OK);
+	}
+	@PostMapping(value = "/passwordOverride/upload")
+	public String uploadPasswordOverrides(HttpServletRequest request,
+			@RequestPart("file") MultipartFile file, Model model) throws Exception {
+		if (isProd) {
+			throw new ProfitMandiBusinessException("Access Denied", "Environment",
+					"Password override is disabled in production");
+		}
+		LoginDetails loginDetails = cookiesProcessor.getCookiesObject(request);
+		List<PasswordOverrideRow> rows = ExcelUtils.parsePasswordOverrides(file.getInputStream());
+		int applied = 0;
+		List<String> failures = new ArrayList<>();
+		for (int i = 0; i < rows.size(); i++) {
+			PasswordOverrideRow r = rows.get(i);
+			if (r.getCleartextPassword() == null || r.getCleartextPassword().trim().isEmpty()) {
+				continue; // blank password = leave this target unchanged
+			}
+			try {
+				int retailerId = "PARTNER".equalsIgnoreCase(r.getType()) ? r.getRetailerId() : 0;
+				applyOverride(r.getType(), retailerId, r.getIdentifier(), r.getCleartextPassword(),
+						loginDetails.getEmailId());
+				applied++;
+			} catch (Exception e) {
+				failures.add("Row " + (i + 2) + " (" + r.getType() + " "
+						+ (r.getIdentifier() == null ? r.getRetailerId() : r.getIdentifier()) + "): " + e.getMessage());
+			}
+		}
+		LOGGER.info("Bulk password override by {}: {} applied, {} failed", loginDetails.getEmailId(), applied,
+				failures.size());
-		model.addAttribute("response1", mvcResponseSender.createResponseString(true));
+		model.addAttribute("response1", mvcResponseSender.createResponseString(
+				"Applied " + applied + " of " + rows.size() + " row(s)."
+						+ (failures.isEmpty() ? "" : " Failures: " + String.join("; ", failures))));
 		return "response";
+	}
 	@GetMapping(value = "/getPaginatedAuthUser")
 	public String getPaginatedAuthUser(HttpServletRequest request,

Subversion Repositories SmartDukaan

(root)//trunk/profitmandi-fofo/src/main/java/com/spice/profitmandi/web/controller/AuthUserController.java – Rev 37105 → 37127