mirror of
https://github.com/DSpace/DSpace.git
synced 2025-10-07 10:04:21 +00:00
[CST-6938] Removed old password verification on eperson creation
This commit is contained in:
@@ -12,7 +12,6 @@ import java.sql.SQLException;
|
|||||||
import java.util.Locale;
|
import java.util.Locale;
|
||||||
import javax.mail.MessagingException;
|
import javax.mail.MessagingException;
|
||||||
|
|
||||||
import org.apache.commons.lang3.StringUtils;
|
|
||||||
import org.apache.logging.log4j.LogManager;
|
import org.apache.logging.log4j.LogManager;
|
||||||
import org.apache.logging.log4j.Logger;
|
import org.apache.logging.log4j.Logger;
|
||||||
import org.dspace.authorize.AuthorizeException;
|
import org.dspace.authorize.AuthorizeException;
|
||||||
@@ -178,14 +177,6 @@ public class AccountServiceImpl implements AccountService {
|
|||||||
registrationDataService.deleteByToken(context, token);
|
registrationDataService.deleteByToken(context, token);
|
||||||
}
|
}
|
||||||
|
|
||||||
@Override
|
|
||||||
public boolean verifyPasswordStructure(String password) {
|
|
||||||
if (StringUtils.length(password) < 6) {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
return true;
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* THIS IS AN INTERNAL METHOD. THE SEND PARAMETER ALLOWS IT TO BE USED FOR
|
* THIS IS AN INTERNAL METHOD. THE SEND PARAMETER ALLOWS IT TO BE USED FOR
|
||||||
* TESTING PURPOSES.
|
* TESTING PURPOSES.
|
||||||
|
@@ -46,11 +46,4 @@ public interface AccountService {
|
|||||||
|
|
||||||
public void deleteToken(Context context, String token)
|
public void deleteToken(Context context, String token)
|
||||||
throws SQLException;
|
throws SQLException;
|
||||||
|
|
||||||
/**
|
|
||||||
* This method verifies that a certain String adheres to the password rules for DSpace
|
|
||||||
* @param password The String to be checked
|
|
||||||
* @return A boolean indicating whether or not the given String adheres to the password rules
|
|
||||||
*/
|
|
||||||
public boolean verifyPasswordStructure(String password);
|
|
||||||
}
|
}
|
||||||
|
@@ -206,10 +206,6 @@ public class EPersonRestRepository extends DSpaceObjectRestRepository<EPerson, E
|
|||||||
throw new EPersonNameNotProvidedException();
|
throw new EPersonNameNotProvidedException();
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
String password = epersonRest.getPassword();
|
|
||||||
if (!accountService.verifyPasswordStructure(password)) {
|
|
||||||
throw new DSpaceBadRequestException("The given password is invalid");
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
|
|
||||||
@Override
|
@Override
|
||||||
|
@@ -192,6 +192,32 @@ public class EPersonRestRepositoryIT extends AbstractControllerIntegrationTest {
|
|||||||
.andExpect(status().isNoContent());
|
.andExpect(status().isNoContent());
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@Test
|
||||||
|
public void testCreateWithInvalidPassword() throws Exception {
|
||||||
|
|
||||||
|
accountService.sendRegistrationInfo(context, "test@fake-email.com");
|
||||||
|
String token = registrationDataService.findByEmail(context, "test@fake-email.com").getToken();
|
||||||
|
|
||||||
|
String ePersonData = "{" +
|
||||||
|
" \"metadata\":{" +
|
||||||
|
" \"eperson.firstname\":[{\"value\":\"John\"}]," +
|
||||||
|
" \"eperson.lastname\":[{\"value\":\"Doe\"}]" +
|
||||||
|
" }," +
|
||||||
|
" \"email\":\"test@fake-email.com\"," +
|
||||||
|
" \"password\":\"1234\"," +
|
||||||
|
" \"type\":\"eperson\"" +
|
||||||
|
"}";
|
||||||
|
|
||||||
|
getClient().perform(post("/api/eperson/epersons")
|
||||||
|
.content(ePersonData)
|
||||||
|
.contentType(contentType)
|
||||||
|
.param("token", token))
|
||||||
|
.andExpect(status().isUnprocessableEntity())
|
||||||
|
.andExpect(status().reason(is("New password is invalid. "
|
||||||
|
+ "Valid passwords must be at least 8 characters long!")));
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
@Test
|
@Test
|
||||||
public void findAllTest() throws Exception {
|
public void findAllTest() throws Exception {
|
||||||
context.turnOffAuthorisationSystem();
|
context.turnOffAuthorisationSystem();
|
||||||
|
Reference in New Issue
Block a user