416 lines
No EOL
14 KiB
C#
416 lines
No EOL
14 KiB
C#
using System;
|
|
using System.Linq;
|
|
using System.Net;
|
|
using System.Web.Mvc;
|
|
using System.Web.Routing;
|
|
using AutoMapper;
|
|
using log4net;
|
|
using Microsoft.Web.Services3.Addressing;
|
|
using WebsitePanel.Providers.HostedSolution;
|
|
using WebsitePanel.WebDav.Core.Config;
|
|
using WebsitePanel.WebDav.Core.Security.Authentication;
|
|
using WebsitePanel.WebDav.Core.Security.Cryptography;
|
|
using WebsitePanel.WebDav.Core.Wsp.Framework;
|
|
using WebsitePanel.WebDavPortal.CustomAttributes;
|
|
using WebsitePanel.WebDavPortal.Models;
|
|
using WebsitePanel.WebDavPortal.Models.Account;
|
|
using WebsitePanel.WebDavPortal.Models.Common;
|
|
using WebsitePanel.WebDavPortal.Models.Common.EditorTemplates;
|
|
using WebsitePanel.WebDavPortal.Models.Common.Enums;
|
|
using WebsitePanel.WebDavPortal.UI.Routes;
|
|
using WebsitePanel.WebDav.Core.Interfaces.Security;
|
|
using WebsitePanel.WebDav.Core;
|
|
|
|
namespace WebsitePanel.WebDavPortal.Controllers
|
|
{
|
|
[LdapAuthorization]
|
|
public class AccountController : BaseController
|
|
{
|
|
private readonly ICryptography _cryptography;
|
|
private readonly IAuthenticationService _authenticationService;
|
|
private readonly ISmsAuthenticationService _smsAuthService;
|
|
private readonly ILog Log;
|
|
|
|
public AccountController(ICryptography cryptography, IAuthenticationService authenticationService, ISmsAuthenticationService smsAuthService)
|
|
{
|
|
_cryptography = cryptography;
|
|
_authenticationService = authenticationService;
|
|
_smsAuthService = smsAuthService;
|
|
|
|
Log = LogManager.GetLogger(this.GetType());
|
|
}
|
|
|
|
[HttpGet]
|
|
[AllowAnonymous]
|
|
public ActionResult Login()
|
|
{
|
|
if (WspContext.User != null && WspContext.User.Identity.IsAuthenticated)
|
|
{
|
|
return RedirectToRoute(FileSystemRouteNames.ShowContentPath, new { org = WspContext.User.OrganizationId });
|
|
}
|
|
|
|
var model = new AccountModel();
|
|
|
|
var settings = WspContext.Services.Organizations.GetWebDavSystemSettings();
|
|
|
|
if (settings != null)
|
|
{
|
|
model.PasswordResetEnabled = settings.GetValueOrDefault(EnterpriseServer.SystemSettings.WEBDAV_PASSWORD_RESET_ENABLED_KEY, false);
|
|
|
|
}
|
|
|
|
return View(model);
|
|
}
|
|
|
|
[HttpPost]
|
|
[AllowAnonymous]
|
|
public ActionResult Login(AccountModel model)
|
|
{
|
|
var user = _authenticationService.LogIn(model.Login, model.Password);
|
|
|
|
ViewBag.LdapIsAuthentication = user != null;
|
|
|
|
if (user != null && user.Identity.IsAuthenticated)
|
|
{
|
|
_authenticationService.CreateAuthenticationTicket(user);
|
|
|
|
return RedirectToRoute(FileSystemRouteNames.ShowContentPath, new { org = WspContext.User.OrganizationId });
|
|
}
|
|
|
|
return View(new AccountModel { LdapError = "The user name or password is incorrect" });
|
|
}
|
|
|
|
[HttpGet]
|
|
public ActionResult Logout()
|
|
{
|
|
_authenticationService.LogOut();
|
|
|
|
Session.Clear();
|
|
|
|
return RedirectToRoute(AccountRouteNames.Login);
|
|
}
|
|
|
|
[HttpGet]
|
|
public ActionResult UserProfile()
|
|
{
|
|
var model = GetUserProfileModel(WspContext.User.ItemId, WspContext.User.AccountId);
|
|
|
|
return View(model);
|
|
}
|
|
|
|
[HttpPost]
|
|
[ValidateAntiForgeryToken]
|
|
public ActionResult UserProfile(UserProfile model)
|
|
{
|
|
if (!ModelState.IsValid)
|
|
{
|
|
return View(model);
|
|
}
|
|
|
|
int result = UpdateUserProfile(WspContext.User.ItemId, WspContext.User.AccountId, model);
|
|
|
|
AddMessage(MessageType.Success, Resources.UI.UserProfileSuccessfullyUpdated);
|
|
|
|
return View(model);
|
|
}
|
|
|
|
public JsonResult PhoneNumberIsAvailible()
|
|
{
|
|
var value = Request.QueryString.AllKeys.Any() ? Request.QueryString.Get(0) :string.Empty;
|
|
|
|
var result = !WspContext.Services.Organizations.CheckPhoneNumberIsInUse(WspContext.User.ItemId,
|
|
value, WspContext.User.Login);
|
|
|
|
return Json(result, JsonRequestBehavior.AllowGet);
|
|
}
|
|
|
|
[HttpGet]
|
|
public ActionResult PasswordChange()
|
|
{
|
|
var model = new PasswordChangeModel();
|
|
|
|
return View(model);
|
|
}
|
|
|
|
[HttpPost]
|
|
public ActionResult PasswordChange(PasswordChangeModel model)
|
|
{
|
|
if (!ModelState.IsValid)
|
|
{
|
|
return View(model);
|
|
}
|
|
|
|
if (_authenticationService.ValidateAuthenticationData(WspContext.User.Login, model.OldPassword) == false)
|
|
{
|
|
AddMessage(MessageType.Error, Resources.Messages.OldPasswordIsNotCorrect);
|
|
|
|
return View(model);
|
|
}
|
|
|
|
WspContext.Services.Organizations.SetUserPassword(
|
|
WspContext.User.ItemId, WspContext.User.AccountId,
|
|
model.PasswordEditor.NewPassword);
|
|
|
|
var user = _authenticationService.LogIn(WspContext.User.Login, model.PasswordEditor.NewPassword);
|
|
|
|
_authenticationService.CreateAuthenticationTicket(user);
|
|
|
|
AddMessage(MessageType.Success, Resources.Messages.PasswordSuccessfullyChanged);
|
|
|
|
return RedirectToRoute(AccountRouteNames.UserProfile);
|
|
}
|
|
|
|
[HttpGet]
|
|
[AllowAnonymous]
|
|
public ActionResult PasswordResetEmail()
|
|
{
|
|
var model = new PasswordResetEmailModel();
|
|
|
|
return View(model);
|
|
}
|
|
|
|
[HttpPost]
|
|
[AllowAnonymous]
|
|
public ActionResult PasswordResetEmail(PasswordResetEmailModel model)
|
|
{
|
|
if (!ModelState.IsValid)
|
|
{
|
|
return View(model);
|
|
}
|
|
|
|
var exchangeAccount = WspContext.Services.ExchangeServer.GetAccountByAccountNameWithoutItemId(model.Email);
|
|
|
|
if (exchangeAccount == null)
|
|
{
|
|
AddMessage(MessageType.Error, Resources.Messages.AccountNotFound);
|
|
|
|
return View(model);
|
|
}
|
|
|
|
WspContext.Services.Organizations.SendResetUserPasswordEmail(exchangeAccount.ItemId, exchangeAccount.AccountId, Resources.Messages.PasswordResetUserReason, exchangeAccount.PrimaryEmailAddress, false);
|
|
|
|
return View("PasswordResetEmailSent");
|
|
}
|
|
|
|
|
|
[HttpGet]
|
|
[AllowAnonymous]
|
|
public ActionResult PasswordResetSms(Guid token)
|
|
{
|
|
var model = new PasswordResetSmsModel();
|
|
|
|
var accessToken = WspContext.Services.Organizations.GetPasswordresetAccessToken(token);
|
|
|
|
model.IsTokenExist = accessToken != null;
|
|
|
|
if (model.IsTokenExist == false)
|
|
{
|
|
AddMessage(MessageType.Error, Resources.Messages.IncorrectPasswordResetUrl);
|
|
|
|
return View(model);
|
|
}
|
|
|
|
|
|
if (accessToken != null && accessToken.IsSmsSent == false)
|
|
{
|
|
var user = WspContext.Services.Organizations.GetUserGeneralSettings(accessToken.ItemId,
|
|
accessToken.AccountId);
|
|
|
|
var result = WspContext.Services.Organizations.SendResetUserPasswordPincodeSms(token, user.MobilePhone);
|
|
|
|
if (result.IsSuccess)
|
|
{
|
|
AddMessage(MessageType.Success, Resources.Messages.SmsWasSent);
|
|
}
|
|
else
|
|
{
|
|
AddMessage(MessageType.Error, Resources.Messages.SmsWasNotSent);
|
|
}
|
|
}
|
|
|
|
return View(model);
|
|
}
|
|
|
|
[HttpPost]
|
|
[AllowAnonymous]
|
|
public ActionResult PasswordResetSms(Guid token, PasswordResetSmsModel model)
|
|
{
|
|
if (!ModelState.IsValid)
|
|
{
|
|
return View(model);
|
|
}
|
|
|
|
if (_smsAuthService.VerifyResponse(token, model.Sms))
|
|
{
|
|
var tokenEntity = WspContext.Services.Organizations.GetPasswordresetAccessToken(token);
|
|
|
|
Session[WebDavAppConfigManager.Instance.SessionKeys.PasswordResetSmsKey] = model.Sms;
|
|
Session[WebDavAppConfigManager.Instance.SessionKeys.ItemId] = tokenEntity.ItemId;
|
|
|
|
return RedirectToRoute(AccountRouteNames.PasswordResetFinalStep);
|
|
}
|
|
|
|
AddMessage(MessageType.Error, Resources.Messages.IncorrectSmsResponse);
|
|
|
|
return View(model);
|
|
}
|
|
|
|
|
|
[HttpGet]
|
|
[AllowAnonymous]
|
|
public ActionResult PasswordResetFinalStep(Guid token, string pincode)
|
|
{
|
|
var result = VerifyPincode(token, pincode);
|
|
|
|
if (result != null)
|
|
{
|
|
return result;
|
|
}
|
|
|
|
|
|
var model = new PasswordEditor();
|
|
|
|
return View(model);
|
|
}
|
|
|
|
[HttpPost]
|
|
[AllowAnonymous]
|
|
public ActionResult PasswordResetFinalStep(Guid token, string pincode, PasswordEditor model)
|
|
{
|
|
if (!ModelState.IsValid)
|
|
{
|
|
return View(model);
|
|
}
|
|
|
|
var result = VerifyPincode(token, pincode);
|
|
|
|
if (result != null)
|
|
{
|
|
return result;
|
|
}
|
|
|
|
var tokenEntity = WspContext.Services.Organizations.GetPasswordresetAccessToken(token);
|
|
|
|
WspContext.Services.Organizations.SetUserPassword(
|
|
tokenEntity.ItemId, tokenEntity.AccountId,
|
|
model.NewPassword);
|
|
|
|
WspContext.Services.Organizations.DeletePasswordresetAccessToken(token);
|
|
|
|
AddMessage(MessageType.Success, Resources.Messages.PasswordSuccessfullyChanged);
|
|
|
|
return RedirectToRoute(AccountRouteNames.Login);
|
|
}
|
|
|
|
[HttpGet]
|
|
[AllowAnonymous]
|
|
public ActionResult PasswordResetSendSms(Guid token)
|
|
{
|
|
var accessToken = WspContext.Services.Organizations.GetPasswordresetAccessToken(token);
|
|
|
|
if (accessToken == null)
|
|
{
|
|
return RedirectToRoute(AccountRouteNames.PasswordResetSms);
|
|
}
|
|
|
|
var user = WspContext.Services.Organizations.GetUserGeneralSettings(accessToken.ItemId,
|
|
accessToken.AccountId);
|
|
|
|
var result = WspContext.Services.Organizations.SendResetUserPasswordPincodeSms(accessToken.AccessTokenGuid,
|
|
user.MobilePhone);
|
|
|
|
if (result.IsSuccess)
|
|
{
|
|
AddMessage(MessageType.Success, Resources.Messages.SmsWasSent);
|
|
}
|
|
else
|
|
{
|
|
AddMessage(MessageType.Error, Resources.Messages.SmsWasNotSent);
|
|
}
|
|
|
|
return RedirectToRoute(AccountRouteNames.PasswordResetSms);
|
|
}
|
|
|
|
#region Helpers
|
|
|
|
/// <summary>
|
|
/// Verify pincode, if it's absent - verifying pincode from session
|
|
/// </summary>
|
|
/// <param name="token">Password reset token</param>
|
|
/// <param name="pincode">Pincode to verify if session pincode is absent</param>
|
|
private ActionResult VerifyPincode(Guid token, string pincode)
|
|
{
|
|
var smsResponse = Session[WebDavAppConfigManager.Instance.SessionKeys.PasswordResetSmsKey] as string;
|
|
|
|
if (string.IsNullOrEmpty(pincode) == false)
|
|
{
|
|
smsResponse = pincode;
|
|
}
|
|
|
|
if (_smsAuthService.VerifyResponse(token, smsResponse) == false)
|
|
{
|
|
AddMessage(MessageType.Error, Resources.Messages.IncorrectSmsResponse);
|
|
|
|
return RedirectToRoute(AccountRouteNames.PasswordResetSms);
|
|
}
|
|
|
|
var tokenEntity = WspContext.Services.Organizations.GetPasswordresetAccessToken(token);
|
|
|
|
Session[WebDavAppConfigManager.Instance.SessionKeys.ItemId] = tokenEntity.ItemId;
|
|
|
|
return null;
|
|
}
|
|
|
|
private UserProfile GetUserProfileModel(int itemId, int accountId)
|
|
{
|
|
var user = WspContext.Services.Organizations.GetUserGeneralSettingsWithExtraData(itemId, accountId);
|
|
|
|
return Mapper.Map<OrganizationUser, UserProfile>(user);
|
|
}
|
|
|
|
private int UpdateUserProfile(int itemId, int accountId, UserProfile model)
|
|
{
|
|
var user = WspContext.Services.Organizations.GetUserGeneralSettings(itemId, accountId);
|
|
|
|
return WspContext.Services.Organizations.SetUserGeneralSettings(
|
|
itemId, accountId,
|
|
model.DisplayName,
|
|
string.Empty,
|
|
false,
|
|
user.Disabled,
|
|
user.Locked,
|
|
|
|
model.FirstName,
|
|
model.Initials,
|
|
model.LastName,
|
|
|
|
model.Address,
|
|
model.City,
|
|
model.State,
|
|
model.Zip,
|
|
model.Country,
|
|
|
|
user.JobTitle,
|
|
user.Company,
|
|
user.Department,
|
|
user.Office,
|
|
user.Manager == null ? null : user.Manager.AccountName,
|
|
|
|
model.BusinessPhone,
|
|
model.Fax,
|
|
model.HomePhone,
|
|
model.MobilePhone,
|
|
model.Pager,
|
|
model.WebPage,
|
|
model.Notes,
|
|
model.ExternalEmail,
|
|
user.SubscriberNumber,
|
|
user.LevelId,
|
|
user.IsVIP,
|
|
user.UserMustChangePassword);
|
|
}
|
|
|
|
#endregion
|
|
|
|
}
|
|
} |