Samples/MindDump/Castle.Applications.MindDump/Presentation/Controllers/AccountController.cs

   1 // Copyright 2004-2008 Castle Project - http://www.castleproject.org/
   2 //
   3 // Licensed under the Apache License, Version 2.0 (the "License");
   4 // you may not use this file except in compliance with the License.
   5 // You may obtain a copy of the License at
   6 //
   7 //     http://www.apache.org/licenses/LICENSE-2.0
   8 //
   9 // Unless required by applicable law or agreed to in writing, software
  10 // distributed under the License is distributed on an "AS IS" BASIS,
  11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  12 // See the License for the specific language governing permissions and
  13 // limitations under the License.
  14
  15 namespace Castle.Applications.MindDump.Presentation.Controllers
  16 {
  17         using System;
  18         using System.Collections;
  19
  20         using Castle.MonoRail.Framework;
  21
  22         using Castle.Applications.MindDump.Model;
  23         using Castle.Applications.MindDump.Services;
  24
  25
  26         [Layout("default")]
  27         public class AccountController : AbstractSecureController
  28         {
  29                 private AccountService _accountService;
  30                 private AuthenticationService _authenticationService;
  31                 private EncryptionService _encryptionService;
  32
  33                 public AccountController(AccountService accountService,
  34                         AuthenticationService authenticationService,
  35                         EncryptionService encryptionService)
  36                 {
  37                         _accountService = accountService;
  38                         _authenticationService = authenticationService;
  39                         _encryptionService = encryptionService;
  40                 }
  41
  42                 [SkipFilter]
  43                 public void New()
  44                 {
  45                 }
  46
  47                 [SkipFilter]
  48                 [Rescue("errorcreatingaccount")]
  49                 public void CreateAccount(String login, String name, String email,
  50                                       String pwd, String pwd2, String blogname,
  51                                       String blogdesc, String theme)
  52                 {
  53                         // Perform some simple validation
  54                         if (!IsValid(login, name, email, pwd, pwd2, blogname, blogdesc, theme))
  55                         {
  56                                 RenderView("new");
  57                                 return;
  58                         }
  59
  60                         Author author = new Author(name, login, pwd);
  61                         Blog blog = new Blog(blogname, blogdesc, theme, author);
  62
  63                         _accountService.CreateAccountAndBlog( blog );
  64
  65                         // Done, now lets log on into the system
  66                         PerformLogin(login, pwd);
  67                 }
  68
  69                 [SkipFilter]
  70                 public void Authentication()
  71                 {
  72                 }
  73
  74                 [SkipFilter]
  75                 public void PerformLogin(String login, String pwd)
  76                 {
  77                         if (!_authenticationService.Authenticate(login, pwd))
  78                         {
  79                                 Context.Flash["errormessage"] = "User not found or incorrect password.";
  80
  81                                 RenderView("Authentication");
  82                         }
  83                         else
  84                         {
  85                                 DateTime twoWeeks = DateTime.Now.Add( new TimeSpan(14,0,0,0) );
  86
  87                                 Context.Response.CreateCookie("authenticationticket",
  88                                         _encryptionService.Encrypt(login), twoWeeks );
  89
  90                                 Redirect("Maintenance", "newentry");
  91                         }
  92                 }
  93
  94                 //
  95                 // Private operations to handle common tasks
  96                 //
  97
  98                 private bool IsValid(string login, string name, string email, string pwd, string pwd2, string blogname, string blogdesc, string theme)
  99                 {
 100                         ArrayList errors = new ArrayList();
 101
 102                         if (login.Trim().Length == 0)
 103                         {
 104                                 errors.Add("You must supply a valid login name");
 105                         }
 106                         if (name.Trim().Length == 0)
 107                         {
 108                                 errors.Add("You must supply a valid name");
 109                         }
 110                         if (pwd.Trim().Length == 0)
 111                         {
 112                                 errors.Add("You must supply a valid password");
 113                         }
 114                         if (pwd2.Trim().Length == 0)
 115                         {
 116                                 errors.Add("You must supply a valid password confirmation");
 117                         }
 118                         else if (!pwd.Equals(pwd2))
 119                         {
 120                                 errors.Add("Passwords don't match...");
 121                         }
 122                         if (blogname.Trim().Length == 0)
 123                         {
 124                                 errors.Add("You must supply a valid blog name");
 125                         }
 126
 127                         if (errors.Count == 0) return true;
 128
 129                         Context.Flash["errormessages"] = errors;
 130
 131                         return false;
 132                 }
 133         }
 134 }