D-Net

{

  "type_source": "SVN", 

  "goal": "package -U source:jar", 

  "url": "http://svn-public.driver.research-infrastructures.eu/driver/dnet40/modules/dnet-openaire-users/trunk", 

  "deploy_repository": "dnet4-snapshots", 

  "version": "4", 

  "mail": "antleb@di.uoa.gr, kiatrop@di.uoa.gr, sbaltzi@di.uoa.gr", 

  "deploy_repository_url": "http://maven.research-infrastructures.eu/nexus/content/repositories/dnet4-snapshots", 

  "name": "dnet-openaire-users"

}

package eu.dnetlib.openaire.usermanagement;

import eu.dnetlib.openaire.user.utils.InputValidator;

import eu.dnetlib.openaire.user.utils.LDAPActions;

import eu.dnetlib.openaire.user.utils.VerificationActions;

import eu.dnetlib.openaire.usermanagement.utils.UrlConstructor;

import org.apache.log4j.Logger;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.web.context.support.SpringBeanAutowiringSupport;

import javax.servlet.ServletConfig;

import javax.servlet.ServletException;

import javax.servlet.http.HttpServlet;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import javax.servlet.http.HttpSession;

import java.io.IOException;

import java.io.PrintWriter;

/**

 * Created by sofia on 21/5/2018.

 */

public class VerifyToDeleteServlet extends HttpServlet {

    public void init(ServletConfig config) throws ServletException {

        super.init(config);

        SpringBeanAutowiringSupport.processInjectionBasedOnServletContext(this,

                config.getServletContext());

    }

    @Autowired

    private VerificationActions verificationActions;

    @Autowired

    private LDAPActions ldapActions;

    private Logger logger = Logger.getLogger(VerificationCodeServlet.class);

    @Override

    protected void doPost(HttpServletRequest request, HttpServletResponse response) throws IOException {

        response.setContentType("text/html");

        PrintWriter printWriter = response.getWriter();

        String formUsername = request.getParameter("username").trim();

        String formVerificationCode = request.getParameter("verification_code").trim();

        try {

            if (InputValidator.isFilled(formUsername) && InputValidator.isFilled(formVerificationCode)) {

                if (verificationActions.verificationEntryExists(formUsername) && verificationActions.verificationCodeIsCorrect(formUsername, formVerificationCode)) {

                    if (!verificationActions.verificationCodeHasExpired(formUsername)) {

                        Boolean isRegistered = false;

                        Boolean isZombie = false;

                        if (ldapActions.usernameExists(formUsername)) {

                            logger.info("User " + formUsername + " is activated user!");

                            isRegistered = true;

                        } else if (ldapActions.isZombieUsersUsername(formUsername)) {

                            logger.info("User " + formUsername + " is zombie user!");

                            isZombie = true;

                        }

                        if (!isRegistered && !isZombie) {

                            request.getSession().setAttribute("message", "Username or verification code are not valid.");

                            response.sendRedirect("./verifyToDelete.jsp");

                        } else {

                            if (isRegistered) {

                                ldapActions.deleteUser(formUsername);

                            } else if (isZombie) {

                                ldapActions.deleteZombieUser(formUsername);

                            }

                            verificationActions.deleteVerificationEntry(formUsername);

                            response.sendRedirect(UrlConstructor.getRedirectUrl(request,"successDeleteAccount.jsp"));

                        }

                    } else {

                        logger.info("Verification code has expired!");

                        response.sendRedirect(UrlConstructor.getRedirectUrl(request, "expiredVerificationCode.jsp"));

                    }

                } else {

                    logger.info("Username or verification code are not valid!");

                    request.getSession().setAttribute("message", "Username or verification code are not valid.");

                    response.sendRedirect("./verifyToDelete.jsp");

                }

            } else {

                if (!InputValidator.isFilled(formUsername)) {

                    logger.info("No username");

                    request.getSession().setAttribute("msg_username_error", "Please enter your username.");

                }

                if (!InputValidator.isFilled(formVerificationCode)) {

                    logger.info("No verification code");

                    request.getSession().setAttribute("msg_verification_code_error", "Please enter your verification code.");

                }

                response.sendRedirect("./verifyToDelete.jsp");

            }

        } catch (Exception ldape) {

            logger.error("Could not remove user with username " + formUsername, ldape);

            response.sendRedirect(UrlConstructor.getRedirectUrl(request, "error.jsp"));

        }

        printWriter.close();

    }

}

package eu.dnetlib.openaire.usermanagement;

import eu.dnetlib.openaire.user.utils.LDAPActions;

import eu.dnetlib.openaire.user.utils.VerificationActions;

import eu.dnetlib.openaire.user.utils.InputValidator;

import eu.dnetlib.openaire.usermanagement.utils.UrlConstructor;

import org.apache.log4j.Logger;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.web.context.support.SpringBeanAutowiringSupport;

import javax.servlet.ServletConfig;

import javax.servlet.ServletException;

import javax.servlet.http.HttpServlet;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import javax.servlet.http.HttpSession;

import java.io.IOException;

import java.io.PrintWriter;

/**

 * Created by sofia on 23/10/2017.

 */

public class AddPasswordServlet extends HttpServlet {

    public void init(ServletConfig config) throws ServletException {

        super.init(config);

        SpringBeanAutowiringSupport.processInjectionBasedOnServletContext(this,

                config.getServletContext());

    }

    @Autowired

    private VerificationActions verificationActions;

    @Autowired

    private LDAPActions ldapActions;

    private Logger logger = Logger.getLogger(AddPasswordServlet.class);

    @Override

    protected void doPost(HttpServletRequest request, HttpServletResponse response) throws IOException {

        response.setContentType("text/html");

        PrintWriter printWriter = response.getWriter();

        HttpSession session = request.getSession();

        String username = (String) session.getAttribute("username");

        if (username == null){

            logger.info("Empty username in session");

        }

        String password = request.getParameter("password");

        String confirmPassword = request.getParameter("password_conf");

        if (InputValidator.isFilled(password)) {

            if (InputValidator.isValidPassword(password) && password.equals(confirmPassword) && username !=null) {

                try {

                    ldapActions.resetPassword(username, password);

                    logger.info("password added");

                    session.removeAttribute("username");

                    response.sendRedirect(UrlConstructor.getRedirectUrl(request, "success.jsp"));

                } catch (Exception e) {

                    logger.error("LDAP error in adding password", e);

                    response.sendRedirect(UrlConstructor.getRedirectUrl(request, "error.jsp"));

                }

            } else {

                if (!InputValidator.isValidPassword(password)) {

                    logger.info("No valid password");

//                    request.getSession().setAttribute("msg_invalid_password", "The password must contain a lowercase letter, a capital (uppercase) letter, a number and must be at least 6 characters long. White space character is not allowed.");

                }

                if (!password.equals(confirmPassword)) {

                    logger.info("No matching passwords");

//                    request.getSession().setAttribute("msg_pass_conf_error", "These passwords don't match.");

                }

                response.sendRedirect("./addPassword.jsp");

            }

        } else {

            logger.info("Empty password");

            request.getSession().setAttribute("msg_password_error_display", "display:block" );

//            request.getSession().setAttribute("msg_invalid_password", "The password must contain a lowercase letter, a capital (uppercase) letter, a number and must be at least 6 characters long. White space character is not allowed.");

            response.sendRedirect("./resetPassword.jsp");

        }

        printWriter.close();

    }

}

package eu.dnetlib.openaire.usermanagement;

import eu.dnetlib.openaire.user.utils.EmailSender;

import eu.dnetlib.openaire.user.utils.LDAPActions;

import eu.dnetlib.openaire.user.utils.VerificationActions;

import eu.dnetlib.openaire.user.utils.VerifyRecaptcha;

import eu.dnetlib.openaire.usermanagement.utils.UrlConstructor;

import org.apache.commons.validator.routines.EmailValidator;

import org.apache.log4j.Logger;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.beans.factory.annotation.Value;

import org.springframework.web.context.support.SpringBeanAutowiringSupport;

import javax.mail.MessagingException;

import javax.servlet.ServletConfig;

import javax.servlet.ServletException;

import javax.servlet.http.HttpServlet;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import javax.servlet.http.HttpSession;

import java.io.IOException;

import java.sql.Timestamp;

import java.util.Date;

import java.util.UUID;

/**

 * Created by sofia on 21/5/2018.

 */

public class RequestToDeleteAccountServlet extends HttpServlet {

    @Autowired

    private VerificationActions verificationActions;

    @Autowired

    private LDAPActions ldapActions;

    @Autowired

    private EmailSender emailSender;

    @Value("${oidc.home}")

    private String oidcHomeUrl;

    @Value("${google.recaptcha.secret}")

    private String secret;

    @Value("${google.recaptcha.key}")

    private String sitekey;

    private static final Logger logger = Logger.getLogger(RequestActivationCodeServlet.class);

    public void init(ServletConfig config) throws ServletException {

        super.init(config);

        SpringBeanAutowiringSupport.processInjectionBasedOnServletContext(this,

                config.getServletContext());

        config.getServletContext().setAttribute("sitekey", sitekey);

    }

    @Override

    protected void doPost(HttpServletRequest request, HttpServletResponse response) throws IOException {

        String formEmail = request.getParameter("email").trim();

        String gRecaptchaResponse = request.getParameter("g-recaptcha-response");

        HttpSession session = request.getSession();

        session.setAttribute("homeUrl", oidcHomeUrl);

        if (formEmail == null) {

            request.getSession().setAttribute("message", "Error reading email.");

            response.sendRedirect("./requestToDeleteAccount.jsp");

        } else if (formEmail.isEmpty()) {

            request.getSession().setAttribute("message", "Please enter your email.");

            response.sendRedirect("./requestToDeleteAccount.jsp");

        } else if (!EmailValidator.getInstance().isValid(formEmail)) {

            request.getSession().setAttribute("message", "Please enter a valid email.");

            response.sendRedirect("./requestToDeleteAccount.jsp");

        } else if (!VerifyRecaptcha.verify(gRecaptchaResponse, secret)) {

            request.getSession().setAttribute("reCAPTCHA_message", "You missed the reCAPTCHA validation!");

            response.sendRedirect("./requestToDeleteAccount.jsp");

        } else {

            try {

                Boolean isRegistered = false;

                Boolean isZombie = false;

                if (ldapActions.emailExists(formEmail)) {

                    logger.info("User with email: " + formEmail + " is activated user!");

                    isRegistered = true;

                } else if (ldapActions.isZombieUsersEmail(formEmail)) {

                    logger.info("User with email: " + formEmail + " is zombie user!");

                    isZombie = true;

                }

                if (!isRegistered && !isZombie) {

                    request.getSession().setAttribute("message", "There is no user with that email.");

                    response.sendRedirect("./requestToDeleteAccount.jsp");

                } else {

                    String username = null;

                    if (isRegistered) {

                        username = ldapActions.getUsername(formEmail);

                    } else if (isZombie) {

                        username = ldapActions.getZombieUsersUserName(formEmail);

                    }

                    UUID verificationCode = UUID.randomUUID();

                    Date creationDate = new Date();

                    String vCode = verificationCode.toString();

                    Timestamp timestamp = new Timestamp(creationDate.getTime());

                    if (!verificationActions.verificationEntryExists(username)) {

                        verificationActions.addVerificationEntry(username, vCode, timestamp);

                    } else {

                        verificationActions.updateVerificationEntry(username, vCode, timestamp);

                    }

                    String resultPath = UrlConstructor.getRedirectUrl(request, "verifyToDelete.jsp");

                    String resultPathWithVCode = UrlConstructor.getVerificationLink(resultPath, vCode);

                    String verificationCodeMsg = "<p>Hello " + username + ",</p>" +

                            "<p> A request has been made to get a verification code to delete your OpenAIRE account. To delete your " +

                            "account, you will need to submit your username and this verification code in order to verify that the " +

                            "request was legitimate.</p>" +

                            "<p>" +

                            "The verification code is " + vCode +

                            "</p>" +

                            "Click the URL below and proceed with deleting your account." +

                            "<p><a href=" + resultPathWithVCode + ">" + resultPathWithVCode + "</a></p>" +

                            "<p>The verification code is valid for 24 hours.</p>" +

                            "<p>Thank you,</p>" +

                            "<p>OpenAIRE technical team</p>";

                    String verificationCodeSubject = "Request to delete your OpenAIRE account";

                    emailSender.sendEmail(formEmail, verificationCodeSubject, verificationCodeMsg);

                    logger.info("Sending verification code to user: " + formEmail);

                    response.sendRedirect("./verifyToDelete.jsp");

                }

            } catch (MessagingException e) {

                logger.error("Error in sending email", e);

                request.getSession().setAttribute("message", "Error sending email");

                response.sendRedirect("./requestActivationCode.jsp");

            } catch (Exception ldape) {

                logger.error("Could not user with email " + formEmail, ldape);

                response.sendRedirect(UrlConstructor.getRedirectUrl(request, "error.jsp"));

            }

        }

    }

    public String getOidcHomeUrl() {

        return oidcHomeUrl;

    }

    public void setOidcHomeUrl(String oidcHomeUrl) {

        this.oidcHomeUrl = oidcHomeUrl;

    }

}

package eu.dnetlib.openaire.usermanagement.utils;

import org.apache.log4j.Logger;

import javax.servlet.http.HttpServletRequest;

import java.util.UUID;

/**

 * Created by sofia on 8/3/2018.

 */

public class UrlConstructor {

    private static final Logger logger = Logger.getLogger(UrlConstructor.class);

    public static String getRedirectUrl(HttpServletRequest request, String jspPage) {

        String scheme = request.getScheme();

        String serverName = request.getServerName();

        int portNumber = request.getServerPort();

        String contextPath = request.getContextPath();

        String resultPath;

        if (portNumber == 80) {

            resultPath = scheme + "://" + serverName + contextPath + "/" + jspPage;

        } else {

            resultPath = scheme + "://" + serverName + ":" + portNumber + contextPath + "/" + jspPage;

        }

        if (jspPage.equals("error.jsp")) {

            request.getSession().setAttribute("error", "true");

        }

        if (jspPage.equals("success.jsp")) {

            request.getSession().setAttribute("success", "true");

        }

        if (jspPage.equals("successAddPassword.jsp")) {

            request.getSession().setAttribute("successAddPassword", "true");

        }

        if (jspPage.equals("successDeleteAccount.jsp")) {

            request.getSession().setAttribute("successDeleteAccount", "true");

        }

        if (jspPage.equals("expiredVerificationCode.jsp")) {

            request.getSession().setAttribute("expiredVerificationCode", "true");

        }

        if (jspPage.equals("registerSuccess.jsp")) {

            request.getSession().setAttribute("registerSuccess", "true");

        }

        if (jspPage.equals("emailSuccess.jsp")) {

            request.getSession().setAttribute("emailSuccess", "true");

        }

        return resultPath;

    }

    public static String getVerificationLink(String path , String verificationCode ) {

        return path + "?code=" + verificationCode;

    }

}

package eu.dnetlib.openaire.usermanagement;

import eu.dnetlib.openaire.user.utils.LDAPActions;

import eu.dnetlib.openaire.user.utils.VerificationActions;

import eu.dnetlib.openaire.usermanagement.utils.UrlConstructor;

import eu.dnetlib.openaire.user.utils.InputValidator;

import org.apache.log4j.Logger;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.beans.factory.annotation.Value;

import org.springframework.web.context.support.SpringBeanAutowiringSupport;

import javax.servlet.ServletConfig;

import javax.servlet.ServletException;

import javax.servlet.http.HttpServlet;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import javax.servlet.http.HttpSession;

import java.io.IOException;

import java.io.PrintWriter;

/**

 * Created by sofia on 23/10/2017.

 */

public class ActivationCodeServlet extends HttpServlet{

    public void init(ServletConfig config) throws ServletException {

        super.init(config);

        SpringBeanAutowiringSupport.processInjectionBasedOnServletContext(this,

                config.getServletContext());

    }

    @Autowired

    private VerificationActions verificationActions;

    @Autowired

    private LDAPActions ldapActions;

    @Value("${oidc.home}")

    private String oidcHomeUrl;

    private Logger logger = Logger.getLogger(ActivationCodeServlet.class);

    @Override

    protected void doPost(HttpServletRequest request, HttpServletResponse response) throws IOException {

        response.setContentType("text/html");

        PrintWriter printWriter = response.getWriter();

        String formUsername = request.getParameter("username").trim();

        String formVerificationCode = request.getParameter("verification_code").trim();

        if (InputValidator.isFilled(formUsername) && InputValidator.isFilled(formVerificationCode)) {

            if (verificationActions.verificationEntryExists(formUsername) && verificationActions.verificationCodeIsCorrect(formUsername, formVerificationCode)) {

                if (!verificationActions.verificationCodeHasExpired(formUsername)) {

                    HttpSession session = request.getSession();

                    session.setAttribute("username", formUsername);

                    session.setAttribute("homeUrl", oidcHomeUrl);

                    try {

                        ldapActions.moveUser(formUsername);

                    } catch (Exception e) {

                        logger.error("LDAP error in moving user", e);

                        response.sendRedirect(UrlConstructor.getRedirectUrl(request, "error.jsp"));

                    }

                    response.sendRedirect(UrlConstructor.getRedirectUrl(request, "registerSuccess.jsp"));

                } else {

                    logger.info("Verification code has expired!");

                    response.sendRedirect(UrlConstructor.getRedirectUrl(request, "expiredVerificationCode.jsp"));

                }

            } else {

                logger.info("Username or activation code are not valid!");

                request.getSession().setAttribute("message", "Username or activation code are not valid.");

                response.sendRedirect("./activate.jsp");

            }

        } else {

            if (!InputValidator.isFilled(formUsername)) {

                logger.info("No username");

                request.getSession().setAttribute("msg_username_error", "Please enter your username.");

            }

            if (!InputValidator.isFilled(formVerificationCode)) {

                logger.info("No activation code");

                request.getSession().setAttribute("msg_activation_code_error", "Please enter your activation code.");

            }

            response.sendRedirect("./activate.jsp");

        }

        printWriter.close();

    }

    public String getOidcHomeUrl() {

        return oidcHomeUrl;

    }

    public void setOidcHomeUrl(String oidcHomeUrl) {

        this.oidcHomeUrl = oidcHomeUrl;

    }

}

package eu.dnetlib.openaire.usermanagement;

import eu.dnetlib.openaire.user.utils.VerificationActions;

import eu.dnetlib.openaire.user.utils.InputValidator;

import eu.dnetlib.openaire.usermanagement.utils.UrlConstructor;

import org.apache.log4j.Logger;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.web.context.support.SpringBeanAutowiringSupport;

import javax.servlet.ServletConfig;

import javax.servlet.ServletException;

import javax.servlet.http.HttpServlet;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import javax.servlet.http.HttpSession;

import java.io.IOException;

import java.io.PrintWriter;

/**

 * Created by kiatrop on 28/9/2017.

 */

public class VerificationCodeServlet extends HttpServlet {

    public void init(ServletConfig config) throws ServletException {

        super.init(config);

        SpringBeanAutowiringSupport.processInjectionBasedOnServletContext(this,

                config.getServletContext());

    }

    @Autowired

    private VerificationActions verificationActions;

    private Logger logger = Logger.getLogger(VerificationCodeServlet.class);

    @Override

    protected void doPost(HttpServletRequest request, HttpServletResponse response) throws IOException {

        response.setContentType("text/html");

        PrintWriter printWriter = response.getWriter();

        String formUsername = request.getParameter("username").trim();

        String formVerificationCode = request.getParameter("verification_code").trim();

        if (InputValidator.isFilled(formUsername) && InputValidator.isFilled(formVerificationCode)) {

            if (verificationActions.verificationEntryExists(formUsername) && verificationActions.verificationCodeIsCorrect(formUsername, formVerificationCode)) {

                if (!verificationActions.verificationCodeHasExpired(formUsername)) {

                    HttpSession session = request.getSession();

                    session.setAttribute("username", formUsername);

                    response.sendRedirect("./resetPassword.jsp");

                } else {

                    logger.info("Verification code has expired!");

                    response.sendRedirect(UrlConstructor.getRedirectUrl(request, "expiredVerificationCode.jsp"));

                }

            } else {

                logger.info("Username or verification code are not valid!");

                request.getSession().setAttribute("message", "Username or verification code are not valid.");

                response.sendRedirect("./verify.jsp");

            }

        } else {

            if (!InputValidator.isFilled(formUsername)) {

                logger.info("No username");

                request.getSession().setAttribute("msg_username_error", "Please enter your username.");

            }

            if (!InputValidator.isFilled(formVerificationCode)) {

                logger.info("No verification code");

                request.getSession().setAttribute("msg_verification_code_error", "Please enter your verification code.");

            }

            response.sendRedirect("./verify.jsp");

            }

        printWriter.close();

    }

}

package eu.dnetlib.openaire.usermanagement;

import com.unboundid.ldap.sdk.LDAPException;

import eu.dnetlib.openaire.user.utils.EmailSender;

import eu.dnetlib.openaire.user.utils.LDAPActions;

import eu.dnetlib.openaire.user.utils.VerifyRecaptcha;

import eu.dnetlib.openaire.usermanagement.utils.UrlConstructor;

import org.apache.commons.validator.routines.EmailValidator;

import org.apache.log4j.Logger;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.beans.factory.annotation.Value;

import org.springframework.stereotype.Component;

import org.springframework.web.context.support.SpringBeanAutowiringSupport;

import javax.mail.MessagingException;

import javax.servlet.ServletConfig;

import javax.servlet.ServletException;

import javax.servlet.http.HttpServlet;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import javax.servlet.http.HttpSession;

import java.io.IOException;

/**

 * Created by kiatrop on 2/10/2017.

 */

@Component

public class RemindUsernameServlet extends HttpServlet {

    @Autowired

    private LDAPActions ldapActions;

    @Autowired

    private EmailSender emailSender;

    @Value("${oidc.home}")

    private String oidcHomeUrl;

    @Value("${google.recaptcha.secret}")

    private String secret;

    @Value("${google.recaptcha.key}")

    private String sitekey;

    private static final Logger logger = Logger.getLogger(RemindUsernameServlet.class);

    public void init(ServletConfig config) throws ServletException {

        super.init(config);

        SpringBeanAutowiringSupport.processInjectionBasedOnServletContext(this,

                config.getServletContext());

        config.getServletContext().setAttribute("sitekey", sitekey);

    }

    @Override

    protected void doPost(HttpServletRequest request, HttpServletResponse response) throws IOException {

        String formEmail = request.getParameter("email").trim();

        String gRecaptchaResponse = request.getParameter("g-recaptcha-response");

        HttpSession session = request.getSession();

        session.setAttribute("homeUrl", oidcHomeUrl);

        if (formEmail == null) {

            request.getSession().setAttribute("message", "Error reading email.");

            response.sendRedirect("./remindUsername.jsp");

        } else if (formEmail.isEmpty()) {

            request.getSession().setAttribute("message", "Please enter your email.");

            response.sendRedirect("./remindUsername.jsp");

        } else if (!EmailValidator.getInstance().isValid(formEmail)) {

            request.getSession().setAttribute("message", "Please enter a valid email.");

            response.sendRedirect("./remindUsername.jsp");

        } else if (!VerifyRecaptcha.verify(gRecaptchaResponse, secret)) {

            request.getSession().setAttribute("message", "You missed the reCAPTCHA validation!");

            response.sendRedirect("./remindUsername.jsp");

        } else {

            try {

                String username = ldapActions.getUsername(formEmail);

                if (username != null && !username.isEmpty()) {

                    logger.info("Remind username to: "+username);

                    String verificationCodeMsg = "<p>Hello,</p>" +

                            "<p> A username reminder has been requested for your OpenAIRE account.</p>" +

                            "<p> Your username is " + username + ".</p>" +

                            "<p> Thank you, </p>" +

                            "<p> OpenAIRE technical team</p>";

                    String verificationCodeSubject = "Your OpenAIRE username";

                    emailSender.sendEmail(formEmail, verificationCodeSubject, verificationCodeMsg);

                    response.sendRedirect(UrlConstructor.getRedirectUrl(request, "emailSuccess.jsp"));

                } else {

                    request.getSession().setAttribute("message", "There is no user registered with that email.");

                    response.sendRedirect("./remindUsername.jsp");

                }

            } catch (LDAPException ldape) {

                logger.error("Could not find user with email " + formEmail, ldape);

                response.sendRedirect(UrlConstructor.getRedirectUrl(request, "error.jsp"));

            } catch (MessagingException e) {

                logger.error("Error in sending email", e);

                request.getSession().setAttribute("message", "Error sending email");

                response.sendRedirect(UrlConstructor.getRedirectUrl(request, "remindUsername.jsp"));

            }

        }

    }

    public String getOidcHomeUrl() {

        return oidcHomeUrl;

    }

    public void setOidcHomeUrl(String oidcHomeUrl) {

        this.oidcHomeUrl = oidcHomeUrl;

    }

}

package eu.dnetlib.openaire.usermanagement.security;

import com.google.gson.Gson;

import org.apache.log4j.Logger;

import org.mitre.openid.connect.model.OIDCAuthenticationToken;

import org.springframework.security.core.Authentication;

import org.springframework.security.web.authentication.AuthenticationSuccessHandler;

import javax.servlet.http.Cookie;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import java.io.IOException;

/**

 * Created by stefanos on 9/5/2017.

 */

public class FrontEndLinkURIAuthenticationSuccessHandler implements AuthenticationSuccessHandler {

    private static final Logger logger = Logger.getLogger(FrontEndLinkURIAuthenticationSuccessHandler.class);

    private String frontEndURI;

    private String frontPath;

    private String frontDomain;

    @Override

    public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response, Authentication authentication) throws IllegalArgumentException, IOException   {

        OIDCAuthenticationToken authOIDC = (OIDCAuthenticationToken) authentication;

        try {

//            Cookie jwt = new Cookie("XCsrfToken", JWTGenerator.generateToken(authOIDC, "my-very-secret"));

            Cookie openAIREUser = new Cookie("openAIREUser",  new Gson().toJson(JWTGenerator.generateJsonToken(authOIDC)));

            Cookie accessToken = new Cookie("AccessToken", authOIDC.getAccessTokenValue());

            // Expire the cookies in four hours (4 * 3600)

//            jwt.setMaxAge(14400);

            openAIREUser.setMaxAge(14400);

            accessToken.setMaxAge(14400);

            //TODO DELETE LOG

            logger.info("\n////////////////////////////////////////////////////////////////////////////////////////////////\n");

//            logger.info("jwt: " + JWTGenerator.generateToken(authOIDC, "my-very-secret"));

            logger.info("access token: " + authOIDC.getAccessTokenValue());

            logger.info("openAIREUser: " + JWTGenerator.generateJsonToken(authOIDC));

            logger.info("\n////////////////////////////////////////////////////////////////////////////////////////////////\n");

            //TODO DELETE LOG

//            logger.info("\n////////////////////////////////////////////////////////////////////////////////////////////////\n");

//            logger.info("refresh token: " + authOIDC.getRefreshTokenValue());

//            logger.info("\n////////////////////////////////////////////////////////////////////////////////////////////////\n");

//            jwt.setPath(frontPath);

            openAIREUser.setPath(frontPath);

            accessToken.setPath(frontPath);

            if (frontDomain!=null) {

//                jwt.setDomain(frontDomain);

                openAIREUser.setDomain(frontDomain);

                accessToken.setDomain(frontDomain);

            }

//            response.addCookie(jwt);

            response.addCookie(openAIREUser);

            response.addCookie(accessToken);

            response.sendRedirect(frontEndURI);

        } catch (IOException e) {

            logger.error("IOException in redirection ", e);

            throw new IOException(e);

        }catch (IllegalArgumentException e) {

            logger.error("IllegalArgumentException in redirection ", e);

            throw new IllegalArgumentException(e);

        }

    }

    public String getFrontEndURI() {

        return frontEndURI;

    }

    public void setFrontEndURI(String frontEndURI) {

        this.frontEndURI = frontEndURI;

    }

    public String getFrontPath() {

        return frontPath;

    }

    public void setFrontPath(String frontPath) {

        this.frontPath = frontPath;

    }

    public String getFrontDomain() {

        return frontDomain;

    }

    public void setFrontDomain(String frontDomain) {

        this.frontDomain = frontDomain;

    }

}

package eu.dnetlib.openaire.usermanagement.security;

import com.google.gson.JsonObject;

import eu.dnetlib.openaire.user.pojos.migration.MigrationUser;

import io.jsonwebtoken.Claims;

import io.jsonwebtoken.Jwts;

import io.jsonwebtoken.SignatureAlgorithm;

import org.apache.log4j.Logger;

import org.mitre.openid.connect.model.OIDCAuthenticationToken;

import org.mitre.openid.connect.model.UserInfo;

import java.io.UnsupportedEncodingException;

import java.net.URLEncoder;

import java.text.ParseException;

import java.util.Date;

public class JWTGenerator {

    private static final Logger logger = Logger.getLogger(JWTGenerator.class);

    public static String generateToken(MigrationUser u, String secret) {

        Claims claims = Jwts.claims().setSubject(u.getUsername());

        claims.put("fullname", u.getFullname() + "");

        claims.put("userId", u.getId() + "");

        claims.put("email", u.getEmail() + "");

        claims.put("role", u.getRoleId());

        //expiration

        long nowMillis = System.currentTimeMillis();

        Date now = new Date(nowMillis);

        long ttlMillis = 1800000;

        long expMillis = nowMillis + ttlMillis;

        Date exp = new Date(expMillis);

        return Jwts.builder()

                .setClaims(claims)

                .setExpiration(exp)

                .signWith(SignatureAlgorithm.HS512, secret)

                .compact();

    }

    public static String generateToken(OIDCAuthenticationToken authOIDC, String secret) {

        try {

            JsonObject userInfo = authOIDC.getUserInfo().getSource();

            Claims claims = Jwts.claims().setSubject(authOIDC.getUserInfo().getSub());

            claims.put("fullname", URLEncoder.encode(authOIDC.getUserInfo().getName(), "UTF-8") + "");

            if (authOIDC.getUserInfo().getGivenName() == null){

                logger.info("User: " + authOIDC.getUserInfo().getName() + "doesn't have first name");

                claims.put("firstname", URLEncoder.encode(" ", "UTF-8") + "");

            } else {

                claims.put("firstname", URLEncoder.encode(authOIDC.getUserInfo().getGivenName(), "UTF-8") + "");

            }

            if (authOIDC.getUserInfo().getFamilyName() == null){

                logger.info("User: " + authOIDC.getUserInfo().getName() + "doesn't have first name");

                claims.put("lastname", URLEncoder.encode(" ", "UTF-8") + "");

            } else {

                claims.put("lastname", URLEncoder.encode(authOIDC.getUserInfo().getFamilyName(), "UTF-8") + "");

            }

            claims.put("email", authOIDC.getUserInfo().getEmail() + "");

//            if (userInfo.getAsJsonArray("eduPersonScopedAffiliation").toString() != null) {

//                claims.put("role", URLEncoder.encode(userInfo.getAsJsonArray("edu_person_scoped_affiliations").toString(), "UTF-8") + "");

//            }

            if (userInfo.getAsJsonArray("edu_person_entitlements") == null){

                logger.info("User: " + authOIDC.getUserInfo().getName() + "doesn't have role");

                claims.put("role", URLEncoder.encode(" ", "UTF-8") + "");

            } else {

                claims.put("role", URLEncoder.encode(userInfo.getAsJsonArray("edu_person_entitlements").toString(), "UTF-8") + "");

            }

            //TODO remove, We don't need it but if we are going to use it, we need to check if the user has affiliation

            //claims.put("edu_person_scoped_affiliations", URLEncoder.encode(userInfo.getAsJsonArray("edu_person_scoped_affiliations").toString(), "UTF-8") + "");

            //TODO remove

            //TODO THIS IS TEST

//            claims.put("fullname", URLEncoder.encode("Σοφία Μπαλτζή", "UTF-8") + "");

//            claims.put("firstname", URLEncoder.encode("Σοφία", "UTF-8") + "");

//            claims.put("lastname", URLEncoder.encode("Μπαλτζή", "UTF-8") + "");

//            claims.put("email", "sofie.mpl@gmail.com" + "");

//            claims.put("edu_person_scoped_affiliations", "faculty");

            Date exp = new Date(authOIDC.getIdToken().getJWTClaimsSet().getExpirationTime().getTime());

//            logger.info("expirationTime: "+ exp);

            //TODO DELETE LOGS

//            logger.info("\n////////////////////////////////////////////////////////////////////////////////////////////////\n");

//            logger.info("fullName: " + authOIDC.getUserInfo().getName());

//            logger.info("firstName: " + authOIDC.getUserInfo().getGivenName());

//            logger.info("lastName: " + authOIDC.getUserInfo().getFamilyName());

//            logger.info("email: " + authOIDC.getUserInfo().getEmail());

//            //logger.info("Check everything");

//            logger.info("locale: " + authOIDC.getUserInfo().getSource());

//            logger.info("role: " + userInfo.getAsJsonArray("edu_person_entitlements").toString());

//            //logger.info("affiliation: " + userInfo.getAsJsonArray("edu_person_scoped_affiliations").toString());

//            logger.info("expirationTime: " + exp);

//            logger.info("\n////////////////////////////////////////////////////////////////////////////////////////////////\n");

                return Jwts.builder()

                        .setClaims(claims)

                        .setExpiration(exp)

                        .signWith(SignatureAlgorithm.HS512, secret)

                        .compact();

        } catch (ParseException e) {

            e.printStackTrace();

            logger.error("JWT Parse Exception from getting Expiration Time ", e);

            return "error";

        } catch (UnsupportedEncodingException e) {

            e.printStackTrace();

            logger.error("UnsupportedEncodingException UTF-8 ", e);

            return "error";

        }

    }

     public static JsonObject generateJsonToken(OIDCAuthenticationToken authOIDC) {

         try {

            JsonObject userInfo = authOIDC.getUserInfo().getSource();

            JsonObject userInfo2 = new JsonObject();

            if (authOIDC.getUserInfo().getSub() == null) {

                logger.info("User doesn't have sub");

                userInfo2.addProperty("sub", "");

            } else {

                userInfo2.addProperty("sub", URLEncoder.encode(authOIDC.getUserInfo().getSub(), "UTF-8"));

            }

            if (authOIDC.getUserInfo().getName() == null) {

                logger.info("User doesn't have fullname");

                userInfo2.addProperty("fullname", "");

            } else {

                userInfo2.addProperty("fullname", URLEncoder.encode(authOIDC.getUserInfo().getName(), "UTF-8"));

            }

            if (authOIDC.getUserInfo().getGivenName() == null){

                logger.info("User: " + authOIDC.getUserInfo().getName() + "doesn't have first name");

//                userInfo2.addProperty("firstname", URLEncoder.encode(" ", "UTF-8") + "");

                userInfo2.addProperty("firstname", "");

            } else {

                userInfo2.addProperty("firstname", URLEncoder.encode(authOIDC.getUserInfo().getGivenName(), "UTF-8") + "");

            }

            if (authOIDC.getUserInfo().getFamilyName() == null){

                logger.info("User: " + authOIDC.getUserInfo().getName() + "doesn't have first name");

//                userInfo2.addProperty("lastname", URLEncoder.encode(" ", "UTF-8") + "");

                userInfo2.addProperty("lastname", "");

            } else {

                userInfo2.addProperty("lastname", URLEncoder.encode(authOIDC.getUserInfo().getFamilyName(), "UTF-8") + "");

            }

            userInfo2.addProperty("email", authOIDC.getUserInfo().getEmail() + "");

            if (userInfo.getAsJsonArray("edu_person_entitlements") == null){

                logger.info("User: " + authOIDC.getUserInfo().getName() + "doesn't have role");

//                userInfo2.addProperty("role", URLEncoder.encode(" ", "UTF-8") + "");

                userInfo2.addProperty("role", "");

            } else {

                userInfo2.addProperty("role", URLEncoder.encode(userInfo.getAsJsonArray("edu_person_entitlements").toString(), "UTF-8") + "");

            }

            logger.info("UserINFO: " + userInfo2.toString());

            return userInfo2;

        } catch (UnsupportedEncodingException e) {

            e.printStackTrace();

            logger.error("UnsupportedEncodingException UTF-8 ", e);

            JsonObject error = new JsonObject();

            error.addProperty("error", "UnsupportedEncodingException UTF-8 " + e);

            return error;

        }

     }

    //TODO DELETE IF IT IS NOT NECESSARY

    public static String generateAccessToken(OIDCAuthenticationToken authOIDC, String secret) {

        Claims claims = Jwts.claims().setId(authOIDC.getAccessTokenValue());

        //TODO DELETE LOGS

        logger.info("\n////////////////////////////////////////////////////////////////////////////////////////////////\n");

        logger.info("access token: " + authOIDC.getAccessTokenValue());

        logger.info("\n////////////////////////////////////////////////////////////////////////////////////////////////\n");

        return Jwts.builder()

                .setClaims(claims)

                .signWith(SignatureAlgorithm.HS512, secret)

                .compact();

    }

    public static String generateToken(UserInfo user, String secret) {

        try {

            JsonObject userInfo = user.getSource();

            Claims claims = Jwts.claims().setSubject(user.getSub());

            claims.put("email", user.getEmail() + "");

            claims.put("role", URLEncoder.encode(userInfo.getAsJsonArray("edu_person_entitlements").toString(), "UTF-8") + "");

            return Jwts.builder()

                    .setClaims(claims)

                    .signWith(SignatureAlgorithm.HS512, secret)

                    .compact();

        } catch (UnsupportedEncodingException e) {

            e.printStackTrace();

            logger.error("UnsupportedEncodingException UTF-8 ", e);

            return "error";

        }

    }

}

// How to add it manually

//        long nowMillis = System.currentTimeMillis();

//        //This is my token

//        try {

//            String jwt = Jwts.builder()

//                    .setSubject("Argiro")

//                    .setExpiration(new Date(nowMillis+1800000))

//                    .claim("fullname", "Argiro Kokogianaki")

//                    .claim("id", "8")

//                    .claim("email", "argiro@gmail.com")

//                    .claim("role","2")

//                    .signWith(

//                            SignatureAlgorithm.HS512,

//                            "my-very-secret".getBytes("UTF-8")

//                    )

//                    .compact();

package eu.dnetlib.openaire.usermanagement;

import com.unboundid.ldap.sdk.LDAPException;

import eu.dnetlib.openaire.user.utils.*;

import eu.dnetlib.openaire.usermanagement.utils.UrlConstructor;

import org.apache.commons.validator.routines.EmailValidator;

import org.apache.log4j.Logger;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.beans.factory.annotation.Value;

import org.springframework.web.context.support.SpringBeanAutowiringSupport;

import javax.mail.MessagingException;

import javax.servlet.ServletConfig;

import javax.servlet.ServletException;

import javax.servlet.http.HttpServlet;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import java.io.IOException;

import java.sql.Timestamp;

import java.util.Date;

import java.util.UUID;

/**

 * Created by kiatrop on 28/9/2017.

 */

public class ForgotPasswordServlet extends HttpServlet {

    @Autowired

    private LDAPActions ldapActions;

    @Autowired

    private VerificationActions verificationActions;

    @Autowired

    private EmailSender emailSender;

    @Value("${google.recaptcha.secret}")

    private String secret;

    @Value("${google.recaptcha.key}")

    private String sitekey;

    private Logger logger = Logger.getLogger(ForgotPasswordServlet.class);

    public void init(ServletConfig config) throws ServletException {

        super.init(config);

        SpringBeanAutowiringSupport.processInjectionBasedOnServletContext(this,

                config.getServletContext());

        config.getServletContext().setAttribute("sitekey", sitekey);

    }

    protected void doPost(HttpServletRequest request, HttpServletResponse response) throws IOException {

        String formEmail = request.getParameter("email").trim();

        String gRecaptchaResponse = request.getParameter("g-recaptcha-response");

        if (formEmail == null) {

            request.getSession().setAttribute("message", "Error reading email.");

            response.sendRedirect("./forgotPassword.jsp");

        } else if (formEmail.isEmpty()) {

            request.getSession().setAttribute("message", "Please enter your email.");

            response.sendRedirect("./forgotPassword.jsp");

        } else if (!EmailValidator.getInstance().isValid(formEmail)) {

            request.getSession().setAttribute("message", "Please enter a valid email.");

            response.sendRedirect("./forgotPassword.jsp");

        } else if (!VerifyRecaptcha.verify(gRecaptchaResponse, secret)) {

            request.getSession().setAttribute("message", "You missed the reCAPTCHA validation!");

            response.sendRedirect("./forgotPassword.jsp");

        } else {

            try {

                String username = ldapActions.getUsername(formEmail);

                if (username == null || username.isEmpty()) {

                    request.getSession().setAttribute("message", "There is no user registered with that email.");

                    response.sendRedirect("./forgotPassword.jsp");

                } else {

                    UUID verificationCode = UUID.randomUUID();

                    Date creationDate = new Date();

                    String vCode = verificationCode.toString();

                    Timestamp timestamp = new Timestamp(creationDate.getTime());

                    if (!verificationActions.verificationEntryExists(username)) {

                        verificationActions.addVerificationEntry(username, vCode, timestamp);

                    } else {

                        verificationActions.updateVerificationEntry(username, vCode, timestamp);

                    }

                    String resultPath = UrlConstructor.getRedirectUrl(request, "verify.jsp");

                    String resultPathWithVCode = UrlConstructor.getVerificationLink(resultPath, vCode);

                    String verificationCodeMsg = "<p>Hello,</p>" +

                            "<p> A request has been made to reset your OpenAIRE account password. To reset your " +

                            "password, you will need to submit this verification code in order to verify that the " +

                            "request was legitimate.</p>" +

                            "<p> The verification code is " + vCode + "</p>" +

                            "Click the URL below and proceed with verification." +

                            "<p><a href=" + resultPathWithVCode + ">" + resultPathWithVCode + "</a></p>" +

                            "<p>The verification code is valid for 24 hours.</p>" +

                            "<p>Thank you,</p>" +

                            "<p>OpenAIRE technical team</p>";

                    String verificationCodeSubject = "Your OpenAIRE password reset request";

                    emailSender.sendEmail(formEmail, verificationCodeSubject, verificationCodeMsg);

                    response.setContentType("text/html");

                    response.sendRedirect("./verify.jsp");

                }

            } catch (LDAPException ldape) {

                logger.error("LDAP error", ldape);

                response.sendRedirect(UrlConstructor.getRedirectUrl(request, "error.jsp"));

            } catch (MessagingException e) {

                logger.error("Error in sending email", e);

                request.getSession().setAttribute("message", "Error sending email.");

                response.sendRedirect("./forgotPassword.jsp");

            }

        }

    }

}

package eu.dnetlib.openaire.usermanagement.registry.beans;

import org.apache.log4j.Logger;

import org.springframework.beans.factory.annotation.Value;

import org.springframework.context.annotation.Bean;

import org.springframework.context.annotation.Configuration;

import org.springframework.context.annotation.PropertySource;

import org.springframework.data.redis.connection.lettuce.LettuceConnectionFactory;

import org.springframework.session.data.redis.config.annotation.web.http.EnableRedisHttpSession;

import org.springframework.session.web.http.CookieSerializer;

import org.springframework.session.web.http.DefaultCookieSerializer;

/**

 * Created by stefanos on 14/6/2017.

 */

@PropertySource(value = { "classpath:eu/dnet/openaire/usermanagement/redis.properties", "classpath:eu/dnet/openaire/usermanagement/springContext-dnetOpenaireUsersService.properties"} )

@Configuration

@EnableRedisHttpSession

public class Config {

    private static Logger logger = Logger.getLogger(Config.class);

    @Value("${redis.host:localhost}")

    private String host;

    @Value("${redis.port:6379}")

    private String port;

    @Value("${redis.password:#{null}}")

    private String password;

    @Value("${webbapp.front.domain:.openaire.eu}")

    private String domain;

    @Bean

    public LettuceConnectionFactory connectionFactory() {

        logger.info(String.format("Redis connection listens to %s:%s ",host,port));

        LettuceConnectionFactory factory = new LettuceConnectionFactory(host,Integer.parseInt(port));

        if(password != null) factory.setPassword(password);

        return factory;

    }

    @Bean

    public CookieSerializer cookieSerializer() {

        logger.info("Cookie Serializer: Domain is "+domain);

        DefaultCookieSerializer serializer = new DefaultCookieSerializer();

        serializer.setCookieName("openAIRESession"); // <1>

        serializer.setCookiePath("/"); // <2>

//        serializer.setDomainNamePattern(""); //with value "" set's the domain of the service e.g scoobydoo.di.uoa.gr

        serializer.setDomainName(domain);

        return serializer;

    }

}

package eu.dnetlib.openaire.usermanagement;

import com.unboundid.ldap.sdk.LDAPException;

import eu.dnetlib.openaire.user.utils.EmailSender;

import eu.dnetlib.openaire.user.utils.InputValidator;

import org.apache.commons.validator.routines.EmailValidator;

import eu.dnetlib.openaire.user.utils.LDAPActions;

import eu.dnetlib.openaire.user.utils.VerificationActions;

import eu.dnetlib.openaire.user.utils.VerifyRecaptcha;

import eu.dnetlib.openaire.usermanagement.utils.UrlConstructor;

import org.apache.log4j.Logger;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.beans.factory.annotation.Value;

import org.springframework.web.context.support.SpringBeanAutowiringSupport;

import javax.mail.MessagingException;

import javax.mail.internet.AddressException;

import javax.mail.internet.InternetAddress;

import javax.servlet.ServletConfig;

import javax.servlet.ServletException;

import javax.servlet.http.HttpServlet;

import javax.servlet.http.HttpServletRequest;

import javax.servlet.http.HttpServletResponse;

import java.io.IOException;

import java.io.PrintWriter;

import java.sql.Timestamp;

import java.util.Date;

import java.util.UUID;

/**

 * Created by sofia on 20/10/2017.

 */

public class RegisterServlet extends HttpServlet {

    @Autowired

    private VerificationActions verificationActions;

    @Autowired

    private EmailSender emailSender;

    @Autowired

    private LDAPActions ldapActions;

    @Value("${google.recaptcha.secret}")

    private String secret;

    @Value("${google.recaptcha.key}")

    private String sitekey;

    public void init(ServletConfig config) throws ServletException {

        super.init(config);

        SpringBeanAutowiringSupport.processInjectionBasedOnServletContext(this,

                config.getServletContext());

        config.getServletContext().setAttribute("sitekey", sitekey);

    }

    private static Logger logger = Logger.getLogger(RegisterServlet.class);

        @Override

    protected void doPost(HttpServletRequest request, HttpServletResponse response) throws IOException {

        response.setContentType("text/html");

        PrintWriter printWriter = response.getWriter();

        String firstName = request.getParameter("first_name").trim();

        String lastName = request.getParameter("last_name").trim();

        String organization = request.getParameter("organization").trim();

        String username = request.getParameter("username").trim();

        String email =request.getParameter("email").trim();

        String confirmEmail = request.getParameter("email_conf").trim();

        String password = request.getParameter("password");

        String confirmPassword = request.getParameter("password_conf");

        String gRecaptchaResponse = request.getParameter("g-recaptcha-response");

        boolean isRecaptchaVerified = VerifyRecaptcha.verify(gRecaptchaResponse, secret);

        //System.out.println("RESPONSE " + gRecaptchaResponse);

        if (organization == null){

            logger.info("organization is null");

        }

        if (firstName != null && lastName != null &&  username != null && email!= null &&

                email.equals(confirmEmail) && password!= null && password.equals(confirmPassword) &&

                EmailValidator.getInstance().isValid(email) && InputValidator.isValidPassword(password) && isRecaptchaVerified) {

            try {

                 if (InputValidator.isValidUsername(username) && !ldapActions.usernameExists(username) && !ldapActions.emailExists(email)

                         && !ldapActions.isZombieUsersEmail(email) && !ldapActions.isZombieUsersUsername(username) && EmailValidator.getInstance().isValid(email)) {

                     ldapActions.createZombieUser(username, email, firstName, lastName, organization, password);

                     logger.info("Zombie user successfully created");

                     UUID verificationCode = UUID.randomUUID();

                     Date creationDate = new Date();

                     String vCode = verificationCode.toString();

                     Timestamp timestamp = new Timestamp(creationDate.getTime());

                     if (!verificationActions.verificationEntryExists(username)) {

                         verificationActions.addVerificationEntry(username, vCode, timestamp);

                     } else {

                         verificationActions.updateVerificationEntry(username, vCode, timestamp);

                     }

                     String resultPath = UrlConstructor.getRedirectUrl(request, "activate.jsp");

                     String resultPathWithVCode = UrlConstructor.getVerificationLink(resultPath, vCode);

                     String verificationCodeMsg = "<p>Hello " + username + ",</p>" +

                             "<p> A request has been made to verify your email and activate your OpenAIRE account. To activate your " +

                             "account, you will need to submit your username and this activation code in order to verify that the " +

                             "request was legitimate.</p>" +

                             "<p>" +

                             "The activation code is " + vCode +

                             "</p>" +

                             "Click the URL below and proceed with activating your password." +

                             "<p><a href=" + resultPathWithVCode + ">" + resultPathWithVCode + "</a></p>" +

                             "<p>The activation code is valid for 24 hours.</p>" +

                             "<p>Thank you,</p>" +

                             "<p>OpenAIRE technical team</p>";

                     String verificationCodeSubject = "Activate your OpenAIRE account";

                     emailSender.sendEmail(email, verificationCodeSubject, verificationCodeMsg);

                     response.sendRedirect("./activate.jsp");

                 } else {

                     validateUsername(request, username);

                     if (ldapActions.usernameExists(username) || ldapActions.isZombieUsersUsername(username)) {

                        request.getSession().setAttribute("username_message", "Username already exists! Choose another one.");

                        logger.info("Username already exists");

                     }

                     if (!EmailValidator.getInstance().isValid(email)) {

                         request.getSession().setAttribute("email_message", "Please enter a valid email.");

                         logger.info("Invalid email.");

                     }

                     if (ldapActions.emailExists(email)) {

                         request.getSession().setAttribute("email_message", "There is another user with this email.");

                         logger.info("There is another user with this email");

                     }

                     if (ldapActions.isZombieUsersEmail(email)) {

                         request.getSession().setAttribute("email_message", "You have already registered with this email address! Please check your email to activate your account or contact OpenAIRE <a href=\"https://www.openaire.eu/support/helpdesk\">helpdesk</a>.");

                         logger.info("There is another user with this email");

                     }

                     request.getSession().setAttribute("first_name", firstName);

                     request.getSession().setAttribute("msg_first_name_error_display", "display:none");

                     request.getSession().setAttribute("last_name", lastName);

                     request.getSession().setAttribute("msg_last_name_error_display", "display:none");

                     request.getSession().setAttribute("organization", organization);

                     request.getSession().setAttribute("username", username);

                     request.getSession().setAttribute("email", email);

                     request.getSession().setAttribute("msg_email_error_display", "display:none" );

                     request.getSession().setAttribute("email_conf", confirmEmail);

                     request.getSession().setAttribute("msg_email_conf_error_display", "display:none");

                     request.getSession().setAttribute("msg_email_validation_error_display", "display:none");

                     request.getSession().setAttribute("msg_password_error_display", "display:none" );

                     request.getSession().setAttribute("msg_pass_conf_error_display", "display:none" );

                     request.getSession().setAttribute("msg_invalid_password_display", "display:none");

                     request.getSession().setAttribute("recaptcha_error_display", "display:none");

                     response.sendRedirect("./register.jsp");

                 }

            } catch (MessagingException e) {

                logger.error("Error in sending email", e);

                request.getSession().setAttribute("message","Error sending email");

                response.sendRedirect(UrlConstructor.getRedirectUrl(request, ".register.jsp"));

                //TODO better handling of these exceprions

            } catch (Exception e) {

                logger.error("LDAP error in creating user", e);

                response.sendRedirect(UrlConstructor.getRedirectUrl(request, "error.jsp"));

            }

        } else {

            request.getSession().setAttribute("first_name", firstName);

            request.getSession().setAttribute("last_name", lastName);

            request.getSession().setAttribute("organization", organization);

            request.getSession().setAttribute("username", username);

            request.getSession().setAttribute("email", email);

            request.getSession().setAttribute("email_conf", confirmEmail);

            if (!InputValidator.isFilled(firstName)) {

                logger.info("No first name");

                request.getSession().setAttribute("msg_first_name_error_display", "display:block" );

            }

            if (!InputValidator.isFilled(lastName)) {

                logger.info("No last name");