org.openmrs.web.controller.user

Class ChangePasswordFormController

java.lang.Object

org.openmrs.web.controller.user.ChangePasswordFormController

@Controller
 @RequestMapping(value="/admin/users/changePassword.form")
public class ChangePasswordFormController
extends Object

Used for changing the password when the force password change option is set during a new user creation.

Constructor Summary

Constructors

Constructor and Description
ChangePasswordFormController()

Method Summary

Modifier and Type	Method and Description
User	formBackingObject() The model from which the data binding happens on the view
String	handleSubmission(javax.servlet.http.HttpSession httpSession, String password, String confirmPassword, String question, String answer, String confirmAnswer, User user, org.springframework.validation.BindingResult errors) Method to save changes of the new password for a user.
String	showForm(javax.servlet.http.HttpSession httpSession) This method will display the change password form

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ChangePasswordFormController

public ChangePasswordFormController()

Method Detail

formBackingObject

@ModelAttribute(value="user")
public User formBackingObject()

The model from which the data binding happens on the view

Returns:

authenticated user

Should:

return an authenticated User

showForm

@RequestMapping(method=GET)
public String showForm(javax.servlet.http.HttpSession httpSession)

This method will display the change password form

Parameters:

httpSession - current browser session

Returns:

the view to be rendered

handleSubmission

@RequestMapping(method=POST)
public String handleSubmission(javax.servlet.http.HttpSession httpSession,
                                                            @RequestParam(required=true,value="password")
                                                            String password,
                                                            @RequestParam(required=true,value="confirmPassword")
                                                            String confirmPassword,
                                                            @RequestParam(required=false,value="question")
                                                            String question,
                                                            @RequestParam(required=false,value="answer")
                                                            String answer,
                                                            @RequestParam(required=false,value="confirmAnswer")
                                                            String confirmAnswer,
                                                            @ModelAttribute(value="user")
                                                            User user,
                                                            org.springframework.validation.BindingResult errors)

Method to save changes of the new password for a user. The password will be validated against the current rules and will display error messages in case the password is not strong enough.

Parameters:

password - to be applied

confirmPassword - confirmation for the password to be applied

question - in case of a forgotten password

answer - answer for the question

confirmAnswer - confirmation of the answer for the question

errors - while processing the form

Should:

display an error message when the password and confirm password entries are different, not display error message if password and confirm password are the same, display error message when the password is empty, display error message if password is weak, display error message when question is empty and answer is not empty, display error message when the answer and the confirm answer entered are not the same, display error message when the answer is empty and question is not empty, navigate to the home page if the authentication is successful, set the user property forcePassword to false after successful password change, not set the user property forcePassword to false after unsuccessful password change, remain on the changePasswordForm page if there are errors, set the secret question and answer of the user