private void UpdatePassword(UpdateCurrentUserPasswordCommand command, IExecutionContext executionContext, User user)
{
EntityNotFoundException.ThrowIfNull(user, executionContext.UserContext.UserId);
var userArea = _userAreaRepository.GetByCode(user.UserAreaCode);
_passwordUpdateCommandHelper.ValidateUserArea(userArea);
if (!_userAuthenticationHelper.IsPasswordCorrect(user, command.OldPassword))
{
throw new PropertyValidationException("Incorrect password", "OldPassword");
}
_passwordUpdateCommandHelper.UpdatePassword(command.NewPassword, user, executionContext);
}
private async Task ValidatePasswordAsync(User user, CompleteUserAccountRecoveryViaEmailCommand command, IExecutionContext executionContext)
{
var userArea = _userAreaDefinitionRepository.GetRequiredByCode(command.UserAreaCode);
_passwordUpdateCommandHelper.ValidateUserArea(userArea);
var context = NewPasswordValidationContext.MapFromUser(user);
context.Password = command.NewPassword;
context.PropertyName = nameof(command.NewPassword);
context.ExecutionContext = executionContext;
await _newPasswordValidationService.ValidateAsync(context);
}
public async Task ExecuteAsync(UpdateUserPasswordByUserIdCommand command, IExecutionContext executionContext)
{
var user = await GetUser(command.UserId);
EntityNotFoundException.ThrowIfNull(user, command.UserId);
var userArea = _userAreaRepository.GetByCode(user.UserAreaCode);
_passwordUpdateCommandHelper.ValidateUserArea(userArea);
_passwordUpdateCommandHelper.ValidatePermissions(userArea, executionContext);
_passwordUpdateCommandHelper.UpdatePassword(command.NewPassword, user, executionContext);
await _dbContext.SaveChangesAsync();
}
private async Task ValidatePasswordAsync(UpdateCurrentUserPasswordCommand command, User user, IExecutionContext executionContext)
{
var userArea = _userAreaRepository.GetRequiredByCode(user.UserAreaCode);
_passwordUpdateCommandHelper.ValidateUserArea(userArea);
var context = NewPasswordValidationContext.MapFromUser(user);
context.CurrentPassword = command.OldPassword;
context.Password = command.NewPassword;
context.PropertyName = nameof(command.NewPassword);
context.ExecutionContext = executionContext;
await _newPasswordValidationService.ValidateAsync(context);
}
private async Task ValidatePasswordAsync(
UpdateUserPasswordByUserIdCommand command,
User user,
IExecutionContext executionContext
)
{
await _userCommandPermissionsHelper.ThrowIfCannotManageSuperAdminAsync(user, executionContext);
var userArea = _userAreaRepository.GetRequiredByCode(user.UserAreaCode);
_passwordUpdateCommandHelper.ValidateUserArea(userArea);
_passwordUpdateCommandHelper.ValidatePermissions(userArea, executionContext);
var context = NewPasswordValidationContext.MapFromUser(user);
context.Password = command.NewPassword;
context.PropertyName = nameof(command.NewPassword);
context.ExecutionContext = executionContext;
await _newPasswordValidationService.ValidateAsync(context);
}