UserController.java

Go to the documentation of this file.

package org.usermanagement.controller;

import java.util.List;

import javax.servlet.http.HttpServletRequest;

import org.openkilda.auth.context.ServerContext;
import org.openkilda.auth.model.Permissions;
import org.openkilda.constants.IConstants;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.http.HttpStatus;
import org.springframework.http.MediaType;
import org.springframework.web.bind.annotation.PathVariable;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.ResponseStatus;
import org.springframework.web.bind.annotation.RestController;
import org.usermanagement.model.Message;
import org.usermanagement.model.Role;
import org.usermanagement.model.UserInfo;
import org.usermanagement.service.RoleService;
import org.usermanagement.service.UserService;

@RestController
@RequestMapping(path = "/user", produces = MediaType.APPLICATION_JSON_VALUE)
public class UserController {

    private static final Logger LOGGER = LoggerFactory.getLogger(UserController.class);

    @Autowired
    private UserService userService;

    @Autowired
    private RoleService roleService;
    
    @Autowired
    private ServerContext serverContext;
    
    @ResponseStatus(HttpStatus.OK)
    @RequestMapping(value = "/role/{role_id}", method = RequestMethod.GET)
    @Permissions(values = {IConstants.Permission.UM_ROLE_VIEW_USERS})
    public Role getUsersByRoleId(@PathVariable("role_id") final Long roleId) {
        LOGGER.info("[getUsersByRoleId] (roleId: " + roleId + ")");
        return roleService.getUserByRoleId(roleId);
    }

    @ResponseStatus(HttpStatus.OK)
    @RequestMapping(method = RequestMethod.POST)
    @Permissions(values = {IConstants.Permission.UM_USER_ADD})
    public UserInfo createUser(@RequestBody final UserInfo userInfo) {
        LOGGER.info("[createUser] (username: " + userInfo.getUsername() + ", name: " + userInfo.getName() + ")");
        return userService.createUser(userInfo);
    }

    @ResponseStatus(HttpStatus.OK)
    @RequestMapping(value = "/{user_id}", method = RequestMethod.PUT)
    @Permissions(values = {IConstants.Permission.UM_USER_EDIT})
    public UserInfo updateUser(@RequestBody final UserInfo userInfo, @PathVariable("user_id") final Long userId) {
        LOGGER.info("[updateUser] (id: " + userId + ")");
        userInfo.setUserId(userId);
        return userService.updateUser(userInfo, userId);
    }

    @ResponseStatus(HttpStatus.OK)
    @RequestMapping(method = RequestMethod.GET)
    public List<UserInfo> getUsers() {
        LOGGER.info("[getUsers]");
        return userService.getAllUsers();
    }

    @ResponseStatus(HttpStatus.OK)
    @RequestMapping(value = "/{user_id}", method = RequestMethod.GET)
    public UserInfo getUserById(@PathVariable("user_id") final Long userId) {
        LOGGER.info("[getUserById] (id: " + userId + ")");
        UserInfo userInfo = userService.getUserById(userId);
        return userInfo;
    }


    @ResponseStatus(HttpStatus.NO_CONTENT)
    @RequestMapping(value = "/{user_id}", method = RequestMethod.DELETE)
    @Permissions(values = {IConstants.Permission.UM_USER_DELETE})
    public void deleteUserById(@PathVariable("user_id") final Long userId) {
        LOGGER.info("[deleteUserById] (id: " + userId + ")");
        userService.deleteUserById(userId);
    }

    @ResponseStatus(HttpStatus.OK)
    @RequestMapping(value = "/role/{role_id}", method = RequestMethod.PUT)
    @Permissions(values = {IConstants.Permission.UM_ASSIGN_ROLE_TO_USERS})
    public Role assignUsersByRoleId(@PathVariable("role_id") final Long roleId, @RequestBody final Role role) {
        LOGGER.info("[assignUsersByRoleId] (roleId: " + roleId + ")");
        return userService.assignUserByRoleId(roleId, role);
    }

    @ResponseStatus(HttpStatus.OK)
    @RequestMapping(value = "/changePassword/{user_id}", method = RequestMethod.PUT)
    public Message changePassword(@RequestBody final UserInfo userInfo, @PathVariable("user_id") final Long userId) {
        LOGGER.info("[changePassword] (userId: " + userId + ")");
        userService.changePassword(userInfo, userId);
        return new Message("Password has been changed successfully.");
    }

    @ResponseStatus(HttpStatus.OK)
    @RequestMapping(value = "/resetpassword/{id}", method = RequestMethod.GET)
    @Permissions(values = {IConstants.Permission.UM_USER_RESET})
    public Object resetPassword(@PathVariable("id") final Long userId) {
        LOGGER.info("[resetPassword] (userId: " + userId + ")");
        userService.resetPassword(userId, false);
        return new Message("Password has been sent to your EmailId");
    }

    @ResponseStatus(HttpStatus.OK)
    @RequestMapping(value = "/admin/resetpassword/{id}", method = RequestMethod.GET)
    @Permissions(values = {IConstants.Permission.UM_USER_RESET_ADMIN})
    public Object resetPasswordByAdmin(@PathVariable("id") final Long userId) {
        LOGGER.info("[resetPasswordByAdmin] (userId: " + userId + ")");
        return userService.resetPassword(userId, true);
    }

    @ResponseStatus(HttpStatus.OK)
    @RequestMapping(value = "/reset2fa/{user_id}", method = RequestMethod.PUT)
    @Permissions(values = {IConstants.Permission.UM_USER_RESET2FA})
    public Message resetTwofa(@PathVariable("user_id") final Long userId) {
        LOGGER.info("[resetTwofa] (userId: " + userId + ")");
        userService.reset2fa(userId);
        return new Message("2FA has been reset for the user.");
    }
    
    @ResponseStatus(HttpStatus.OK)
    @RequestMapping(value = "/settings", method = RequestMethod.GET)
    public String getUserSettings() {
        LOGGER.info("[getUserSettings] (userId: " + serverContext.getRequestContext().getUserId() + ")");
        return userService.getUserSettings(serverContext.getRequestContext().getUserId());
    }

    @ResponseStatus(HttpStatus.OK)
    @RequestMapping(value = "/settings", method = RequestMethod.PATCH)
    public String saveOrUpdateSettings(@RequestBody final String data) {
        UserInfo userInfo = new UserInfo();
        userInfo.setData(data);
        userInfo.setUserId(serverContext.getRequestContext().getUserId());
        LOGGER.info("[saveOrUpdateSettings] (userId: " + userInfo.getUserId() + ")");
        userService.saveOrUpdateSettings(userInfo);
        return data;
    }
    
    @ResponseStatus(HttpStatus.OK)
    @RequestMapping(value = "/validateotp", method = RequestMethod.POST)
    public boolean validateOtp(@RequestBody final UserInfo userInfo,
            final HttpServletRequest request) {
        LOGGER.info(
                "[validateOTP] (userId: " + serverContext.getRequestContext().getUserId() + ")");
        return userService.validateOTP(serverContext.getRequestContext().getUserId(),
                userInfo.getCode());
    }
}