/// <summary>
/// Admin details returns back some of the details to the front end for the user to verify there account
/// </summary>
/// <param name="theRecovery"></param>
/// <returns></returns>
public JsonResult adminDetails(Recovery theRecovery)
{
StudentRegistrationsModel db = new StudentRegistrationsModel();
Administrator AdminAccount;
List<string> skipKeys = new List<string>();
skipKeys.Add("Administrator.FirstName");
skipKeys.Add("Administrator.Password");
skipKeys.Add("recovery_key");
clearErrorStates(skipKeys);
//only check if model state is okay
if (ModelState.IsValid)
{
AdminAccount = (from a in db.Administrators where a.Email == theRecovery.Administrator.Email select a).FirstOrDefault();
if (AdminAccount == null)
ModelState.AddModelError("Administrator.Email", "Account does not exist.");
else
theRecovery.Administrator = AdminAccount;
}
//dispose as no longer needed
db.Dispose();
theRecovery.UserId = theRecovery.Administrator.UserId;
//check the rest of the model state and send back the errors to client
if (!ModelState.IsValid)
{
var errorList = ModelState.ToDictionary(
kvp => kvp.Key,
kvp => kvp.Value.Errors.Select(e => e.ErrorMessage).ToArray()
);
return Json(new
{
success = false,
errors = errorList
}, JsonRequestBehavior.AllowGet);
}
Session["AdministratorRecovery"] = theRecovery;
if (theRecovery.recovery_option == "mobile")
{
if (theRecovery.Administrator.mobile == null)
{
return Json(new
{
success = false,
mobile_guess = "Sorry no mobile with this account please use email"
}, JsonRequestBehavior.AllowGet);
}
string mobile = "Enter last 4 digits of this number " + theRecovery.Administrator.mobile.Remove(theRecovery.Administrator.mobile.Length - 4, 4) + "****";
return Json(new
{
success = true,
mobile_guess = mobile
}, JsonRequestBehavior.AllowGet);
}
return Json(new
{
success = true,
message = "You can now request a reset a recovery code.."
}, JsonRequestBehavior.AllowGet);
//return sendRecoveryCode(theRecovery);
}
/// <summary>
/// Sends the recovery code to the user via email or sms
/// </summary>
/// <param name="theRecovery">Recovery details</param>
/// <returns>JSON if has passed Recovery checks</returns>
public JsonResult sendRecoveryCode(Recovery theRecovery)
{
//session has been removed
if (Session["AdministratorRecovery"] == null)
{
return Json(new
{
success = false,
message = "Invalid Session please refresh the browser"
}, JsonRequestBehavior.AllowGet);
}
Recovery sessRecovery = (Recovery)Session["AdministratorRecovery"];
theRecovery.Administrator.FirstName = sessRecovery.Administrator.FirstName;
theRecovery.Administrator.Password = sessRecovery.Administrator.Password;
theRecovery.UserId = sessRecovery.Administrator.UserId;
//ModelState.Clear();
StudentRegistrationsModel db = new StudentRegistrationsModel();
if (theRecovery.recovery_option == "email")
{
RecoveryComms theComms = new RecoveryComms();
if (theComms.sendEmail(ref sessRecovery) == true)
{
//success lets tell the user and save
var email = sessRecovery.Administrator.Email;
sessRecovery.Administrator = null;
db.Recoveries.Add(sessRecovery);
db.SaveChanges();
return Json(new
{
success = true,
message = String.Format("<b>Great!</b>, we have emailed you your recovery code to <b>{0}</b>", email)
}, JsonRequestBehavior.AllowGet);
}
else
{
return Json(new
{
success = false,
message = "Something bad happend"
}, JsonRequestBehavior.AllowGet);
}
}
//requesting for recovery code
if (theRecovery.recovery_option == "mobile")
{
string attemptGuess = theRecovery.Administrator.mobile;
//int.TryParse(theRecovery.Administrator.mobile,out guessNumber);
string correctAttempt = new String(sessRecovery.Administrator.mobile.
Where(x => Char.IsDigit(x)).Reverse().Take(4).Reverse().ToArray());
//success here if correct number
if (theRecovery.Administrator.mobile == correctAttempt)
{
//passover the correct mobile details
RecoveryComms theComms = new RecoveryComms();
if (theComms.sendSMS(ref sessRecovery) == true)
{
var mobile_number = sessRecovery.Administrator.mobile;
sessRecovery.Administrator = null;
db.Recoveries.Add(sessRecovery);
db.SaveChanges();
return Json(new
{
success = true,
message = String.Format("<b>Great!</b>, we have sent you a TEXT message with your recovery code to <b>{0}</b>", mobile_number)
}, JsonRequestBehavior.AllowGet);
}
else
{
return Json(new
{
success = false,
message = "Something bad happend"
}, JsonRequestBehavior.AllowGet);
}
}
else
{
return Json(new
{
success = false,
message = "Failed incorrect last digits"
}, JsonRequestBehavior.AllowGet);
}
}
return Json("", JsonRequestBehavior.AllowGet);
}
