public ActionResult ChangePassword(int formId, int acid, PasswordManagementModel objPwdMgmtModel)
{
bool bErrorOccurred = false;
string i_ErrorMessage = "";
LoginUserDetails objLoginUserDetails = (LoginUserDetails)Common.Common.GetSessionValue(ConstEnum.SessionValue.UserDetails);
PasswordManagementDTO objPwdMgmtDTO = new PasswordManagementDTO();
PasswordConfigModel objPassConfigModel = new PasswordConfigModel();
UserInfoSL objUserInfoSL = new UserInfoSL();
UserPolicyDocumentEventLogDTO objChangePasswordEventLogDTO = null;
PasswordExpiryReminderDTO objPassExpiryReminderDTO = null;
InsiderTradingEncryption.DataSecurity objPwdHash = new InsiderTradingEncryption.DataSecurity();
try
{
DataSecurity objDataSecurity = new DataSecurity();
string sOldPassword = string.Empty;
string sNewPassword = string.Empty;
string sConfirmNewPassword = string.Empty;
string sPasswordHash = string.Empty;
string sPasswordHashWithSalt = string.Empty;
string sSaltValue = string.Empty;
string javascriptEncryptionKey = Common.ConstEnum.Javascript_Encryption_Key;
string userPasswordHashSalt = Common.ConstEnum.User_Password_Encryption_Key;
if (objPwdMgmtModel.OldPassword == null || objPwdMgmtModel.OldPassword == "" || objPwdMgmtModel.NewPassword == null || objPwdMgmtModel.NewPassword == "" ||
objPwdMgmtModel.ConfirmNewPassword == null || objPwdMgmtModel.ConfirmNewPassword == "")
{
i_ErrorMessage = "All fields are required fields.";
bErrorOccurred = true;
}
else if (objPwdMgmtModel.NewPassword == null || objPwdMgmtModel.NewPassword == "" || objPwdMgmtModel.ConfirmNewPassword == null || objPwdMgmtModel.ConfirmNewPassword == "")
{
i_ErrorMessage = "Please enter new password and confirm new password.";
bErrorOccurred = true;
}
else if (objPwdMgmtModel.NewPassword != objPwdMgmtModel.ConfirmNewPassword)
{
i_ErrorMessage = "New password and Confirm password are not matching.";
bErrorOccurred = true;
}
else if (objPwdMgmtModel.OldPassword == objPwdMgmtModel.NewPassword)
{
i_ErrorMessage = "New password should not be same as old password.";
bErrorOccurred = true;
}
else if (!string.IsNullOrEmpty(objPwdMgmtModel.OldPassword) && !string.IsNullOrEmpty(objPwdMgmtModel.NewPassword) &&
!string.IsNullOrEmpty(objPwdMgmtModel.ConfirmNewPassword))
{
sOldPassword = DecryptStringAES(objPwdMgmtModel.OldPassword, javascriptEncryptionKey, javascriptEncryptionKey);
sNewPassword = DecryptStringAES(objPwdMgmtModel.NewPassword, javascriptEncryptionKey, javascriptEncryptionKey);
sConfirmNewPassword = DecryptStringAES(objPwdMgmtModel.ConfirmNewPassword, javascriptEncryptionKey, javascriptEncryptionKey);
sPasswordHashWithSalt = objPwdHash.CreateSaltandHash(sNewPassword);
sPasswordHash = sPasswordHashWithSalt.Split('~')[0].ToString();
sSaltValue = sPasswordHashWithSalt.Split('~')[1].ToString();
}
//Check if the new password follows Password policy
if (!bErrorOccurred)
{
Common.Common objCommon = new Common.Common();
bool isPasswordValid = objCommon.ValidatePassword(objLoginUserDetails.CompanyDBConnectionString, objLoginUserDetails.UserName, sNewPassword, sPasswordHash, objLoginUserDetails.LoggedInUserID, out i_ErrorMessage);
if (!isPasswordValid)
{
bErrorOccurred = true;
}
}
if (bErrorOccurred)
{
ViewBag.LoginError = i_ErrorMessage;
return(View("ChangePassword"));
}
objPwdMgmtModel.UserInfoID = objLoginUserDetails.LoggedInUserID;
string saltValue = string.Empty;
string calledFrom = "ChangPwd";
using (UserInfoSL ObjUserInfoSL = new UserInfoSL())
{
List <AuthenticationDTO> lstUserDetails = ObjUserInfoSL.GetUserLoginDetails(objLoginUserDetails.CompanyDBConnectionString, Convert.ToString(objLoginUserDetails.LoggedInUserID), calledFrom);
foreach (var UserDetails in lstUserDetails)
{
saltValue = UserDetails.SaltValue;
}
}
string usrSaltValue = (saltValue == null || saltValue == string.Empty) ? userPasswordHashSalt : saltValue;
if (saltValue != null && saltValue != "")
{
objPwdMgmtModel.OldPassword = objPwdHash.CreateHashToVerify(sOldPassword, usrSaltValue);
}
else
{
objPwdMgmtModel.OldPassword = objPwdHash.CreateHash(sOldPassword, usrSaltValue);
}
objPwdMgmtModel.NewPassword = sPasswordHash;
objPwdMgmtModel.ConfirmNewPassword = sPasswordHash;
objPwdMgmtModel.SaltValue = sSaltValue;
InsiderTrading.Common.Common.CopyObjectPropertyByName(objPwdMgmtModel, objPwdMgmtDTO);
objUserInfoSL.ChangePassword(objLoginUserDetails.CompanyDBConnectionString, ref objPwdMgmtDTO);
objLoginUserDetails.PasswordChangeMessage = Common.Common.getResource("usr_msg_11271");
Common.Common.SetSessionValue(ConstEnum.SessionValue.UserDetails, objLoginUserDetails);
Common.Common.SetSessionValue("IsChangePassword", false);
}
catch (Exception exp)
{
string sErrMessage = Common.Common.getResource(exp.InnerException.Data[0].ToString());
ViewBag.LoginError = sErrMessage;
objPassConfigModel = GetPasswordConfigDetails();
return(View("ChangePassword"));
}
finally
{
objLoginUserDetails = null;
objPwdMgmtDTO = null;
objUserInfoSL = null;
objPwdHash = null;
}
return(RedirectToAction("Index", "Home", new { acid = Convert.ToString(Common.ConstEnum.UserActions.CRUSER_COUSERDASHBOARD_DASHBOARD) }));
}
public ActionResult ForgetPassword(PasswordManagementModel objPwdMgmtModel)
{
ModelState.Remove("KEY");
ModelState.Add("KEY", new ModelState());
ModelState.Clear();
Session["UserCaptchaTextForgotPwd"] = (objPwdMgmtModel.sCaptchaText == null) ? string.Empty : objPwdMgmtModel.sCaptchaText;
LoginUserDetails objLoginUserDetails = (LoginUserDetails)Common.Common.GetSessionValue(ConstEnum.SessionValue.UserDetails);
try
{
if (objLoginUserDetails == null)
{
objLoginUserDetails = new LoginUserDetails();
}
PasswordManagementDTO objPwdMgmtDTO = new PasswordManagementDTO();
UserInfoSL objUserInfoSL = new UserInfoSL();
CompaniesSL objCompanySL = new CompaniesSL();
if (System.Configuration.ConfigurationManager.AppSettings["CompanyType"] == "Textbox")
{
Dictionary <string, string> objCompaniesDictionary = null;
objCompaniesDictionary = new Dictionary <string, string>();
foreach (InsiderTradingDAL.CompanyDTO objCompanyDTO in objCompanySL.getAllCompanies(Common.Common.getSystemConnectionString()))
{
objCompaniesDictionary.Add(objCompanyDTO.sCompanyDatabaseName, objCompanyDTO.sCompanyName.ToLower());
}
if (objCompaniesDictionary.ContainsValue(objPwdMgmtModel.CompanyID.ToLower()))
{
objPwdMgmtModel.CompanyID = (from entry in objCompaniesDictionary
where entry.Value.ToLower() == objPwdMgmtModel.CompanyID.ToLower()
select entry.Key).FirstOrDefault();
}
}
InsiderTradingDAL.CompanyDTO objSelectedCompany = objCompanySL.getSingleCompanies(Common.Common.getSystemConnectionString(), objPwdMgmtModel.CompanyID);
string SaltValue = Common.ConstEnum.User_Password_Encryption_Key;
InsiderTradingEncryption.DataSecurity objPwdHash = new InsiderTradingEncryption.DataSecurity();
string sHashCode = objPwdHash.CreateHash(objPwdMgmtModel.LoginID.ToString() + objPwdMgmtModel.CompanyID.ToString(), SaltValue);
objPwdMgmtModel.HashValue = sHashCode;
var CallBackUrl = Url.Action("SetPassword", "Account", new { @code = sHashCode });
string sLoginID = string.Empty;
string sEmailID = string.Empty;
string javascriptEncryptionKey = Common.ConstEnum.Javascript_Encryption_Key;
sLoginID = DecryptStringAES(objPwdMgmtModel.LoginID, javascriptEncryptionKey, javascriptEncryptionKey);
sEmailID = DecryptStringAES(objPwdMgmtModel.EmailID, javascriptEncryptionKey, javascriptEncryptionKey);
if (!string.IsNullOrEmpty(sEmailID))
{
string emailRegex = @"^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$";
Regex re = new Regex(emailRegex);
if (!re.IsMatch(sEmailID))
{
ModelState.AddModelError("EmailID", "Please provide valid Email ID");
}
}
objPwdMgmtModel.LoginID = sLoginID;
objPwdMgmtModel.EmailID = sEmailID;
InsiderTrading.Common.Common.CopyObjectPropertyByName(objPwdMgmtModel, objPwdMgmtDTO);
objPwdMgmtDTO = objUserInfoSL.ForgetPassword(objSelectedCompany.CompanyConnectionString, objPwdMgmtDTO);
if (objPwdMgmtDTO.EmailID != null)
{
if (objPwdMgmtModel.sCaptchaText != Session["CaptchaValueForgotPwd"].ToString())
{
TempData["ShowCaptchaForgotPwd"] = true;
TempData["ErrorMessageForgotPwd"] = "Please provide valid Text";
@ViewBag.ErrorMessage = "Please provide valid Text";
objLoginUserDetails.ErrorMessage = "Please provide valid Text";
return(RedirectToAction("ForgetPassword", "Account"));
}
Common.Common.SendMail(CallBackUrl, objPwdMgmtDTO, objSelectedCompany.sCompanyDatabaseName);
}
objLoginUserDetails.SuccessMessage = Common.Common.getResourceForGivenCompany("usr_msg_11270", objSelectedCompany.sCompanyDatabaseName);
Common.Common.SetSessionValue(ConstEnum.SessionValue.UserDetails, objLoginUserDetails);
return(RedirectToAction("Login", "Account"));//.Success(Common.Common.getResourceForGivenCompany("usr_msg_11270", objSelectedCompany.sCompanyDatabaseName));
}
catch (Exception exp)
{
string sErrMessage = exp.Message;
if (exp.InnerException != null && exp.InnerException.Data != null && exp.InnerException.Data.Count > 0)
{
sErrMessage = Common.Common.getResourceForGivenCompany(exp.InnerException.Data[0].ToString(), objPwdMgmtModel.CompanyID);
}
@ViewBag.ErrorMessage = sErrMessage;
objPwdMgmtModel.LoginID = null;
objPwdMgmtModel.EmailID = null;
Dictionary <string, string> objCompaiesDictionary = new Dictionary <string, string>();
objCompaiesDictionary.Add("", "Select Company");
CompaniesSL objCompanySL = new CompaniesSL();
List <InsiderTradingDAL.CompanyDTO> lstCompanies = new List <InsiderTradingDAL.CompanyDTO>();
lstCompanies = objCompanySL.getAllCompanies(Common.Common.getSystemConnectionString());
foreach (InsiderTradingDAL.CompanyDTO objCompanyDTO in lstCompanies)
{
objCompaiesDictionary.Add(objCompanyDTO.sCompanyDatabaseName, objCompanyDTO.sCompanyName);
}
ViewBag.CompaniesDropDown = objCompaiesDictionary;
objLoginUserDetails.ErrorMessage = sErrMessage;
Common.Common.SetSessionValue(ConstEnum.SessionValue.UserDetails, objLoginUserDetails);
return(RedirectToAction("ForgetPassword", "Account"));
}
}
public ActionResult Index(UserDetailsModel model)
{
UserPrincipal userPrincipal = null;
CompanyDTO objSelectedCompany = null;
InsiderTradingEncryption.DataSecurity objPwdHash = null;
string dominName = string.Empty;
string adPath = string.Empty;
string strError = string.Empty;
string s_debugInfo = string.Empty;
Dictionary <string, object> DictDetails = new Dictionary <string, object>();
try
{
if (!ModelState.IsValid)
{
string formUsername = model.sUserName;
string formPassword = model.sPassword;
string sPasswordHash = string.Empty;
string javascriptEncryptionKey = Common.ConstEnum.Javascript_Encryption_Key;
string userPasswordHashSalt = Common.ConstEnum.User_Password_Encryption_Key;
foreach (string key in ConfigurationManager.AppSettings.Keys)
{
dominName = key.Contains("DirectoryDomain") ? ConfigurationManager.AppSettings[key] : dominName;
adPath = key.Contains("DirectoryPath") ? ConfigurationManager.AppSettings[key] : adPath;
if (!String.IsNullOrEmpty(dominName) && !String.IsNullOrEmpty(adPath))
{
if (compilationSection.Debug)
{
Common.Common.WriteLogToFile("DominName & adPath read successfully ", null);
}
using (AuthenticateUserModel AuthenticateUserModel = new AuthenticateUserModel())
{
formUsername = DecryptStringAES(formUsername, javascriptEncryptionKey, javascriptEncryptionKey);
formPassword = DecryptStringAES(formPassword, javascriptEncryptionKey, javascriptEncryptionKey);
objPwdHash = new InsiderTradingEncryption.DataSecurity();
sPasswordHash = objPwdHash.CreateHash(formPassword, userPasswordHashSalt);
if (compilationSection.Debug)
{
Common.Common.WriteLogToFile("Created Hash successfully ", null);
}
AuthenticateUserModel.AuthenticateUser(dominName, formUsername, formPassword, adPath, out strError, out DictDetails);
{
if (DictDetails.Count != 0)
{
return(this.RedirectAndPost(ConfigurationManager.AppSettings["VigilanteURL"].ToString(), DictDetails));
}
else
{
return(View("AuthenticationFailed"));
}
}
}
}
}
if (!string.IsNullOrEmpty(strError))
{
//lblError.Text = "Invalid user name or Password!";
if (compilationSection.Debug)
{
Common.Common.WriteLogToFile("Invalid user name or Password!", null);
}
return(View("AuthenticationFailed"));
}
}
}
catch (Exception ex)
{
if (compilationSection.Debug)
{
Common.Common.WriteLogToFile("Exception occured in Index method", ex);
}
return(View("AuthenticationFailed"));
}
finally
{
}
return(null);
}
