Class User
java.lang.Object
com.erudika.para.core.User
- All Implemented Interfaces:
Linkable, ParaObject, Votable, Serializable
The core user object. Stores information about users.
- Author:
- Alex Bogdanovski [[email protected]]
- See Also:
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic enumSimple groups enum.static enumSimple user roles enum.Nested classes/interfaces inherited from interface Votable
Votable.VoteValue -
Field Summary
Fields -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionfinal booleanactivateWithEmailToken(String token) Activates a user if a given token matches the one stored.voidattachIdentifier(String identifier) Attaches a new identifier to this user.booleancanModify(ParaObject obj) Note: this method assumes that child objects can be modified by their parents.countChildren(String type) Count the total number of child objects for this object.countLinks(String type2) Count the total number of links between this object and another type of object.create()Stores this object in the data store.voiddelete()Deletes the object permanently by removing it from the data store.voiddeleteChildren(String type) Deletes all child objects permanently.voiddetachIdentifier(String identifier) Detaches a secondary identifier which is not already used by this user.booleanbooleanexists()Checks if an object is stored in the data store.<P extends ParaObject>
List<P> findChildren(String type, String query, Pager... pager) Search through all child objects.<P extends ParaObject>
List<P> findLinkedObjects(String type, String field, String query, Pager... pager) Similar toLinkable.findChildren(java.lang.String, java.lang.String, com.erudika.para.core.utils.Pager...)but for many-to-many relationships.Generates a new email confirmation token.final StringGenerates a new password reset token.Returns true if this account is active.getAppid()The application name.Boolean flag which controls whether this object is cached.<P extends ParaObject>
List<P> getChildren(String type, Pager... pager) Returns all child objects linked to this object.<P extends ParaObject>
List<P> getChildren(String type, String field, String term, Pager... pager) Returns all child objects linked to this object.The id of the user who created this.The user's currency preference.getEmail()The user's email.Returns the security groups for this user.final StringgetId()/////////////////////////////////////////////////////Returns the main identifier for this user.Returns the name of the identity provider.Used for storing the access token from an OpenID Connect/OAuth 2.0 identity provider.Returns the JWT payload for the access token coming from the IDP.Used for storing the ID token from an OpenID Connect/OAuth 2.0 identity provider.Returns the JWT payload for the ID token coming from the IDP.Stores the refresh token from the identity provider.Boolean flag which controls whether this object is indexed by the search engine.<P extends ParaObject>
List<P> getLinkedObjects(String type, Pager... pager) Similar toLinkable.getChildren(java.lang.String, com.erudika.para.core.utils.Pager...)but for many-to-many relationships.Returns all links between this type object and another type of object.final StringgetName()The name of the object.The URI of this object.The id of the parent object.The password.The profile picture URL.The plural name of the object.Boolean flag which controls whether this object is stored in the database or not.getTags()The tags associated with this object.The time when the object was created, in milliseconds.Token secret - used for generating JWT tokens.getTwoFA()final StringgetType()The name of the object's class.The last time this object was updated.Returns the version number for this object.getVotes()Returns the total sum of all votes for this object.inthashCode()booleanValidates the identifier property value.booleanisAdmin()Checks for admin rights.booleanIs the main identifier a Amazon account id.booleanIs the main identifier a Facebook id.booleanIs the main identifier a GitHub id.booleanIs the main identifier a Google+ id.booleanIs the main identifier a LDAP account.booleanisLinked(ParaObject toObj) Checks if a given object is linked to this one.booleanChecks if this object is linked to another.booleanIs the main identifier a LinkedIn id.booleanIs the main identifier a Mattermost account id.booleanIs the main identifier a Microsoft/Windows account id.booleanChecks for moderator rights.booleanIs the main identifier from a generic OAuth 2.0/OpenID Connect provider.booleanIs the main identifier a custom SSO account.booleanIs the main identifier a SAML account.booleanIs the main identifier a Slack account id.booleanIs the main identifier a Twitter id.final booleanValidates a token sent for email confirmation.final booleanisValidPasswordResetToken(String token) Validates a token sent via email for password reset.Links an object to this one in a many-to-many relationship.static final booleanChecks if a user has entered the correct password.static final UserReturns a user object for a given identifier.final booleanresetPassword(String token, String newpass) Changes the user password permanently.voidGenerates a new token secret.voidSets the account active.voidSets a new app name.voidSets the "isCached" flag.voidsetCreatorid(String creatorid) Sets a new creator id.voidsetCurrency(String currency) Sets a preferred currency.voidSets the email.voidSets the security groups for this user.final voidSets a new id.voidsetIdentifier(String identifier) Sets the main identifier.voidsetIdpAccessToken(String idpAccessToken) Sets the IDP access token.voidsetIdpIdToken(String idpIdToken) Sets the IDP ID token.voidsetIdpRefreshToken(String idpRefreshToken) Sets the refresh token.voidsetIndexed(Boolean indexed) Sets the "isIndexed" flag.final voidSets a new name.voidsetParentid(String parentid) Sets a new parent id.voidsetPassword(String password) Sets a password.voidsetPicture(String picture) Sets the profile picture URL.voidSets the "isStored" flag.voidMerges the given tags with existing tags.voidsetTimestamp(Long timestamp) Sets the timestamp.voidsetTokenSecret(String tokenSecret) Sets the token secret.voidSets 2FA enabled/disabled.voidsetTwoFAbackupKeyHash(String twoFAbackupKeyHash) Sets the 2FA backup key hash.voidsetTwoFAkey(String twoFAkey) Sets the 2FA secret key.final voidSets a new object type.voidsetUpdated(Long updated) Sets the last updated timestamp.voidsetVersion(Long version) Sets the version of this object.voidSets the total votes for this object.toString()voidUnlinks an object from this one.voidUnlinks all objects that are linked to this one.voidupdate()Updates the object permanently.booleanDownvotes the object.booleanUpvotes the object.
-
Field Details
-
MAX_PASSWORD_LENGTH
public static final int MAX_PASSWORD_LENGTHMaximum password length.- See Also:
-
-
Constructor Details
-
User
public User()No-args constructor. -
User
-
-
Method Details
-
getTokenSecret
Token secret - used for generating JWT tokens. Changing this secret would invalidate all existing user tokens. A kind of global "logout".- Returns:
- a random string
-
setTokenSecret
Sets the token secret.- Parameters:
tokenSecret- a random string
-
getPicture
-
setPicture
Sets the profile picture URL.- Parameters:
picture- the picture URL.
-
getActive
-
setActive
-
getTwoFA
- Returns:
- true if 2FA is enabled
-
setTwoFA
Sets 2FA enabled/disabled.- Parameters:
twoFA- true if 2FA is enabled
-
getTwoFAkey
- Returns:
- the 2FA secret key. Used for checking the TOTP code.
-
setTwoFAkey
-
getTwoFAbackupKeyHash
- Returns:
- the hashed backup key (shown only once). Used for disabling 2FA.
-
setTwoFAbackupKeyHash
Sets the 2FA backup key hash.- Parameters:
twoFAbackupKeyHash- bcrypt hash
-
getGroups
-
setGroups
Sets the security groups for this user.- Parameters:
groups- the groups string
-
getIdentifier
Returns the main identifier for this user. An identifier is basically a unique username that identifies a user.- Returns:
- the main identifier
-
setIdentifier
Sets the main identifier.- Parameters:
identifier- the main identifier
-
getEmail
-
setEmail
-
getCurrency
The user's currency preference.- Returns:
- a currency 3-letter code in uppercase
-
setCurrency
Sets a preferred currency. Default is "EUR".- Parameters:
currency- a 3-letter currency code
-
resetTokenSecret
public void resetTokenSecret()Generates a new token secret. This is whould be equivalent to "logout everywhere". -
canModify
Note: this method assumes that child objects can be modified by their parents. This might not work for special cases where a parent has no rights over a child.- Parameters:
obj- an object- Returns:
- true if the user is the creator or parent of this object or an admin user
-
create
Description copied from interface:ParaObjectStores this object in the data store.- Specified by:
createin interfaceParaObject- Returns:
- the id of the object (a new id if object is new)
- See Also:
-
delete
public void delete()Description copied from interface:ParaObjectDeletes the object permanently by removing it from the data store.- Specified by:
deletein interfaceParaObject- See Also:
-
attachIdentifier
Attaches a new identifier to this user.- Parameters:
identifier- a new identifier
-
detachIdentifier
Detaches a secondary identifier which is not already used by this user.- Parameters:
identifier- an attached identifier
-
isFacebookUser
public boolean isFacebookUser()Is the main identifier a Facebook id.- Returns:
- true if user is signed in with Facebook
-
isGooglePlusUser
public boolean isGooglePlusUser()Is the main identifier a Google+ id.- Returns:
- true if user is signed in with Google+
-
isLinkedInUser
public boolean isLinkedInUser()Is the main identifier a LinkedIn id.- Returns:
- true if user is signed in with LinkedIn
-
isTwitterUser
public boolean isTwitterUser()Is the main identifier a Twitter id.- Returns:
- true if user is signed in with Twitter
-
isGitHubUser
public boolean isGitHubUser()Is the main identifier a GitHub id.- Returns:
- true if user is signed in with GitHub
-
isMicrosoftUser
public boolean isMicrosoftUser()Is the main identifier a Microsoft/Windows account id.- Returns:
- true if user is signed in with a Microsoft account
-
isSlackUser
public boolean isSlackUser()Is the main identifier a Slack account id.- Returns:
- true if user is signed in with a Slack account
-
isMattermostUser
public boolean isMattermostUser()Is the main identifier a Mattermost account id.- Returns:
- true if user is signed in with a Mattermost account
-
isAmazonUser
public boolean isAmazonUser()Is the main identifier a Amazon account id.- Returns:
- true if user is signed in with a Amazon account
-
isLDAPUser
public boolean isLDAPUser()Is the main identifier a LDAP account.- Returns:
- true if user is signed in with a LDAP account
-
isSAMLUser
public boolean isSAMLUser()Is the main identifier a SAML account.- Returns:
- true if user is signed in with a SAML account
-
isPasswordlessUser
public boolean isPasswordlessUser()Is the main identifier a custom SSO account.- Returns:
- true if user is signed in with a custom SSO JWT token
-
isOAuth2User
public boolean isOAuth2User()Is the main identifier from a generic OAuth 2.0/OpenID Connect provider.- Returns:
- true if user is signed in with a generic OAauth 2.0 account
-
isAdmin
public boolean isAdmin()Checks for admin rights.- Returns:
- true if user has admin rights
-
isModerator
public boolean isModerator()Checks for moderator rights.- Returns:
- true if user has mod rights
-
getIdentityProvider
Returns the name of the identity provider.- Returns:
- "facebook", "google"... etc.
-
hasValidIdentifier
public boolean hasValidIdentifier()Validates the identifier property value.- Returns:
- true if the user identifier has valid syntax.
-
getPassword
The password. A transient field used for validation.- Returns:
- the password.
-
setPassword
-
getIdpIdToken
Used for storing the ID token from an OpenID Connect/OAuth 2.0 identity provider.- Returns:
- an ID token (JWT is always assumed to be the format)
-
setIdpIdToken
Sets the IDP ID token.- Parameters:
idpIdToken- a token
-
getIdpAccessToken
Used for storing the access token from an OpenID Connect/OAuth 2.0 identity provider.- Returns:
- a JWT access token (JWT is always assumed to be the format)
-
setIdpAccessToken
Sets the IDP access token.- Parameters:
idpAccessToken- a token
-
getIdpRefreshToken
Stores the refresh token from the identity provider.- Returns:
- a JWT refresh token
-
setIdpRefreshToken
Sets the refresh token.- Parameters:
idpRefreshToken- a refresh token
-
getIdpIdTokenPayload
Returns the JWT payload for the ID token coming from the IDP. Used for delegating user attributes data to clients. This must be a Base64-encoded JSON string.- Returns:
- the payload part in Base64
-
getIdpAccessTokenPayload
Returns the JWT payload for the access token coming from the IDP. Used for delegating user attributes data to clients. This must be a Base64-encoded JSON string.- Returns:
- the payload part in Base64
-
readUserForIdentifier
-
passwordMatches
Checks if a user has entered the correct password. Compares password hashes.- Parameters:
u- a user with a set password- Returns:
- true if password matches the one in the data store
- Throws:
LimitExceededException- if rate limit is exceeded when password doesn't match.
-
generatePasswordResetToken
Generates a new password reset token. Sent via email for pass reset.- Returns:
- the pass reset token
-
resetPassword
Changes the user password permanently.- Parameters:
token- the reset token. seegeneratePasswordResetToken()newpass- the new password- Returns:
- true if successful
-
generateEmailConfirmationToken
Generates a new email confirmation token. Sent via email for user activation.- Returns:
- a Base64 encoded UUID
-
activateWithEmailToken
Activates a user if a given token matches the one stored.- Parameters:
token- the email confirmation token. seegenerateEmailConfirmationToken()- Returns:
- true if successful
-
isValidPasswordResetToken
Validates a token sent via email for password reset.- Parameters:
token- a token- Returns:
- true if valid
-
isValidEmailConfirmationToken
Validates a token sent for email confirmation.- Parameters:
token- a token- Returns:
- true if valid
-
getId
/////////////////////////////////////////////////////- Specified by:
getIdin interfaceParaObject- Returns:
- the id
-
setId
Description copied from interface:ParaObjectSets a new id. Must not be null or empty.- Specified by:
setIdin interfaceParaObject- Parameters:
id- the new id
-
getType
Description copied from interface:ParaObjectThe name of the object's class. This is equivalent toClass.getSimpleName().toLowerCase()- Specified by:
getTypein interfaceParaObject- Returns:
- the simple name of the class
-
setType
Description copied from interface:ParaObjectSets a new object type. Must not be null or empty.- Specified by:
setTypein interfaceParaObject- Parameters:
type- a new type
-
getAppid
Description copied from interface:ParaObjectThe application name. Added to support multiple separate apps. Every object must belong to an app.- Specified by:
getAppidin interfaceParaObject- Returns:
- the app id (name). default: para
-
setAppid
Description copied from interface:ParaObjectSets a new app name. Must not be null or empty.- Specified by:
setAppidin interfaceParaObject- Parameters:
appid- the new app id (name)
-
getObjectURI
Description copied from interface:ParaObjectThe URI of this object. For example: /users/123- Specified by:
getObjectURIin interfaceParaObject- Returns:
- the URI
- See Also:
-
getTags
Description copied from interface:ParaObjectThe tags associated with this object. Tags must not be null or empty.- Specified by:
getTagsin interfaceParaObject- Returns:
- a set of tags, or an empty set
- See Also:
-
setTags
Description copied from interface:ParaObjectMerges the given tags with existing tags.- Specified by:
setTagsin interfaceParaObject- Parameters:
tags- the additional tags, or clears all tags if set to null
-
getStored
Description copied from interface:ParaObjectBoolean flag which controls whether this object is stored in the database or not. Default is true.- Specified by:
getStoredin interfaceParaObject- Returns:
- true if this object is stored in DB.
-
setStored
Description copied from interface:ParaObjectSets the "isStored" flag.- Specified by:
setStoredin interfaceParaObject- Parameters:
stored- when set to true, object is stored in DB.
-
getIndexed
Description copied from interface:ParaObjectBoolean flag which controls whether this object is indexed by the search engine. Default is true.- Specified by:
getIndexedin interfaceParaObject- Returns:
- true if this object is indexed
-
setIndexed
Description copied from interface:ParaObjectSets the "isIndexed" flag.- Specified by:
setIndexedin interfaceParaObject- Parameters:
indexed- when set to true, object is indexed.
-
getCached
Description copied from interface:ParaObjectBoolean flag which controls whether this object is cached. Default is true.- Specified by:
getCachedin interfaceParaObject- Returns:
- true if this object is cached on update() and create().
-
setCached
Description copied from interface:ParaObjectSets the "isCached" flag.- Specified by:
setCachedin interfaceParaObject- Parameters:
cached- when set to true, object is cached.
-
getTimestamp
Description copied from interface:ParaObjectThe time when the object was created, in milliseconds.- Specified by:
getTimestampin interfaceParaObject- Returns:
- the timestamp of creation
-
setTimestamp
Description copied from interface:ParaObjectSets the timestamp.- Specified by:
setTimestampin interfaceParaObject- Parameters:
timestamp- a new timestamp in milliseconds.
-
getCreatorid
Description copied from interface:ParaObjectThe id of the user who created this. Should point to aUserid.- Specified by:
getCreatoridin interfaceParaObject- Returns:
- the id or null
-
setCreatorid
Description copied from interface:ParaObjectSets a new creator id. Must not be null or empty.- Specified by:
setCreatoridin interfaceParaObject- Parameters:
creatorid- a new id
-
getName
Description copied from interface:ParaObjectThe name of the object. Can be anything.- Specified by:
getNamein interfaceParaObject- Returns:
- the name. default: [type id]
-
setName
Description copied from interface:ParaObjectSets a new name. Must not be null or empty.- Specified by:
setNamein interfaceParaObject- Parameters:
name- the new name
-
getPlural
Description copied from interface:ParaObjectThe plural name of the object. For example: user - users- Specified by:
getPluralin interfaceParaObject- Returns:
- the plural name
-
getParentid
Description copied from interface:ParaObjectThe id of the parent object.- Specified by:
getParentidin interfaceParaObject- Returns:
- the id of the parent or null
-
setParentid
Description copied from interface:ParaObjectSets a new parent id. Must not be null or empty.- Specified by:
setParentidin interfaceParaObject- Parameters:
parentid- a new id
-
getUpdated
Description copied from interface:ParaObjectThe last time this object was updated. Timestamp in ms.- Specified by:
getUpdatedin interfaceParaObject- Returns:
- timestamp in milliseconds
-
setUpdated
Description copied from interface:ParaObjectSets the last updated timestamp.- Specified by:
setUpdatedin interfaceParaObject- Parameters:
updated- a new timestamp
-
update
public void update()Description copied from interface:ParaObjectUpdates the object permanently. Changes toLockedfields are ignored.- Specified by:
updatein interfaceParaObject- See Also:
-
exists
public boolean exists()Description copied from interface:ParaObjectChecks if an object is stored in the data store.- Specified by:
existsin interfaceParaObject- Returns:
- true if the object is persisted to the data store.
- See Also:
-
voteUp
-
voteDown
-
getVotes
-
setVotes
-
getVersion
Description copied from interface:ParaObjectReturns the version number for this object. Used primarily for optimistic locking.- Specified by:
getVersionin interfaceParaObject- Returns:
- a positive number,
0if unused or-1, indicating a failed update.
-
setVersion
Description copied from interface:ParaObjectSets the version of this object. This value should come from the database.- Specified by:
setVersionin interfaceParaObject- Parameters:
version- a positive number, different than the current value of the version field
-
countLinks
Description copied from interface:LinkableCount the total number of links between this object and another type of object.- Specified by:
countLinksin interfaceLinkable- Parameters:
type2- the other type of object- Returns:
- the number of links
-
getLinks
Description copied from interface:LinkableReturns all links between this type object and another type of object. -
getLinkedObjects
Description copied from interface:LinkableSimilar toLinkable.getChildren(java.lang.String, com.erudika.para.core.utils.Pager...)but for many-to-many relationships.- Specified by:
getLinkedObjectsin interfaceLinkable- Type Parameters:
P- type of linked objects- Parameters:
type- type of linked objects to look forpager- aPager- Returns:
- a list of linked objects
-
findLinkedObjects
public <P extends ParaObject> List<P> findLinkedObjects(String type, String field, String query, Pager... pager) Description copied from interface:LinkableSimilar toLinkable.findChildren(java.lang.String, java.lang.String, com.erudika.para.core.utils.Pager...)but for many-to-many relationships. Searches through all linked objects connected to this via aLinkerobject.- Specified by:
findLinkedObjectsin interfaceLinkable- Type Parameters:
P- type of linked objects- Parameters:
type- type of linked objects to look forfield- the name of the field to target (within a nested field "nstd")query- a query stringpager- aPager- Returns:
- a list of linked objects matching the search query
-
isLinked
-
isLinked
Description copied from interface:LinkableChecks if a given object is linked to this one. -
link
Description copied from interface:LinkableLinks an object to this one in a many-to-many relationship. Only a link is created. Objects are left untouched. The type of the second object is automatically determined on read. -
unlink
-
unlinkAll
-
countChildren
Description copied from interface:LinkableCount the total number of child objects for this object.- Specified by:
countChildrenin interfaceLinkable- Parameters:
type- the other type of object- Returns:
- the number of links
-
getChildren
Description copied from interface:LinkableReturns all child objects linked to this object.- Specified by:
getChildrenin interfaceLinkable- Type Parameters:
P- the type of children- Parameters:
type- the type of children to look forpager- aPager- Returns:
- a list of
ParaObjectin a one-to-many relationship with this object
-
getChildren
public <P extends ParaObject> List<P> getChildren(String type, String field, String term, Pager... pager) Description copied from interface:LinkableReturns all child objects linked to this object.- Specified by:
getChildrenin interfaceLinkable- Type Parameters:
P- the type of children- Parameters:
type- the type of children to look forfield- the field name to use as filterterm- the field value to use as filterpager- aPager- Returns:
- a list of
ParaObjectin a one-to-many relationship with this object
-
findChildren
Description copied from interface:LinkableSearch through all child objects. Only searches child objects directly connected to this parent via theparentidfield.- Specified by:
findChildrenin interfaceLinkable- Type Parameters:
P- the type of children- Parameters:
type- the type of children to look forquery- a query stringpager- aPager- Returns:
- a list of
ParaObjectin a one-to-many relationship with this object
-
deleteChildren
Description copied from interface:LinkableDeletes all child objects permanently.- Specified by:
deleteChildrenin interfaceLinkable- Parameters:
type- the children's type.
-
hashCode
-
equals
-
toString
-