107 lines
3.6 KiB
C++
107 lines
3.6 KiB
C++
/*
|
|
* Copyright (C) 2021 Emeric Poupon
|
|
*
|
|
* This file is part of LMS.
|
|
*
|
|
* LMS is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* LMS is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with LMS. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include "PasswordValidator.hpp"
|
|
|
|
#include <Wt/WEnvironment.h>
|
|
|
|
#include "lmscore/auth/IPasswordService.hpp"
|
|
#include "utils/Service.hpp"
|
|
#include "LmsApplication.hpp"
|
|
|
|
namespace UserInterface
|
|
{
|
|
class PasswordStrengthValidator : public Wt::WValidator
|
|
{
|
|
public:
|
|
PasswordStrengthValidator(PasswordValidationContextGetFunc passwordValidationContextGetFunc)
|
|
: _passwordValidationContextGetFunc {std::move(passwordValidationContextGetFunc)}
|
|
{}
|
|
|
|
private:
|
|
Wt::WValidator::Result validate(const Wt::WString& input) const override;
|
|
|
|
PasswordValidationContextGetFunc _passwordValidationContextGetFunc;
|
|
};
|
|
|
|
Wt::WValidator::Result
|
|
PasswordStrengthValidator::validate(const Wt::WString& input) const
|
|
{
|
|
if (input.empty())
|
|
return Wt::WValidator::validate(input);
|
|
|
|
const ::Auth::PasswordValidationContext context {_passwordValidationContextGetFunc()};
|
|
|
|
switch (Service<::Auth::IPasswordService>::get()->checkPasswordAcceptability(input.toUTF8(), context))
|
|
{
|
|
case ::Auth::IPasswordService::PasswordAcceptabilityResult::OK:
|
|
return Wt::WValidator::Result {Wt::ValidationState::Valid};
|
|
case ::Auth::IPasswordService::PasswordAcceptabilityResult::TooWeak:
|
|
return Wt::WValidator::Result {Wt::ValidationState::Invalid, Wt::WString::tr("Lms.password-too-weak")};
|
|
case ::Auth::IPasswordService::PasswordAcceptabilityResult::MustMatchLoginName:
|
|
return Wt::WValidator::Result {Wt::ValidationState::Invalid, Wt::WString::tr("Lms.password-must-match-login")};
|
|
}
|
|
|
|
throw LmsException {"internal error"};
|
|
}
|
|
|
|
std::shared_ptr<Wt::WValidator>
|
|
createPasswordStrengthValidator(PasswordValidationContextGetFunc passwordValidationContextGetFunc)
|
|
{
|
|
return std::make_shared<PasswordStrengthValidator>(std::move(passwordValidationContextGetFunc));
|
|
}
|
|
|
|
class PasswordCheckValidator : public Wt::WValidator
|
|
{
|
|
public:
|
|
Wt::WValidator::Result validate(const Wt::WString& input) const override;
|
|
};
|
|
|
|
Wt::WValidator::Result
|
|
PasswordCheckValidator::validate(const Wt::WString& input) const
|
|
{
|
|
if (input.empty())
|
|
return Wt::WValidator::validate(input);
|
|
|
|
const auto checkResult {Service<::Auth::IPasswordService>::get()->checkUserPassword(
|
|
boost::asio::ip::address::from_string(LmsApp->environment().clientAddress()),
|
|
LmsApp->getUserLoginName(),
|
|
input.toUTF8())};
|
|
switch (checkResult.state)
|
|
{
|
|
case ::Auth::IPasswordService::CheckResult::State::Granted:
|
|
return Wt::WValidator::Result {Wt::ValidationState::Valid};
|
|
case ::Auth::IPasswordService::CheckResult::State::Denied:
|
|
return Wt::WValidator::Result {Wt::ValidationState::Invalid, Wt::WString::tr("Lms.Settings.password-bad")};
|
|
case ::Auth::IPasswordService::CheckResult::State::Throttled:
|
|
return Wt::WValidator::Result {Wt::ValidationState::Invalid, Wt::WString::tr("Lms.password-client-throttled")};
|
|
}
|
|
|
|
throw LmsException {"InternalError"};
|
|
}
|
|
|
|
std::shared_ptr<Wt::WValidator>
|
|
createPasswordCheckValidator()
|
|
{
|
|
return std::make_shared<PasswordCheckValidator>();
|
|
}
|
|
|
|
} // namespace UserInterface
|
|
|