org.appfuse.service.impl

Class PersistentPasswordTokenManagerImpl

java.lang.Object

org.appfuse.service.impl.PersistentPasswordTokenManagerImpl

All Implemented Interfaces:

PasswordTokenManager

public class PersistentPasswordTokenManagerImpl
extends Object
implements PasswordTokenManager

Provides PasswordTokenManager functionality generating and persisting random tokens to the db as an extra security check. You will need to create a db table with the following structure:

 
 create table password_reset_token (
     username varchar(50) NOT NULL,
     token varchar(255) NOT NULL,
     expiration_time timestamp NOT NULL,
     PRIMARY KEY (username, token)
 )
 
 

and configure this alternative PasswordTokenManager in the spring BeanFactory.

Author:

ivangsa

Constructor Summary

Constructors

Constructor and Description
PersistentPasswordTokenManagerImpl()

Method Summary

Methods

Modifier and Type	Method and Description
String	generateRecoveryToken(org.appfuse.model.User user)
void	invalidateRecoveryToken(org.appfuse.model.User user, String token)
protected boolean	isRecoveryTokenPersisted(org.appfuse.model.User user, String token)
boolean	isRecoveryTokenValid(org.appfuse.model.User user, String token)
protected void	persistToken(org.appfuse.model.User user, String token)
void	setDataSource(DataSource dataSource)
void	setDeleteTokenSql(String deleteTokenSql)
void	setInsertTokenSql(String insertTokenSql)
void	setSelectTokenSql(String selectTokenSql)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PersistentPasswordTokenManagerImpl

public PersistentPasswordTokenManagerImpl()

Method Detail

setDataSource

@Autowired
public void setDataSource(DataSource dataSource)

setDeleteTokenSql

public void setDeleteTokenSql(String deleteTokenSql)

setInsertTokenSql

public void setInsertTokenSql(String insertTokenSql)

setSelectTokenSql

public void setSelectTokenSql(String selectTokenSql)

generateRecoveryToken

public String generateRecoveryToken(org.appfuse.model.User user)

Description copied from interface: PasswordTokenManager

Specified by:

generateRecoveryToken in interface PasswordTokenManager

See Also:

PasswordTokenManager.generateRecoveryToken(org.appfuse.model.User)

isRecoveryTokenValid

public boolean isRecoveryTokenValid(org.appfuse.model.User user,
                           String token)

Description copied from interface: PasswordTokenManager

Specified by:

isRecoveryTokenValid in interface PasswordTokenManager

See Also:

PasswordTokenManager.isRecoveryTokenValid(org.appfuse.model.User, java.lang.String)

invalidateRecoveryToken

public void invalidateRecoveryToken(org.appfuse.model.User user,
                           String token)

Specified by:

invalidateRecoveryToken in interface PasswordTokenManager

See Also:

PasswordTokenManager.invalidateRecoveryToken(User, String)

persistToken

protected void persistToken(org.appfuse.model.User user,
                String token)

isRecoveryTokenPersisted

protected boolean isRecoveryTokenPersisted(org.appfuse.model.User user,
                               String token)