org.broadleafcommerce.core.web.controller.account

Class BroadleafLoginController

java.lang.Object

org.broadleafcommerce.common.web.controller.BroadleafAbstractController

org.broadleafcommerce.core.web.controller.account.BroadleafLoginController

public class BroadleafLoginController
extends BroadleafAbstractController

The controller responsible for login and login related activities including forgot username, forgot password, and reset password. The actual login processing is done via Spring Security.

Author:

apazzolini, bpolster

Field Summary

Fields

Modifier and Type	Field and Description
protected CustomerService	customerService
protected static java.lang.String	forgotPasswordSuccessView
protected static java.lang.String	forgotPasswordView
protected static java.lang.String	forgotUsernameView
protected LoginService	loginService
protected static java.lang.String	loginView
protected MergeCartProcessor	mergeCartProcessor
protected static java.lang.String	resetPasswordErrorView
protected static java.lang.String	resetPasswordFormView
protected static java.lang.String	resetPasswordSuccessView
protected ResetPasswordValidator	resetPasswordValidator
protected static java.lang.String	resetPasswordView

Constructor Summary

Constructors

Constructor and Description
BroadleafLoginController()

Method Summary

Modifier and Type	Method and Description
protected java.lang.String	buildRedirectToLoginWithMessage(java.lang.String message) By default, redirects to the login page with a message.
java.lang.String	forgotPassword(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, org.springframework.ui.Model model) Redirects to te forgot password view.
java.lang.String	forgotUsername(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, org.springframework.ui.Model model) Returns the forgot username view.
java.lang.String	getForgotPasswordSuccessView()
java.lang.String	getForgotPasswordView()
java.lang.String	getForgotUsernameView()
java.lang.String	getLoginView()
java.lang.String	getResetPasswordErrorView() View user is directed to if they try to access the resetPasswordForm with an invalid token.
java.lang.String	getResetPasswordFormView()
java.lang.String	getResetPasswordPort(javax.servlet.http.HttpServletRequest request, java.lang.String scheme)
java.lang.String	getResetPasswordScheme(javax.servlet.http.HttpServletRequest request)
java.lang.String	getResetPasswordSuccessView() View that a user is sent to after a successful reset password operations.
java.lang.String	getResetPasswordUrl(javax.servlet.http.HttpServletRequest request)
java.lang.String	getResetPasswordView()
ResetPasswordForm	initResetPasswordForm(javax.servlet.http.HttpServletRequest request) Initializes the reset password by ensuring that the passed in token URL parameter initializes the hidden form field.
java.lang.String	login(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, org.springframework.ui.Model model) Redirects to the login view.
java.lang.String	processForgotPassword(java.lang.String username, javax.servlet.http.HttpServletRequest request, org.springframework.ui.Model model) Looks up the passed in username and sends an email to the address on file with a reset password token.
java.lang.String	processForgotUsername(java.lang.String email, javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, org.springframework.ui.Model model) Looks up an account by email address and if found, sends an email with the associated username.
java.lang.String	processResetPassword(ResetPasswordForm resetPasswordForm, javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, org.springframework.ui.Model model, org.springframework.validation.BindingResult errors) Processes the reset password token and allows the user to change their password.
java.lang.String	resetPassword(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, org.springframework.ui.Model model) Displays the reset password view.

Methods inherited from class org.broadleafcommerce.common.web.controller.BroadleafAbstractController

getContextPath, isAjaxRequest

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

customerService

protected CustomerService customerService

resetPasswordValidator

protected ResetPasswordValidator resetPasswordValidator

loginService

protected LoginService loginService

mergeCartProcessor

protected MergeCartProcessor mergeCartProcessor

loginView

protected static java.lang.String loginView

forgotPasswordView

protected static java.lang.String forgotPasswordView

forgotUsernameView

protected static java.lang.String forgotUsernameView

forgotPasswordSuccessView

protected static java.lang.String forgotPasswordSuccessView

resetPasswordView

protected static java.lang.String resetPasswordView

resetPasswordErrorView

protected static java.lang.String resetPasswordErrorView

resetPasswordSuccessView

protected static java.lang.String resetPasswordSuccessView

resetPasswordFormView

protected static java.lang.String resetPasswordFormView

Constructor Detail

BroadleafLoginController

public BroadleafLoginController()

Method Detail

login

public java.lang.String login(javax.servlet.http.HttpServletRequest request,
                              javax.servlet.http.HttpServletResponse response,
                              org.springframework.ui.Model model)

Redirects to the login view.

Parameters:

request -

response -

model -

Returns:

the return view

forgotPassword

public java.lang.String forgotPassword(javax.servlet.http.HttpServletRequest request,
                                       javax.servlet.http.HttpServletResponse response,
                                       org.springframework.ui.Model model)

Redirects to te forgot password view.

Parameters:

request -

response -

model -

Returns:

the return view

processForgotPassword

public java.lang.String processForgotPassword(java.lang.String username,
                                              javax.servlet.http.HttpServletRequest request,
                                              org.springframework.ui.Model model)

Looks up the passed in username and sends an email to the address on file with a reset password token. Returns error codes for invalid username.

Parameters:

username -

request -

model -

Returns:

the return view

forgotUsername

public java.lang.String forgotUsername(javax.servlet.http.HttpServletRequest request,
                                       javax.servlet.http.HttpServletResponse response,
                                       org.springframework.ui.Model model)

Returns the forgot username view.

Parameters:

request -

response -

model -

Returns:

the return view

processForgotUsername

public java.lang.String processForgotUsername(java.lang.String email,
                                              javax.servlet.http.HttpServletRequest request,
                                              javax.servlet.http.HttpServletResponse response,
                                              org.springframework.ui.Model model)

Looks up an account by email address and if found, sends an email with the associated username.

Parameters:

email -

request -

response -

model -

Returns:

the return view

resetPassword

public java.lang.String resetPassword(javax.servlet.http.HttpServletRequest request,
                                      javax.servlet.http.HttpServletResponse response,
                                      org.springframework.ui.Model model)

Displays the reset password view. Expects a valid resetPasswordToken to exist that was generated by processForgotPassword or similar. Returns an error view if the token is invalid or expired.

Parameters:

request -

response -

model -

Returns:

the return view

processResetPassword

public java.lang.String processResetPassword(ResetPasswordForm resetPasswordForm,
                                             javax.servlet.http.HttpServletRequest request,
                                             javax.servlet.http.HttpServletResponse response,
                                             org.springframework.ui.Model model,
                                             org.springframework.validation.BindingResult errors)
                                      throws ServiceException

Processes the reset password token and allows the user to change their password. Ensures that the password and confirm password match, that the token is valid, and that the token matches the provided email address.

Parameters:

resetPasswordForm -

request -

response -

model -

errors -

Returns:

the return view

Throws:

ServiceException

buildRedirectToLoginWithMessage

protected java.lang.String buildRedirectToLoginWithMessage(java.lang.String message)

By default, redirects to the login page with a message.

Parameters:

message -

Returns:

the return view

initResetPasswordForm

public ResetPasswordForm initResetPasswordForm(javax.servlet.http.HttpServletRequest request)

Initializes the reset password by ensuring that the passed in token URL parameter initializes the hidden form field. Also, if the reset password request is in the same session as the forgotPassword request, the username will auto-populate

Parameters:

request -

Returns:

the return view

getLoginView

public java.lang.String getLoginView()

Returns:

the view representing the login page.

getForgotUsernameView

public java.lang.String getForgotUsernameView()

Returns:

the view displayed for the forgot username form.

getForgotPasswordView

public java.lang.String getForgotPasswordView()

Returns:

the view displayed for the forgot password form.

getResetPasswordView

public java.lang.String getResetPasswordView()

Returns:

the view displayed for the reset password form.

getForgotPasswordSuccessView

public java.lang.String getForgotPasswordSuccessView()

Returns:

the view returned after a successful forgotPassword email has been sent.

getResetPasswordFormView

public java.lang.String getResetPasswordFormView()

Returns:

the view name to use for the reset password model..

getResetPasswordScheme

public java.lang.String getResetPasswordScheme(javax.servlet.http.HttpServletRequest request)

getResetPasswordPort

public java.lang.String getResetPasswordPort(javax.servlet.http.HttpServletRequest request,
                                             java.lang.String scheme)

getResetPasswordUrl

public java.lang.String getResetPasswordUrl(javax.servlet.http.HttpServletRequest request)

getResetPasswordErrorView

public java.lang.String getResetPasswordErrorView()

View user is directed to if they try to access the resetPasswordForm with an invalid token.

Returns:

the error view

getResetPasswordSuccessView

public java.lang.String getResetPasswordSuccessView()

View that a user is sent to after a successful reset password operations. Should be a redirect (e.g. start with "redirect:" since this will cause the entire SpringSecurity pipeline to be fulfilled.