* The new endpoint will only accept POSTs
* The request body should have two parameters
called 'type', 'username' and 'domain'
* 'type' will accept either 'administrator',
in which case only 'username' is needed,
or 'subscriber', in which case 'username'
and 'domain' will be needed
* The regular password reset email will be sent
to either the admin or the subscriber
Change-Id: If1457c8c625a95295e5e93b6637927e3905698d9
mr9.0
Flaviu Mates
5 years ago
parent
444a0d35b3
commit
be14a9242e
@ -0,0 +1,116 @@
|
|||||||
|
package NGCP::Panel::Controller::API::PasswordReset;
|
||||||
|
use NGCP::Panel::Utils::Generic qw(:all);
|
||||||
|
|
||||||
|
use Sipwise::Base;
|
||||||
|
|
||||||
|
use boolean qw(true);
|
||||||
|
use Data::HAL qw();
|
||||||
|
use Data::HAL::Link qw();
|
||||||
|
use HTTP::Headers qw();
|
||||||
|
use HTTP::Status qw(:constants);
|
||||||
|
|
||||||
|
|
||||||
|
sub allowed_methods{
|
||||||
|
return [qw/POST OPTIONS/];
|
||||||
|
}
|
||||||
|
|
||||||
|
use parent qw/NGCP::Panel::Role::Entities NGCP::Panel::Role::API::PasswordReset/;
|
||||||
|
|
||||||
|
sub api_description {
|
||||||
|
return 'Request a password reset using administrator email or subscriber SIP URI (username@domain).';
|
||||||
|
}
|
||||||
|
|
||||||
|
sub query_params {
|
||||||
|
return [
|
||||||
|
];
|
||||||
|
}
|
||||||
|
|
||||||
|
sub resource_name{
|
||||||
|
return 'passwordreset';
|
||||||
|
}
|
||||||
|
|
||||||
|
sub dispatch_path{
|
||||||
|
return '/api/passwordreset/';
|
||||||
|
}
|
||||||
|
|
||||||
|
sub relation{
|
||||||
|
return 'http://purl.org/sipwise/ngcp-api/#rel-passwordreset';
|
||||||
|
}
|
||||||
|
|
||||||
|
__PACKAGE__->set_config({
|
||||||
|
action => {
|
||||||
|
map { $_ => {
|
||||||
|
Args => 0,
|
||||||
|
Does => [qw(CheckTrailingSlash RequireSSL)],
|
||||||
|
Method => $_,
|
||||||
|
Path => __PACKAGE__->dispatch_path,
|
||||||
|
} } @{ __PACKAGE__->allowed_methods },
|
||||||
|
},
|
||||||
|
});
|
||||||
|
|
||||||
|
sub POST :Allow {
|
||||||
|
my ($self, $c) = @_;
|
||||||
|
|
||||||
|
my $res;
|
||||||
|
|
||||||
|
my $guard = $c->model('DB')->txn_scope_guard;
|
||||||
|
{
|
||||||
|
my $resource = $self->get_valid_post_data(
|
||||||
|
c => $c,
|
||||||
|
media_type => 'application/json',
|
||||||
|
);
|
||||||
|
last unless $resource;
|
||||||
|
|
||||||
|
my $form = $self->get_form($c);
|
||||||
|
last unless $self->validate_form(
|
||||||
|
c => $c,
|
||||||
|
resource => $resource,
|
||||||
|
form => $form,
|
||||||
|
);
|
||||||
|
|
||||||
|
if ($resource->{type} eq 'administrator') {
|
||||||
|
my $admin = $c->model('DB')->resultset('admins')->search({
|
||||||
|
'me.login' => $resource->{username}
|
||||||
|
})->first;
|
||||||
|
if($admin && $admin->email && $admin->can_reset_password) {
|
||||||
|
NGCP::Panel::Utils::Auth::initiate_password_reset($c, $admin);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
elsif($resource->{type} eq 'subscriber') {
|
||||||
|
my ($user, $domain) = ($resource->{username}, $resource->{domain});
|
||||||
|
my $subscriber = $c->model('DB')->resultset('voip_subscribers')->find({
|
||||||
|
username => $user,
|
||||||
|
'domain.domain' => $domain,
|
||||||
|
},{
|
||||||
|
join => 'domain',
|
||||||
|
});
|
||||||
|
|
||||||
|
if($subscriber) {
|
||||||
|
# don't clear web password, a user might just have guessed it and
|
||||||
|
# could then block the legit user out
|
||||||
|
my ($uuid_bin, $uuid_string);
|
||||||
|
UUID::generate($uuid_bin);
|
||||||
|
UUID::unparse($uuid_bin, $uuid_string);
|
||||||
|
$subscriber->password_resets->delete; # clear any old entries of this subscriber
|
||||||
|
$subscriber->password_resets->create({
|
||||||
|
uuid => $uuid_string,
|
||||||
|
timestamp => NGCP::Panel::Utils::DateTime::current_local->epoch + 300, #expire in 5 minutes
|
||||||
|
});
|
||||||
|
my $url = $c->uri_for_action('/subscriber/recover_webpassword')->as_string . '?uuid=' . $uuid_string;
|
||||||
|
NGCP::Panel::Utils::Email::password_reset($c, $subscriber, $url);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
$guard->commit;
|
||||||
|
|
||||||
|
$res = { success => 1, message => 'Please check your email for password reset instructions.' };
|
||||||
|
|
||||||
|
$c->response->status(HTTP_OK);
|
||||||
|
$c->response->body(JSON::to_json($res));
|
||||||
|
}
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
1;
|
||||||
|
|
||||||
|
# vim: set tabstop=4 expandtab:
|
||||||
@ -0,0 +1,68 @@
|
|||||||
|
package NGCP::Panel::Form::PasswordResetAPI;
|
||||||
|
|
||||||
|
use HTML::FormHandler::Moose;
|
||||||
|
use Email::Valid;
|
||||||
|
extends 'HTML::FormHandler';
|
||||||
|
|
||||||
|
has_field 'username' => (
|
||||||
|
type => 'Text',
|
||||||
|
required => 1,
|
||||||
|
label => 'Username',
|
||||||
|
);
|
||||||
|
|
||||||
|
has_field 'domain' => (
|
||||||
|
type => 'Text',
|
||||||
|
required => 0,
|
||||||
|
label => 'Domain',
|
||||||
|
);
|
||||||
|
|
||||||
|
has_field 'type' => (
|
||||||
|
type => 'Select',
|
||||||
|
options => [
|
||||||
|
{ value => 'administrator', label => 'Administrator' },
|
||||||
|
{ value => 'subscriber', label => 'Subscriber' },
|
||||||
|
],
|
||||||
|
required => 1,
|
||||||
|
label => 'Type',
|
||||||
|
);
|
||||||
|
|
||||||
|
has_block 'fields' => (
|
||||||
|
tag => 'div',
|
||||||
|
class => [qw/modal-body/],
|
||||||
|
render_list => [qw/username/],
|
||||||
|
);
|
||||||
|
|
||||||
|
sub validate {
|
||||||
|
my ($self) = @_;
|
||||||
|
my $c = $self->ctx;
|
||||||
|
return unless $c;
|
||||||
|
|
||||||
|
my $resource = Storable::dclone($self->values);
|
||||||
|
if ($resource->{type} eq 'administrator') {
|
||||||
|
my $address = $resource->{username}.'@ngcp.local';
|
||||||
|
unless (Email::Valid->address($address)) {
|
||||||
|
my $err = "'username' is not valid.";
|
||||||
|
$c->log->error($err);
|
||||||
|
$self->field('username')->add_error($err);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
elsif ($resource->{type} eq 'subscriber') {
|
||||||
|
my $err;
|
||||||
|
if (!$resource->{domain}) {
|
||||||
|
$err = "'domain' field is required when requesting a password reset for a subscriber";
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
my $address = $resource->{username}.'@'.$resource->{domain};
|
||||||
|
unless (Email::Valid->address($address)) {
|
||||||
|
$err = "username and domain combination is not valid.";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if ($err) {
|
||||||
|
$c->log->error($err);
|
||||||
|
$self->field('username')->add_error($err);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
1;
|
||||||
|
# vim: set tabstop=4 expandtab:
|
||||||
@ -0,0 +1,24 @@
|
|||||||
|
package NGCP::Panel::Role::API::PasswordReset;
|
||||||
|
use NGCP::Panel::Utils::Generic qw(:all);
|
||||||
|
|
||||||
|
use Sipwise::Base;
|
||||||
|
|
||||||
|
use parent 'NGCP::Panel::Role::API';
|
||||||
|
|
||||||
|
|
||||||
|
use boolean qw(true);
|
||||||
|
use Data::HAL qw();
|
||||||
|
use Data::HAL::Link qw();
|
||||||
|
use HTTP::Status qw(:constants);
|
||||||
|
|
||||||
|
|
||||||
|
sub _item_rs {
|
||||||
|
}
|
||||||
|
|
||||||
|
sub get_form {
|
||||||
|
my ($self, $c) = @_;
|
||||||
|
return NGCP::Panel::Form::get("NGCP::Panel::Form::PasswordResetAPI", $c);
|
||||||
|
}
|
||||||
|
|
||||||
|
1;
|
||||||
|
# vim: set tabstop=4 expandtab:
|
||||||
Loading…
Reference in new issue