Package it.univr.passportease.controller.user

Class UserAuthController

java.lang.Object

it.univr.passportease.controller.user.UserAuthController

@Controller
public class UserAuthController
extends Object

Controller for user authentication and registration. It handles the following GraphQL mutations:

• loginUser(String, String)
• logout()
• registerUser(RegisterInput)
• refreshAccessToken(String)
• changePassword(String, String)
• changeEmail(String, String)

See Also:

• UserAuthService
• UserWorkerMutationService

Field Summary

Fields

Modifier and Type	Field	Description
private final BucketLimiter	bucketLimiter	Bucket limiter.
private RequestAnalyzer	requestAnalyzer	Request analyzer.
private final UserAuthService	userAuthService	User authentication service.
private final UserWorkerMutationService	userWorkerMutationService	User worker mutation service.

Constructor Summary

Constructors

Constructor	Description
UserAuthController()

Method Summary

Modifier and Type	Method	Description
String	changeEmail(String newEmail, String oldEmail)	This mutation changes the email of the user.
void	changePassword(String oldPassword, String newPassword)	This mutation changes the password of the user.
LoginOutput	loginUser(String fiscalCode, String password)	This mutation logs in the user and returns the access token and the refresh token.
void	logout()	This mutation invalidates the access token and the refresh token of the user, it is shared between users and workers.
JWTSet	refreshAccessToken(String refreshToken)	This mutation refreshes the access token and the refresh token of the user.
LoginOutput	registerUser(RegisterInput registerInput)	This mutation registers the user and returns the access token and the refresh token.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

userAuthService

private final UserAuthService userAuthService

User authentication service.

userWorkerMutationService

private final UserWorkerMutationService userWorkerMutationService

User worker mutation service.

bucketLimiter

private final BucketLimiter bucketLimiter

Bucket limiter.

requestAnalyzer

private RequestAnalyzer requestAnalyzer

Request analyzer.

Constructor Details

UserAuthController

public UserAuthController()

Method Details

loginUser

@MutationMapping
public LoginOutput loginUser(@Argument("fiscalCode")
 String fiscalCode,
 @Argument("password")
 String password)
                      throws UserNotFoundException,
WrongPasswordException,
RateLimitException

This mutation logs in the user and returns the access token and the refresh token. By logging in, the user is also registered in the redis cache.

Parameters:

fiscalCode - user's fiscal code

password - user's password

Returns:

LoginOutput containing the access token and the refresh token

Throws:

UserNotFoundException - if the user is not found

WrongPasswordException - if the password is wrong

RateLimitException - if the user has exceeded the number of login attempts

logout

@MutationMapping
public void logout()
            throws TokenNotInRedisException,
RateLimitException,
UserNotFoundException,
AuthenticationCredentialsNotFoundException

This mutation invalidates the access token and the refresh token of the user, it is shared between users and workers.

Throws:

TokenNotInRedisException - if the token is not in redis

RateLimitException - if the user has exceeded the number of logout attempts

UserNotFoundException - if the user is not found

AuthenticationCredentialsNotFoundException - if the token is not in the request

registerUser

@MutationMapping
public LoginOutput registerUser(@Argument("registerInput")
 RegisterInput registerInput)
                         throws RateLimitException,
UserNotFoundException,
UserAlreadyExistsException

This mutation registers the user and returns the access token and the refresh token. By registering, the user is also registered in the redis cache, and the user is logged in.

Parameters:

registerInput - user's data, see RegisterInput

Returns:

LoginOutput containing the access token and the refresh token

Throws:

RateLimitException - if the user has exceeded the number of register attempts

UserNotFoundException - if the user is not found

UserAlreadyExistsException - if the user already exists

refreshAccessToken

@MutationMapping
public JWTSet refreshAccessToken(@Argument("refreshToken")
 String refreshToken)
                          throws AuthenticationCredentialsNotFoundException,
UserNotFoundException,
RateLimitException,
InvalidRefreshTokenException,
UserOrWorkerIDNotFoundException

This mutation refreshes the access token and the refresh token of the user.

Parameters:

refreshToken - the refresh token

Returns:

JWTSet containing the new access token and the new refresh token

Throws:

AuthenticationCredentialsNotFoundException - if the token is not in the request

UserNotFoundException - if the user is not found

RateLimitException - if the user has exceeded the number of refresh attempts

InvalidRefreshTokenException - if the refresh token is invalid

UserOrWorkerIDNotFoundException - if the user or the worker is not found

changePassword

@MutationMapping
public void changePassword(@Argument("oldPassword")
 String oldPassword,
 @Argument("newPassword")
 String newPassword)
                    throws UserNotFoundException,
AuthenticationCredentialsNotFoundException,
WrongPasswordException,
RateLimitException

This mutation changes the password of the user.

Parameters:

oldPassword - the old password

newPassword - the new password

Throws:

UserNotFoundException - if the user is not found

AuthenticationCredentialsNotFoundException - if the token is not in the request

WrongPasswordException - if the old password is wrong

RateLimitException - if the user has exceeded the number of change password attempts

changeEmail

@MutationMapping
public String changeEmail(@Argument("newEmail")
 String newEmail,
 @Argument("oldEmail")
 String oldEmail)
                   throws UserNotFoundException,
InvalidEmailException,
RateLimitException,
AuthenticationCredentialsNotFoundException

This mutation changes the email of the user.

Parameters:

newEmail - the new email

oldEmail - the old email

Returns:

the new email

Throws:

UserNotFoundException - if the user is not found

InvalidEmailException - if the new email is invalid

RateLimitException - if the user has exceeded the number of change email attempts

AuthenticationCredentialsNotFoundException - if the token is not in the request