Kolpack-Software-Consulting/MileageTraker
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Reset password implementation

Browse Source
This commit is contained in:
poprhythm
2013-01-02 14:18:12 -05:00
parent e88065e925
commit 4af8981a10
17 changed files with 338 additions and 47 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Web/Controllers/AccountController.cs
+105 -35
View File
@@ -2,6 +2,8 @@
using System.Web.Mvc;
using System.Web.Security;
using MileageTraker.Web.DAL;
using MileageTraker.Web.Email;
using MileageTraker.Web.Utility;
using MileageTraker.Web.ViewModels.Account;
namespace MileageTraker.Web.Controllers
@@ -10,10 +12,10 @@ namespace MileageTraker.Web.Controllers
public class AccountController : ControllerBase
{
[AllowAnonymous]
public ActionResult Login(string returnUrl)
public ActionResult Login(string returnUrl, string username)
{
ViewBag.ReturnUrl = returnUrl;
return View();
return View(new LoginViewModel{Username = username});
}
[HttpPost]
@@ -40,7 +42,12 @@ namespace MileageTraker.Web.Controllers
}
catch (UserLockedOutException)
{
ModelState.AddModelError("", "Too many failed password attempts for " + model.Username + ". Account is locked.");
ModelState.AddModelError("",
"Too many failed password attempts for " +
model.Username + ". Account is locked. " +
@"Use 'Forgot Password' or contact " +
"administrator to unlock."
);
}
}
@@ -58,37 +65,7 @@ namespace MileageTraker.Web.Controllers
return RedirectToAction("Index", "CreateLog");
}
//[AllowAnonymous]
//public ActionResult Register()
//{
// return View();
//}
//[HttpPost]
//[AllowAnonymous]
//[ValidateAntiForgeryToken]
//public ActionResult Register(RegisterModel model)
//{
// if (ModelState.IsValid)
// {
// // Attempt to register the user
// try
// {
// WebSecurity.CreateUserAndAccount(model.UserName, model.Password);
// WebSecurity.Login(model.UserName, model.Password);
// return RedirectToAction("Login");
// }
// catch (MembershipCreateUserException e)
// {
// ModelState.AddModelError("", ErrorCodeToString(e.StatusCode));
// }
// }
// // If we got this far, something failed, redisplay form
// return View(model);
//}
public ActionResult Manage(ManageMessageId? message)
{
ViewBag.StatusMessage =
@@ -130,7 +107,7 @@ namespace MileageTraker.Web.Controllers
// If we got this far, something failed, redisplay form
return View(model);
}
private ActionResult RedirectToLocal(string returnUrl)
{
if (Url.IsLocalUrl(returnUrl))
@@ -145,5 +122,98 @@ namespace MileageTraker.Web.Controllers
ChangePasswordSuccess,
SetPasswordSuccess,
}
#region Reset Password
/// <summary>
/// View the Reset Password form
/// </summary>
[AllowAnonymous]
[AcceptVerbs(HttpVerbs.Get)]
public ViewResult ResetPassword(string username)
{
return View(new ResetPasswordViewModel{Username = username});
}
/// <summary>
/// Begins the Reset Password process
/// </summary>
[AllowAnonymous]
[AcceptVerbs(HttpVerbs.Post)]
[ValidateAntiForgeryToken]
public ActionResult ResetPassword(ResetPasswordViewModel viewModel)
{
var user = DataService.FindUserByUsername(viewModel.Username);
if (user != null && Request.Url != null)
{
var passwordResetToken = Algorithms.GenerateToken();
var url = Request.Url.Scheme +
@"://" +
Request.Url.Authority +
Url.Action("NewPassword", "Account",
new NewPasswordViewModel
{
UserId = user.UserId,
PasswordResetToken = passwordResetToken
});
user.PasswordResetToken = passwordResetToken;
DataService.UpdateUser(user);
var email = new EmailNotificationService();
email.NotifyResetPassword(user,url);
}
TempData["StatusMessage"] = "Please check your email - we have sent a request for you to reset the password.";
// even when if not successful, let the user think they're getting a cookie
return RedirectToAction("Login");
}
/// <summary>
/// Action users are sent to when they reset their password.
/// </summary>
[AllowAnonymous]
[AcceptVerbs(HttpVerbs.Get)]
public ActionResult NewPassword(Guid userId, string passwordResetToken)
{
var user = DataService.GetUser(userId);
if (user != null && user.PasswordResetToken == passwordResetToken)
{
var newPasswordViewModel
= new NewPasswordViewModel
{
UserId = user.UserId,
Username = user.Username,
PasswordResetToken = passwordResetToken
};
return View(newPasswordViewModel);
}
return HttpNotFound();
}
/// <summary>
/// Set a new password.
/// </summary>
/// <param name="viewModel">The view model.</param>
[AllowAnonymous]
[AcceptVerbs(HttpVerbs.Post)]
[ValidateAntiForgeryToken]
public ActionResult NewPassword(NewPasswordViewModel viewModel)
{
if (ModelState.IsValid)
{
var user = DataService.GetUser(viewModel.UserId);
if (user != null && user.PasswordResetToken == viewModel.PasswordResetToken)
{
DataService.UpdateUserPassword(viewModel.UserId, viewModel.NewPassword);
TempData["StatusMessage"] = "Password set for " + viewModel.Username;
return RedirectToAction("Login", new {username = viewModel.Username});
}
}
// If we got this far, something failed, redisplay form
return View(viewModel);
}
#endregion
}
}
Web/Controllers/UserController.cs
+4 -12
View File
@@ -132,9 +132,8 @@ namespace MileageTraker.Web.Controllers
{
var user = Membership.GetUser(id);
if (user == null)
{
return HttpNotFound();
}
var viewModel = new SetPasswordViewModel {UserId = id, Username = user.UserName};
return View(viewModel);
}
@@ -144,16 +143,9 @@ namespace MileageTraker.Web.Controllers
{
if (ModelState.IsValid)
{
try
{
DataService.UpdateUserPassword(viewModel.UserId, viewModel.NewPassword);
TempData["StatusMessage"] = "Password set for " + viewModel.Username;
return RedirectToAction("Details", new { id = viewModel.UserId});
}
catch (Exception)
{
ModelState.AddModelError("", "The new password is invalid.");
}
DataService.UpdateUserPassword(viewModel.UserId, viewModel.NewPassword);
TempData["StatusMessage"] = "Password set for " + viewModel.Username;
return RedirectToAction("Details", new { id = viewModel.UserId});
}
// If we got this far, something failed, redisplay form