392 lines
15 KiB
C#
392 lines
15 KiB
C#
|
//------------------------------------------------------------------------------
|
||
|
|
// <copyright file="MembershipUser.cs" company="Microsoft">
|
||
|
|
// Copyright (c) Microsoft Corporation. All rights reserved.
|
||
|
|
// </copyright>
|
||
|
|
//------------------------------------------------------------------------------
|
||
|
|
|
||
|
|
namespace System.Web.Security {
|
||
|
|
using System.Web;
|
||
|
|
using System.Configuration.Provider;
|
||
|
|
using System.Security.Principal;
|
||
|
|
using System.Security.Permissions;
|
||
|
|
using System.Globalization;
|
||
|
|
using System.Runtime.CompilerServices;
|
||
|
|
using System.Runtime.Serialization;
|
||
|
|
using System.Web.Util;
|
||
|
|
|
||
|
|
/// <devdoc>
|
||
|
|
/// <para>[To be supplied.]</para>
|
||
|
|
/// </devdoc>
|
||
|
|
[Serializable]
|
||
|
|
[TypeForwardedFrom("System.Web, Version=2.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a")]
|
||
|
|
public class MembershipUser
|
||
|
|
{
|
||
|
|
////////////////////////////////////////////////////////////
|
||
|
|
// Public methods
|
||
|
|
|
||
|
|
public virtual string UserName{
|
||
|
|
get { return _UserName;}}
|
||
|
|
|
||
|
|
public virtual object ProviderUserKey{
|
||
|
|
get { return _ProviderUserKey;}}
|
||
|
|
|
||
|
|
|
||
|
|
public virtual string Email{
|
||
|
|
get { return _Email;}
|
||
|
|
set { _Email = value; }}
|
||
|
|
|
||
|
|
|
||
|
|
public virtual string PasswordQuestion{
|
||
|
|
get { return _PasswordQuestion;}}
|
||
|
|
|
||
|
|
|
||
|
|
public virtual string Comment{
|
||
|
|
get { return _Comment;}
|
||
|
|
set { _Comment = value;}}
|
||
|
|
|
||
|
|
|
||
|
|
public virtual bool IsApproved{
|
||
|
|
get { return _IsApproved;}
|
||
|
|
set { _IsApproved = value; } }
|
||
|
|
|
||
|
|
public virtual bool IsLockedOut
|
||
|
|
{
|
||
|
|
get { return _IsLockedOut; }
|
||
|
|
}
|
||
|
|
|
||
|
|
public virtual DateTime LastLockoutDate
|
||
|
|
{
|
||
|
|
get { return _LastLockoutDate.ToLocalTime(); }
|
||
|
|
}
|
||
|
|
|
||
|
|
public virtual DateTime CreationDate {
|
||
|
|
get { return _CreationDate.ToLocalTime(); }
|
||
|
|
}
|
||
|
|
|
||
|
|
public virtual DateTime LastLoginDate {
|
||
|
|
get { return _LastLoginDate.ToLocalTime(); }
|
||
|
|
set { _LastLoginDate = value.ToUniversalTime(); } }
|
||
|
|
|
||
|
|
|
||
|
|
public virtual DateTime LastActivityDate {
|
||
|
|
get { return _LastActivityDate.ToLocalTime(); }
|
||
|
|
set { _LastActivityDate = value.ToUniversalTime(); } }
|
||
|
|
|
||
|
|
|
||
|
|
public virtual DateTime LastPasswordChangedDate {
|
||
|
|
get { return _LastPasswordChangedDate.ToLocalTime(); }
|
||
|
|
}
|
||
|
|
|
||
|
|
public virtual bool IsOnline {
|
||
|
|
get {
|
||
|
|
TimeSpan ts = new TimeSpan(0, SystemWebProxy.Membership.UserIsOnlineTimeWindow, 0);
|
||
|
|
DateTime dt = DateTime.UtcNow.Subtract(ts);
|
||
|
|
return LastActivityDate.ToUniversalTime() > dt;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
public override string ToString()
|
||
|
|
{
|
||
|
|
return UserName;
|
||
|
|
}
|
||
|
|
|
||
|
|
public virtual string ProviderName
|
||
|
|
{
|
||
|
|
get { return _ProviderName; }
|
||
|
|
}
|
||
|
|
|
||
|
|
////////////////////////////////////////////////////////////
|
||
|
|
// CTor
|
||
|
|
|
||
|
|
public MembershipUser(
|
||
|
|
string providerName,
|
||
|
|
string name,
|
||
|
|
object providerUserKey,
|
||
|
|
string email,
|
||
|
|
string passwordQuestion,
|
||
|
|
string comment,
|
||
|
|
bool isApproved,
|
||
|
|
bool isLockedOut,
|
||
|
|
DateTime creationDate,
|
||
|
|
DateTime lastLoginDate,
|
||
|
|
DateTime lastActivityDate,
|
||
|
|
DateTime lastPasswordChangedDate,
|
||
|
|
DateTime lastLockoutDate )
|
||
|
|
{
|
||
|
|
if ( providerName == null || SystemWebProxy.Membership.Providers[providerName] == null )
|
||
|
|
{
|
||
|
|
throw new ArgumentException(String.Format(CultureInfo.CurrentCulture, ApplicationServicesStrings.Membership_provider_name_invalid), "providerName" );
|
||
|
|
}
|
||
|
|
|
||
|
|
if( name != null )
|
||
|
|
{
|
||
|
|
name = name.Trim();
|
||
|
|
}
|
||
|
|
|
||
|
|
if( email != null )
|
||
|
|
{
|
||
|
|
email = email.Trim();
|
||
|
|
}
|
||
|
|
|
||
|
|
if( passwordQuestion != null )
|
||
|
|
{
|
||
|
|
passwordQuestion = passwordQuestion.Trim();
|
||
|
|
}
|
||
|
|
|
||
|
|
_ProviderName = providerName;
|
||
|
|
_UserName = name;
|
||
|
|
_ProviderUserKey = providerUserKey;
|
||
|
|
_Email = email;
|
||
|
|
_PasswordQuestion = passwordQuestion;
|
||
|
|
_Comment = comment;
|
||
|
|
_IsApproved = isApproved;
|
||
|
|
_IsLockedOut = isLockedOut;
|
||
|
|
|
||
|
|
// VSWhidbey 451539: We should use UTC internally for all dates, and return local for public apis
|
||
|
|
_CreationDate = creationDate.ToUniversalTime();
|
||
|
|
_LastLoginDate = lastLoginDate.ToUniversalTime();
|
||
|
|
_LastActivityDate = lastActivityDate.ToUniversalTime();
|
||
|
|
_LastPasswordChangedDate = lastPasswordChangedDate.ToUniversalTime();
|
||
|
|
_LastLockoutDate = lastLockoutDate.ToUniversalTime();
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
protected MembershipUser() { } // Default CTor: Callable by derived class only.
|
||
|
|
|
||
|
|
internal virtual void Update()
|
||
|
|
{
|
||
|
|
SystemWebProxy.Membership.Providers[ProviderName].UpdateUser(this);
|
||
|
|
UpdateSelf();
|
||
|
|
}
|
||
|
|
|
||
|
|
public virtual string GetPassword()
|
||
|
|
{
|
||
|
|
return SystemWebProxy.Membership.Providers[ProviderName].GetPassword(UserName, null);
|
||
|
|
}
|
||
|
|
|
||
|
|
public virtual string GetPassword(string passwordAnswer)
|
||
|
|
{
|
||
|
|
return SystemWebProxy.Membership.Providers[ProviderName].GetPassword(UserName, passwordAnswer);
|
||
|
|
}
|
||
|
|
|
||
|
|
internal string GetPassword(bool throwOnError) {
|
||
|
|
return GetPassword(null, /* useAnswer */ false, throwOnError);
|
||
|
|
}
|
||
|
|
|
||
|
|
internal string GetPassword(string answer, bool throwOnError) {
|
||
|
|
return GetPassword(answer, /* useAnswer */ true, throwOnError);
|
||
|
|
}
|
||
|
|
|
||
|
|
// GetPassword() can throw 3 types of exception:
|
||
|
|
// 1. ArgumentException is thrown if:
|
||
|
|
// A. Answer is null, empty, or longer than 128 characters
|
||
|
|
// 2. ProviderException is thrown if the user does not exist when the stored procedure
|
||
|
|
// is run. The only way this could happen is in a race condition, where the user
|
||
|
|
// is deleted in the middle of the MembershipProvider.ChangePassword() method.
|
||
|
|
// 3. MembershipPasswordException is thrown if the user is locked out, or the answer
|
||
|
|
// is incorrect.
|
||
|
|
private string GetPassword(string answer, bool useAnswer, bool throwOnError) {
|
||
|
|
string password = null;
|
||
|
|
|
||
|
|
try {
|
||
|
|
if (useAnswer) {
|
||
|
|
password = GetPassword(answer);
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
password = GetPassword();
|
||
|
|
}
|
||
|
|
}
|
||
|
|
catch (ArgumentException) {
|
||
|
|
if (throwOnError) throw;
|
||
|
|
}
|
||
|
|
catch (MembershipPasswordException) {
|
||
|
|
if (throwOnError) throw;
|
||
|
|
}
|
||
|
|
catch (ProviderException) {
|
||
|
|
if (throwOnError) throw;
|
||
|
|
}
|
||
|
|
|
||
|
|
return password;
|
||
|
|
}
|
||
|
|
|
||
|
|
public virtual bool ChangePassword(string oldPassword, string newPassword)
|
||
|
|
{
|
||
|
|
SecurityServices.CheckPasswordParameter(oldPassword, "oldPassword");
|
||
|
|
SecurityServices.CheckPasswordParameter(newPassword, "newPassword");
|
||
|
|
|
||
|
|
if (!SystemWebProxy.Membership.Providers[ProviderName].ChangePassword(UserName, oldPassword, newPassword))
|
||
|
|
return false;
|
||
|
|
UpdateSelf();
|
||
|
|
//_LastPasswordChangedDate = Membership.Providers[ ProviderName ].GetUser( UserName, false ).LastPasswordChangedDate;
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
|
||
|
|
// ChangePassword() can throw 3 types of exception:
|
||
|
|
// 1. ArgumentException is thrown if:
|
||
|
|
// A. OldPassword or NewPassword is null, empty, or longer than 128 characters
|
||
|
|
// B. NewPassword shorter than MinRequiredPasswordLength, or NewPassword contains
|
||
|
|
// less non-alphanumeric characters than MinRequiredNonAlphanumericCharacters,
|
||
|
|
// or NewPassword does not match PasswordStrengthRegularExpression.
|
||
|
|
// C. A developer adds a listener to the MembershipProvider.ValidatingPassword event,
|
||
|
|
// and sets e.Cancel to true, and e.FailureInformation is null.
|
||
|
|
// 2. ProviderException is thrown if the user does not exist when the stored procedure
|
||
|
|
// is run. The only way this could happen is in a race condition, where the user
|
||
|
|
// is deleted in the middle of the MembershipProvider.ChangePassword() method.
|
||
|
|
// 3. It appears that MembershipProviderException currently cannot be thrown, but
|
||
|
|
// there is a codepath that throws this exception, so we should catch it here anyway.
|
||
|
|
internal bool ChangePassword(string oldPassword, string newPassword, bool throwOnError) {
|
||
|
|
bool passwordChanged = false;
|
||
|
|
|
||
|
|
try {
|
||
|
|
passwordChanged = ChangePassword(oldPassword, newPassword);
|
||
|
|
}
|
||
|
|
catch (ArgumentException) {
|
||
|
|
if (throwOnError) throw;
|
||
|
|
}
|
||
|
|
catch (MembershipPasswordException) {
|
||
|
|
if (throwOnError) throw;
|
||
|
|
}
|
||
|
|
catch (ProviderException) {
|
||
|
|
if (throwOnError) throw;
|
||
|
|
}
|
||
|
|
|
||
|
|
return passwordChanged;
|
||
|
|
}
|
||
|
|
|
||
|
|
public virtual bool ChangePasswordQuestionAndAnswer(string password, string newPasswordQuestion, string newPasswordAnswer)
|
||
|
|
{
|
||
|
|
SecurityServices.CheckPasswordParameter(password, "password");
|
||
|
|
SecurityServices.CheckForEmptyOrWhiteSpaceParameter(ref newPasswordQuestion, "newPasswordQuestion");
|
||
|
|
SecurityServices.CheckForEmptyOrWhiteSpaceParameter(ref newPasswordAnswer, "newPasswordAnswer");
|
||
|
|
|
||
|
|
if (!SystemWebProxy.Membership.Providers[ProviderName].ChangePasswordQuestionAndAnswer(UserName, password, newPasswordQuestion, newPasswordAnswer))
|
||
|
|
return false;
|
||
|
|
UpdateSelf();
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
|
||
|
|
public virtual string ResetPassword(string passwordAnswer)
|
||
|
|
{
|
||
|
|
string pass = SystemWebProxy.Membership.Providers[ProviderName].ResetPassword(UserName, passwordAnswer);
|
||
|
|
if (!String.IsNullOrEmpty(pass)) {
|
||
|
|
UpdateSelf();
|
||
|
|
//_LastPasswordChangedDate = Membership.Providers[ProviderName].GetUser(UserName, false).LastPasswordChangedDate;
|
||
|
|
}
|
||
|
|
return pass;
|
||
|
|
}
|
||
|
|
|
||
|
|
public virtual string ResetPassword()
|
||
|
|
{
|
||
|
|
return ResetPassword(null);
|
||
|
|
}
|
||
|
|
|
||
|
|
internal string ResetPassword(bool throwOnError) {
|
||
|
|
return ResetPassword(null, /* useAnswer */ false, throwOnError);
|
||
|
|
}
|
||
|
|
|
||
|
|
internal string ResetPassword(string passwordAnswer, bool throwOnError) {
|
||
|
|
return ResetPassword(passwordAnswer, /* useAnswer */ true, throwOnError);
|
||
|
|
}
|
||
|
|
|
||
|
|
// MembershipProvider.ResetPassword() can throw 3 types of exception:
|
||
|
|
// 1. ArgumentException is thrown if:
|
||
|
|
// A. Answer is null, empty, or longer than 128 characters
|
||
|
|
// 2. ProviderException is thrown if:
|
||
|
|
// A. The user does not exist when the stored procedure is run. The only way
|
||
|
|
// this could happen is in a race condition, where the user is deleted in
|
||
|
|
// the middle of the MembershipProvider.ChangePassword() method.
|
||
|
|
// B. A developer adds a listener to the MembershipProvider.ValidatingPassword event,
|
||
|
|
// and sets e.Cancel to true, and e.FailureInformation is null.
|
||
|
|
// 3. MembershipPasswordException is thrown if the user is locked out, or the answer
|
||
|
|
// is incorrect.
|
||
|
|
private string ResetPassword(string passwordAnswer, bool useAnswer, bool throwOnError) {
|
||
|
|
string password = null;
|
||
|
|
|
||
|
|
try {
|
||
|
|
if (useAnswer) {
|
||
|
|
password = ResetPassword(passwordAnswer);
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
password = ResetPassword();
|
||
|
|
}
|
||
|
|
}
|
||
|
|
catch (ArgumentException) {
|
||
|
|
if (throwOnError) throw;
|
||
|
|
}
|
||
|
|
catch (MembershipPasswordException) {
|
||
|
|
if (throwOnError) throw;
|
||
|
|
}
|
||
|
|
catch (ProviderException) {
|
||
|
|
if (throwOnError) throw;
|
||
|
|
}
|
||
|
|
|
||
|
|
return password;
|
||
|
|
}
|
||
|
|
|
||
|
|
public virtual bool UnlockUser()
|
||
|
|
{
|
||
|
|
if (SystemWebProxy.Membership.Providers[ProviderName].UnlockUser(UserName))
|
||
|
|
{
|
||
|
|
UpdateSelf();
|
||
|
|
return !IsLockedOut;
|
||
|
|
}
|
||
|
|
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
private void UpdateSelf()
|
||
|
|
{
|
||
|
|
MembershipUser mu = SystemWebProxy.Membership.Providers[ProviderName].GetUser(UserName, false);
|
||
|
|
if (mu != null) {
|
||
|
|
try {
|
||
|
|
_LastPasswordChangedDate = mu.LastPasswordChangedDate.ToUniversalTime();
|
||
|
|
} catch (NotSupportedException) {}
|
||
|
|
try {
|
||
|
|
LastActivityDate = mu.LastActivityDate;
|
||
|
|
} catch (NotSupportedException) {}
|
||
|
|
try {
|
||
|
|
LastLoginDate = mu.LastLoginDate;
|
||
|
|
} catch (NotSupportedException) {}
|
||
|
|
try {
|
||
|
|
_CreationDate = mu.CreationDate.ToUniversalTime();
|
||
|
|
} catch (NotSupportedException) { }
|
||
|
|
try {
|
||
|
|
_LastLockoutDate = mu.LastLockoutDate.ToUniversalTime();
|
||
|
|
} catch (NotSupportedException) { }
|
||
|
|
try {
|
||
|
|
_IsLockedOut = mu.IsLockedOut;
|
||
|
|
} catch (NotSupportedException) { }
|
||
|
|
try {
|
||
|
|
IsApproved = mu.IsApproved;
|
||
|
|
} catch (NotSupportedException) { }
|
||
|
|
try {
|
||
|
|
Comment = mu.Comment;
|
||
|
|
} catch (NotSupportedException) { }
|
||
|
|
try {
|
||
|
|
_PasswordQuestion = mu.PasswordQuestion;
|
||
|
|
} catch (NotSupportedException) { }
|
||
|
|
try {
|
||
|
|
Email = mu.Email;
|
||
|
|
} catch (NotSupportedException) { }
|
||
|
|
try {
|
||
|
|
_ProviderUserKey = mu.ProviderUserKey;
|
||
|
|
} catch (NotSupportedException) { }
|
||
|
|
}
|
||
|
|
}
|
||
|
|
////////////////////////////////////////////////////////////
|
||
|
|
// private Data
|
||
|
|
private string _UserName;
|
||
|
|
private object _ProviderUserKey;
|
||
|
|
private string _Email;
|
||
|
|
private string _PasswordQuestion;
|
||
|
|
private string _Comment;
|
||
|
|
private bool _IsApproved;
|
||
|
|
private bool _IsLockedOut;
|
||
|
|
private DateTime _LastLockoutDate;
|
||
|
|
private DateTime _CreationDate;
|
||
|
|
private DateTime _LastLoginDate;
|
||
|
|
private DateTime _LastActivityDate;
|
||
|
|
private DateTime _LastPasswordChangedDate;
|
||
|
|
private string _ProviderName;
|
||
|
|
}
|
||
|
|
}
|