D-Net

package gr.uoa.di.validator.api;

import gr.uoa.di.validator.api.user.UserProfile;

import gr.uoa.di.validator.dao.UserStored;

import gr.uoa.di.validator.dao.UserStoredDAO;

import java.math.BigInteger;

import java.security.MessageDigest;

import java.util.UUID;

import org.apache.log4j.Logger;

import org.springframework.transaction.annotation.Propagation;

import org.springframework.transaction.annotation.Transactional;

@Transactional(propagation = Propagation.REQUIRED)

public class UserActionsLocal implements IUserActions {

	private static Logger logger = Logger.getLogger(UserActionsLocal.class);

	private UserStoredDAO userStoredDao;

	@Override

	@Transactional()

	public boolean activateUser(String activationId) throws Exception {

		UserStored newUser = new UserStored();

		newUser.setActivationId(activationId);		

		userStoredDao.save(newUser);

//		dbkit.executeUpdate("update users set activationId=NULL where activationId='" + DbKit.prepareString(activationId) + "'");

		return true;

	}

	@Override

	@Transactional(propagation = Propagation.REQUIRED)

	public String addUser(String email, String password) throws Exception {

		String hashword;

		MessageDigest md5 = MessageDigest.getInstance("MD5");

		md5.update(password.getBytes());

		BigInteger hash = new BigInteger(1, md5.digest());

		hashword = hash.toString(16);

		String activationId = UUID.randomUUID().toString();

		UserStored newUser = new UserStored();

		newUser.setEmail(email);

		newUser.setPassword(hashword);

		newUser.setActivationId(activationId);

		userStoredDao.save(newUser);

//		dbkit.executeUpdate("insert into users (email, activationId, password) values ('" + DbKit.prepareString(email) + "', '" + DbKit.prepareString(activationId) + "', '" + DbKit.prepareString(hashword) + "')");

		return activationId;

	}

	@Override

	public boolean correctCreds(String email, String password) throws Exception {

		String hashword;

		MessageDigest md5 = MessageDigest.getInstance("MD5");

		md5.update(password.getBytes());

		BigInteger hash = new BigInteger(1, md5.digest());

		hashword = hash.toString(16);

		UserStored newUser = new UserStored();

		newUser.setEmail(email);

		newUser.setPassword(hashword);

//		ResultSet rs = dbkit.executeQuery("select * from users where email='" + DbKit.prepareString(email) + "' and password='" + DbKit.prepareString(hashword) + "'");

		if (userStoredDao.checkCorrectCreds(newUser)) {

			logger.debug("Password verified");

			return true;

		} else {

			logger.debug("no user found with email: " + email + "and pass: " + password + " (" + hashword + ")");

			return false;

		}

	}

	@Override

	public boolean isAdmin(String email) throws Exception {

		return userStoredDao.isAdmin(email);

//		ResultSet rs = dbkit.executeQuery("select * from admins where username='" + DbKit.prepareString(email) + "'");		

	}

	@Override

	public boolean isUserActivated(String email) throws Exception {

		return userStoredDao.isActivated(email);

//		ResultSet rs = dbkit.executeQuery("select * from users where email='" + DbKit.prepareString(email) + "' and activationId is NULL");

	}

	@Override

	@Transactional(propagation = Propagation.REQUIRED)

	public String prepareResetPassword(String email) throws Exception {

		String uuid = UUID.randomUUID().toString();

		userStoredDao.prepareResetPassword(uuid,email);

//		dbkit.executeUpdate("update users set activationId='" + DbKit.prepareString(uuid) + "' where email='" + DbKit.prepareString(email) + "'");

		return uuid;

	}

	@Override

	@Transactional(propagation = Propagation.REQUIRED)

	public void resetPassword(String uuid, String password) throws Exception {

		String hashword;

		MessageDigest md5 = MessageDigest.getInstance("MD5");

		md5.update(password.getBytes());

		BigInteger hash = new BigInteger(1, md5.digest());

		hashword = hash.toString(16);

		userStoredDao.ResetPassword(uuid, hashword);

//		dbkit.executeUpdate("update users set password='" + DbKit.prepareString(hashword) + "', activationId=NULL where activationId='" + DbKit.prepareString(uuid) + "'");

	}

	@Override

	public boolean userExists(String email) throws Exception {

		return userStoredDao.userExists(email);

//		ResultSet rs = dbkit.executeQuery("select * from users where email='" + DbKit.prepareString(email) + "'");

	}

	@Override

	public void editUser(String email, String fname, String lname, String inst) throws Exception {

		// TODO Auto-generated method stub

	}

	@Override

	public String addUser(String username, String email, String password, String firstName, String lastName) {

		// TODO Auto-generated method stub

		return null;

	}

	@Override

	public boolean usernameExists(String username) throws Exception {

		// TODO Auto-generated method stub

		return false;

	}

	@Override

	public String getEmailFromUsername(String username) throws Exception {

		// TODO Auto-generated method stub

		return null;

	}

	@Override

	public UserProfile getUser(String userIdentifier) throws Exception {

		// TODO Auto-generated method stub

		return null;

	}

	public UserStoredDAO getUserStoredDao() {

		return userStoredDao;

	}

	public void setUserStoredDao(UserStoredDAO userStoredDao) {

		this.userStoredDao = userStoredDao;

	}

}