Source for file change_password.act.php

<?php
 
/**
 * @package polyphony.user
 * 
 * @copyright Copyright &copy; 2005, Middlebury College
 * @license http://www.gnu.org/copyleft/gpl.html GNU General Public License (GPL)
 *
 * @version $Id: change_password.act.php,v 1.6 2007/09/19 14:04:58 adamfranco Exp $
 */ 
 
require_once(POLYPHONY."/main/library/AbstractActions/MainWindowAction.class.php");
 
/**
 * This file will allow the user to change their HarmoniDB password.
 *
 * @since 10/24/05
 * @author Christopher W. Shubert
 * 
 * @package polyphony.user
 * 
 * @copyright Copyright &copy; 2005, Middlebury College
 * @license http://www.gnu.org/copyleft/gpl.html GNU General Public License (GPL)
 *
 * @version $Id: change_password.act.php,v 1.6 2007/09/19 14:04:58 adamfranco Exp $
 */
class change_passwordAction 
    extends MainWindowAction
{
    /**
     * Check Authorizations
     * 
     * @return boolean 
     * @access public
     * @since 4/26/05
     */
    function isAuthorizedToExecute () {
        $authN = Services::getService("AuthN");
        return $authN->isUserAuthenticated(new Type ("Authentication", 
            "edu.middlebury.harmoni", "Harmoni DB"));
    }
    
    function getUnauthorizedMessage() {
        return _("You must be currently Authenticated under 'Harmoni DB'");
    }
    
    /**
     * Return the heading text for this action, or an empty string.
     * 
     * @return string 
     * @access public
     * @since 4/26/05
     */
    function getHeadingText () {
        return _("Change Your 'Harmoni DB' Password");
    }
    
    /**
     * Build the content for this action
     * 
     * @return void 
     * @access public
     * @since 4/26/05
     */
    function buildContent () {
        $authN = Services::getService("AuthN");
        
        $dbAuthType = new Type ("Authentication", "edu.middlebury.harmoni",
            "Harmoni DB");
        
        $centerPane =$this->getActionRows();
        
        $id =$authN->getUserId($dbAuthType);
        $cacheName = 'change_password_wizard_'.$id->getIdString();
        
        $this->runWizard($cacheName, $centerPane);
    }
    
    /**
     * creates the wizard
     * 
     * @return object Wizard 
     * @access public
     * @since 10/24/05
     */
    function createWizard() {
        $harmoni = Harmoni::Instance();
        $wizard = SimpleWizard::withText(
            "\n<h2>"._("Old Password")."</h2>".
            "\n<br \>[[old_password]]".
            "\n<h2>"._("New Password")."</h2>".
            "\n"._("Please enter your new password twice").
            "\n<br />[[new_password]]".
            "\n<br />[[n_p_again]]".
            "<table width='100%' border='0' style='margin-top:20px' >\n".
            "<tr>\n".
            "</td>\n".
            "<td align='left' width='50%'>\n".
            "[[_cancel]]".
            "<td align='right' width='50%'>\n".
            "[[_save]]".
            "</td></tr></table>");
        $error = $harmoni->request->get("error");
        if (!is_null($error))
            print $error;
            
        $pass =$wizard->addComponent("old_password", new WPasswordField());
        $pass =$wizard->addComponent("new_password", new WPasswordField());
        $pass =$wizard->addComponent("n_p_again", new WPasswordField());
        
        $save =$wizard->addComponent("_save", 
            WSaveButton::withLabel("Change Password"));
        $cancel =$wizard->addComponent("_cancel", new WCancelButton());
 
        return $wizard;
    }
    
    /**
     * Save our results. Tearing down and unsetting the Wizard is handled by
     * in {@link runWizard()} and does not need to be implemented here.
     * 
     * @param string $cacheName 
     * @return boolean TRUE if save was successful and tear-down/cleanup of the
     *         Wizard should ensue.
     * @access public
     * @since 10/24/05
     */
    function saveWizard ($cacheName) {
        $harmoni = Harmoni::Instance();
        $authN = Services::getService("AuthN");
        $tokenM = Services::getService("AgentTokenMapping");
        $wizard =$this->getWizard($cacheName);
        
        $properties = $wizard->getAllValues();
        
        $dbAuthType = new Type ("Authentication", "edu.middlebury.harmoni",
            "Harmoni DB");        
        $id =$authN->getUserId($dbAuthType);
        $it =$tokenM->getMappingsForAgentId($id);
 
        while ($it->hasNext()) {
            $mapping =$it->next();
            
            if ($mapping->getAuthenticationType() == $dbAuthType)
                $tokens =$mapping->getTokens();
        }
        if (isset($tokens)) {
            $authNMethodManager = Services::getService("AuthNMethodManager");
            $dbAuthMethod =$authNMethodManager->getAuthNMethodForType($dbAuthType);
                
            $uname = $tokens->getUsername();
            
            // Validate the old password
            $oldTokens = $dbAuthMethod->createTokens(
                            array(    'username' => $uname, 
                                    'password' => $properties['old_password']));
            if (!$dbAuthMethod->authenticateTokens($oldTokens)) {
                $error = "Invalid old password";
                $localizedError = _("Invalid old password, please try again.")."\n<br/>";
            }
            
            // Reset the password if old tokens are valid and new tokens are valid
            else if (($properties['new_password'] != '') && 
                ($properties['new_password'] == $properties['n_p_again'])) {
                    
                // Log the action
                if (Services::serviceRunning("Logging")) {
                    $loggingManager = Services::getService("Logging");
                    $log =$loggingManager->getLogForWriting("Authentication");
                    $formatType = new Type("logging", "edu.middlebury", "AgentsAndNodes",
                                    "A format in which the acting Agent[s] and the target nodes affected are specified.");
                    $priorityType = new Type("logging", "edu.middlebury", "Event_Notice",
                                    "Normal events.");
                    
                    $item = new AgentNodeEntryItem("Modify Agent", "Password changed for:\n<br/>&nbsp; &nbsp; &nbsp;".$uname."\n<br/>&nbsp; &nbsp; &nbsp;".$dbAuthType->getKeyword());
                    $item->addAgentId($id);
                    
                    $log->appendLogWithTypes($item,    $formatType, $priorityType);
                }
 
                $t_array = array("username" => $uname, 
                    "password" => $properties['new_password']);
                $authNTokens =$dbAuthMethod->createTokens($t_array);
                
                // Add it to the system and login with new password
                if ($dbAuthMethod->supportsTokenUpdates()) {
                    $dbAuthMethod->updateTokens($tokens, $authNTokens);
                    $harmoni->request->startNamespace("harmoni-authentication");
                    $harmoni->request->set("username", $uname);
                    $harmoni->request->set("password", 
                        $properties['new_password']);
                    $harmoni->request->endNamespace();
                    $authN->authenticateUser($dbAuthType);
                    return TRUE;
                }
                
            } else {
                $error = "Invalid new password";
                $localizedError = _("Invalid new password, please try again.")."\n<br/>";
            }
         } 
         if (isset($error)) {
             // Log the action
            if (Services::serviceRunning("Logging")) {
                $loggingManager = Services::getService("Logging");
                $log =$loggingManager->getLogForWriting("Authentication");
                $formatType = new Type("logging", "edu.middlebury", "AgentsAndNodes",
                                "A format in which the acting Agent[s] and the target nodes affected are specified.");
                $priorityType = new Type("logging", "edu.middlebury", "Error",
                                "Normal events.");
                
                $item = new AgentNodeEntryItem("Modify Agent", "Password change error:\n<br/>&nbsp; &nbsp; &nbsp;".$error."\n<br/>for:\n<br/>&nbsp; &nbsp; &nbsp;".$uname."\n<br/>&nbsp; &nbsp; &nbsp;".$dbAuthType->getKeyword());
                $item->addAgentId($id);
                
                $log->appendLogWithTypes($item,    $formatType, $priorityType);
            }
             
             $this->closeWizard($cacheName);
             RequestContext::locationHeader($harmoni->request->quickURL("user",
                 "change_password", array("error" => $localizedError)));
        }
    }
    
    /**
     * Return the URL that this action should return to when completed.
     * 
     * @return string 
     * @access public
     * @since 10/24/05
     */
    function getReturnUrl () {
        $harmoni = Harmoni::instance();
        
        return $harmoni->request->quickURL("user", "main");
    }
}
?>