LightPIT: src/main/kotlin/de/uapcore/lightpit/servlet/UsersServlet.kt@c9c6abf167c7 (annotated)

src/main/kotlin/de/uapcore/lightpit/servlet/UsersServlet.kt@c9c6abf167c7 (annotated)

src/main/kotlin/de/uapcore/lightpit/servlet/UsersServlet.kt

Tue, 03 Aug 2021 13:41:32 +0200

author: Mike Becker <universe@uap-core.de>
date: Tue, 03 Aug 2021 13:41:32 +0200
changeset 209: c9c6abf167c7
parent 184: e8eecee6aadf
child 210: 37fbdcb422b7
permissions: -rw-r--r--

#21 adds input validation mechanism

Also upgrades to Kotlin 1.5.21

 /*
  * Copyright 2021 Mike Becker. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are met:
  *
  * 1. Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *
  * 2. Redistributions in binary form must reproduce the above copyright
  * notice, this list of conditions and the following disclaimer in the
  * documentation and/or other materials provided with the distribution.
  *
  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
  * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
  * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
  * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
  * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 package de.uapcore.lightpit.servlet
 import de.uapcore.lightpit.*
 import de.uapcore.lightpit.dao.DataAccessObject
 import de.uapcore.lightpit.entities.User
 import de.uapcore.lightpit.viewmodel.UserEditView
 import de.uapcore.lightpit.viewmodel.UsersView
 import javax.servlet.annotation.WebServlet
 @WebServlet(urlPatterns = ["/users/*"])
 class UsersServlet : AbstractServlet(), LoggingTrait {
     init {
         get("/", this::index)
         get("/-/create", this::create)
         get("/%userid/edit", this::edit)
         post("/-/commit", this::commit)
     }
     private val list = "users"
     private val form = "user-form"
     private fun index(http: HttpRequest, dao: DataAccessObject) {
         with(http) {
             view = UsersView(dao.listUsers())
             render(list)
         }
     }
     private fun create(http: HttpRequest, dao: DataAccessObject) {
         with(http) {
             view = UserEditView(User(-1))
             render(form)
         }
     }
     private fun edit(http: HttpRequest, dao: DataAccessObject) {
         val id = http.pathParams["userid"]?.toIntOrNull()
         if (id == null) {
             http.response.sendError(404)
         } else {
             val user = dao.findUser(id)
             if (user == null) {
                 http.response.sendError(404)
             } else {
                 with(http) {
                     view = UserEditView(user)
                     render(form)
                 }
             }
         }
     }
     private fun commit(http: HttpRequest, dao: DataAccessObject) {
         val id = http.param("userid")?.toIntOrNull()
         if (id == null) {
             http.response.sendError(400)
             return
         }
         val user = User(id)
         with(user) {
             givenname = http.param("givenname")
             lastname = http.param("lastname")
             mail = http.param("mail")
         }
         if (user.id > 0) {
             logger().info("Update user with id ${user.id}.")
             dao.updateUser(user)
             http.renderCommit("users/")
         } else {
             val errorMessages = mutableListOf<String>()
             val username = http.param("username", {
                 if (it == null) ValidationError("validation.username.null")
                 else if (dao.findUserByName(it) != null) ValidationError("validation.username.unique")
                 else ValidatedValue(it)
             }, errorMessages)
             if (username != null) {
                 logger().info("Insert user ${username}.")
                 user.username = username
                 dao.insertUser(user)
                 http.renderCommit("users/")
             } else {
                 http.view = UserEditView(user).apply { this.errorMessages = errorMessages }
                 http.render(form)
             }
         }
     }
 }

Mercurial > hg > LightPIT / annotate

src/main/kotlin/de/uapcore/lightpit/servlet/UsersServlet.kt@c9c6abf167c7 (annotated)

src/main/kotlin/de/uapcore/lightpit/servlet/UsersServlet.kt