Package com.broadleafcommerce.auth.user.validation

Class DefaultResetPasswordFormValidator<P extends PasswordToken>

java.lang.Object

com.broadleafcommerce.auth.user.validation.DefaultResetPasswordFormValidator<P>

All Implemented Interfaces:

ResetPasswordFormValidator<P>

public class DefaultResetPasswordFormValidator<P extends PasswordToken>
extends Object
implements ResetPasswordFormValidator<P>

Author:

Nathan Moore (nathanmoore).

Field Summary

Fields

Modifier and Type	Field	Description
static final String	PASSWORD_FIELD
protected final PasswordTokenValidator<P>	passwordTokenValidator
protected final PasswordRequestValidator	passwordValidator
protected final UsernameValidator	usernameValidator

Constructor Summary

Constructors

Constructor	Description
DefaultResetPasswordFormValidator(UsernameValidator usernameValidator, PasswordRequestValidator passwordValidator, PasswordTokenValidator<P> passwordTokenValidator)

Method Summary

Modifier and Type	Method	Description
protected org.springframework.security.crypto.password.PasswordEncoder	getPasswordEncoder()
protected PasswordValidatorProperties	getPasswordValidatorProperties()
void	setPasswordEncoder(org.springframework.security.crypto.password.PasswordEncoder passwordEncoder)
void	setPasswordValidatorProperties(PasswordValidatorProperties passwordValidatorProperties)
void	validate(@NonNull List<P> passwordTokens, @NonNull ResetPasswordForm resetPasswordForm, @NonNull org.springframework.validation.Errors errors, @NonNull User user)	Validates a password reset form.
void	validate(List<P> passwordTokens, ResetPasswordForm resetPasswordForm, org.springframework.validation.Errors errors)	Validates a password reset form.
protected void	validatedNewPasswordIsNotReused(@NonNull User user, String password, @NonNull org.springframework.validation.Errors errors)	Validates that the new password does not match any of the historical passwords.
protected void	validatePasswordFormat(@NonNull String password, @NonNull org.springframework.validation.Errors errors)
protected void	validatePasswordToken(@NonNull List<P> passwordTokens, String token, @NonNull org.springframework.validation.Errors errors)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

usernameValidator

protected final UsernameValidator usernameValidator

passwordValidator

protected final PasswordRequestValidator passwordValidator

passwordTokenValidator

protected final PasswordTokenValidator<P extends PasswordToken> passwordTokenValidator

PASSWORD_FIELD

public static final String PASSWORD_FIELD

See Also:

• Constant Field Values

Constructor Details

DefaultResetPasswordFormValidator

public DefaultResetPasswordFormValidator(UsernameValidator usernameValidator,
 PasswordRequestValidator passwordValidator,
 PasswordTokenValidator<P> passwordTokenValidator)

Method Details

validate

public void validate(List<P> passwordTokens,
 ResetPasswordForm resetPasswordForm,
 @NonNull
 org.springframework.validation.Errors errors)

Description copied from interface: ResetPasswordFormValidator

Validates a password reset form. When resetting a password, this is where validation of password requirements should be performed.

Specified by:

validate in interface ResetPasswordFormValidator<P extends PasswordToken>

Parameters:

passwordTokens - A list of password tokens belonging to a user.

resetPasswordForm - The reset password form.

errors - An errors object to populate if validation fails.

See Also:

• PasswordToken.getUserId()

validate

public void validate(@NonNull
 @NonNull List<P> passwordTokens,
 @NonNull
 @NonNull ResetPasswordForm resetPasswordForm,
 @NonNull
 @NonNull org.springframework.validation.Errors errors,
 @NonNull
 @NonNull User user)

Description copied from interface: ResetPasswordFormValidator

Validates a password reset form. When resetting a password, this is where validation of password requirements should be performed.

Specified by:

validate in interface ResetPasswordFormValidator<P extends PasswordToken>

Parameters:

passwordTokens - A list of password tokens belonging to a user.

resetPasswordForm - The reset password form.

errors - An errors object to populate if validation fails.

user - The user changing their password.

See Also:

• PasswordToken.getUserId()

validatePasswordToken

protected void validatePasswordToken(@NonNull
 @NonNull List<P> passwordTokens,
 String token,
 @NonNull
 @NonNull org.springframework.validation.Errors errors)

validatePasswordFormat

protected void validatePasswordFormat(@NonNull
 @NonNull String password,
 @NonNull
 @NonNull org.springframework.validation.Errors errors)

validatedNewPasswordIsNotReused

protected void validatedNewPasswordIsNotReused(@NonNull
 @NonNull User user,
 String password,
 @NonNull
 @NonNull org.springframework.validation.Errors errors)

Validates that the new password does not match any of the historical passwords. The number of passwords to compare to is managed by PasswordValidatorProperties.getPreviousPasswordsToRemember(). If that is zero, then this method does nothing.

Parameters:

user - The user whose password is changing.

password - The new password. Plaintext.

getPasswordValidatorProperties

protected PasswordValidatorProperties getPasswordValidatorProperties()

setPasswordValidatorProperties

@Autowired
public void setPasswordValidatorProperties(PasswordValidatorProperties passwordValidatorProperties)

getPasswordEncoder

protected org.springframework.security.crypto.password.PasswordEncoder getPasswordEncoder()

setPasswordEncoder

@Autowired
public void setPasswordEncoder(org.springframework.security.crypto.password.PasswordEncoder passwordEncoder)