User management

src/main/java/net/gepafin/tendermanagement/dao/UserDao.java

@@ -6,21 +6,15 @@ import net.gepafin.tendermanagement.config.SamlSuccessHandler;
 import net.gepafin.tendermanagement.config.Translator;
 import net.gepafin.tendermanagement.constants.GepafinConstant;
 import net.gepafin.tendermanagement.entities.*;
-import net.gepafin.tendermanagement.enums.RoleStatusEnum;
-import net.gepafin.tendermanagement.enums.UserActionContextEnum;
-import net.gepafin.tendermanagement.enums.UserActionLogsEnum;
-import net.gepafin.tendermanagement.enums.UserStatusEnum;
-import net.gepafin.tendermanagement.enums.VersionActionTypeEnum;
+import net.gepafin.tendermanagement.enums.*;
 import net.gepafin.tendermanagement.model.request.*;
-import net.gepafin.tendermanagement.model.response.CompanyResponse;
-import net.gepafin.tendermanagement.model.response.RoleResponseBean;
-import net.gepafin.tendermanagement.model.response.UserSamlResponse;
-import net.gepafin.tendermanagement.model.response.UserResponseBean;
+import net.gepafin.tendermanagement.model.response.*;
 import net.gepafin.tendermanagement.model.util.JWTToken;
 import net.gepafin.tendermanagement.repositories.BeneficiaryRepository;
 import net.gepafin.tendermanagement.repositories.UserRepository;
 import net.gepafin.tendermanagement.service.HubService;
 import net.gepafin.tendermanagement.service.RoleService;
+import net.gepafin.tendermanagement.service.SystemEmailTemplatesService;
 import net.gepafin.tendermanagement.service.impl.AuthenticationService;
 import net.gepafin.tendermanagement.util.LoggingUtil;
 import net.gepafin.tendermanagement.util.Utils;
@@ -39,6 +33,7 @@ import org.springframework.stereotype.Component;
 import java.util.ArrayList;
 import java.util.List;
 
+import java.util.Map;
 import java.util.stream.Collectors;
 
 import static net.gepafin.tendermanagement.util.Utils.setIfUpdated;
@@ -90,6 +85,18 @@ public class UserDao {
     @Autowired
     private HttpServletRequest request;
 
+    @Autowired
+    private SystemEmailTemplatesService systemEmailTemplatesService;
+    
+    @Autowired
+    private EmailLogDao emailLogDao;
+
+    @Autowired
+    private EmailNotificationDao emailNotificationDao;
+
+    @Value("${fe.base.url}")
+    private String feBaseUrl;
+
     public JWTToken createUser(HttpServletRequest request, String tempToken, UserReq userReq) {
 
         if (StringUtils.isEmpty(userReq.getHubUuid())) {
@@ -120,9 +127,35 @@ public class UserDao {
         /** This code is responsible for adding a version history log for the "Create user" operation. **/
         loggingUtil.addVersionHistory(VersionHistoryRequest.builder().request(request).actionType(VersionActionTypeEnum.INSERT).newData(userEntity).build());
 
+        if(beneficiary == null){
+            sendEmailToOnboardingUser(userEntity);
+        }
         return token;
     }
-    
+        public void sendEmailToOnboardingUser(UserEntity userEntity){
+            SystemEmailTemplateResponse emailTemplate = systemEmailTemplatesService.retrieveTemplateByTypeAndCall(
+                    SystemEmailTemplatesEntity.SystemEmailTemplatesEntityTypeEnum.USER_ONBOARDING, userEntity.getHub(), null);
+            EmailLogRequest emailLogRequest = emailLogDao.createEmailLogRequest(emailTemplate.getEmailScenario(), RecipientTypeEnum.USER, userEntity.getId(), userEntity.getEmail(),
+                    userEntity.getId(), null, null, null);
+            String firstName = userEntity.getFirstName() != null ? userEntity.getFirstName() : "";
+            String lastName = userEntity.getLastName() != null ? userEntity.getLastName() : "";
+            String userName = String.join(" ", firstName, lastName).trim();
+            String subject = Utils.replacePlaceholders(emailTemplate.getSubject(), Map.of(
+                    "{{user_name}}", userName
+            ));
+            String body = Utils.replacePlaceholders(emailTemplate.getHtmlContent(), Map.of(
+                    "{{user_name}}", userName,
+                    "{{user_email}}", userEntity.getEmail()
+            ));
+
+            emailNotificationDao.sendMail(
+                    userEntity.getHub().getId(),
+                    subject,
+                    body,
+                    List.of(userEntity.getEmail()),
+                    emailLogRequest
+            );
+        }
 	private BeneficiaryEntity createBeneficiary(RoleEntity roleEntity, UserReq userReq, HubEntity hub) {
 		BeneficiaryEntity beneficiaryEntity = null;
 		if (RoleStatusEnum.ROLE_BENEFICIARY.getValue().equals(roleEntity.getRoleType())) {
@@ -164,12 +197,10 @@ public class UserDao {
 					Translator.toLocale(GepafinConstant.VALIDATE_EMAIL));
 		}
 		log.info("Creating user with email: {}", userReq.getEmail());
-		if (userRepository.existsByEmailIgnoreCaseAndHubUniqueUuid(userReq.getEmail(), userReq.getHubUuid())) {
-			log.error("User creation failed: Email {} already exists", userReq.getEmail());
-			throw new CustomValidationException(Status.VALIDATION_ERROR,
-					Translator.toLocale(GepafinConstant.EMAIL_ALREADY_EXISTS));
-		}
-		if (Boolean.FALSE.equals(StringUtils.isEmpty(userReq.getCodiceFiscale()))
+        RoleEntity roleEntity = roleService.validateRole(userReq.getRoleId());
+        validateDuplicateEmail(userReq.getEmail(), userReq.getHubUuid(), roleEntity.getRoleType());
+
+        if (Boolean.FALSE.equals(StringUtils.isEmpty(userReq.getCodiceFiscale()))
 				&& userRepository.existsByBeneficiaryCodiceFiscaleAndHubId(userReq.getCodiceFiscale(), hub.getId())) {
 			log.error("User creation failed: CodiceFiscale {} already exists", userReq.getCodiceFiscale());
 			throw new CustomValidationException(Status.VALIDATION_ERROR,
@@ -191,8 +222,29 @@ public class UserDao {
 			}
 		}
 	}
+    private void validateDuplicateEmail(String email, String hubUuid, String roleType) {
+        Boolean existsForNonBeneficiaries = userRepository.existsByEmailIgnoreCaseForNonBeneficiaries(
+                email, hubUuid, RoleStatusEnum.ROLE_BENEFICIARY.getValue());
 
-	private void validatePassword(String password, String confirmPassword, String tempToken) {
+        Boolean beneficiaryExistsInHub = userRepository.existsByEmailIgnoreCaseForBeneficiaries(
+                email, hubUuid, RoleStatusEnum.ROLE_BENEFICIARY.getValue());
+
+        if (Boolean.TRUE.equals(RoleStatusEnum.ROLE_BENEFICIARY.getValue().equals(roleType))) {
+            if (beneficiaryExistsInHub) {
+                throw new CustomValidationException(Status.VALIDATION_ERROR,
+                        Translator.toLocale(GepafinConstant.EMAIL_ALREADY_EXISTS));
+            }
+        }
+        else {
+            if (existsForNonBeneficiaries) {
+                throw new CustomValidationException(Status.VALIDATION_ERROR,
+                        Translator.toLocale(GepafinConstant.EMAIL_ALREADY_EXISTS));
+            }
+        }
+    }
+
+
+    private void validatePassword(String password, String confirmPassword, String tempToken) {
         if (StringUtils.isEmpty(password) || StringUtils.isEmpty(confirmPassword)) {
         	if(tempToken == null) {        		
         		throw new CustomValidationException(Status.VALIDATION_ERROR, Translator.toLocale(GepafinConstant.VALIDATE_PASSWORD));
@@ -263,7 +315,7 @@ public class UserDao {
 			userEntity.setAddress(userReq.getAddress());
 			userEntity.setPhoneNumber(userReq.getPhoneNumber());
 			userEntity.setDateOfBirth(userReq.getDateOfBirth());
-		}
+        }
         return userRepository.save(userEntity);
     }
 
@@ -362,25 +414,83 @@ public class UserDao {
         return user;
     }
 
-    public String initiatePasswordReset(InitiatePasswordResetReq resetReq) {
-		UserEntity user = userRepository
-				.findByEmailIgnoreCaseAndHubUniqueUuid(resetReq.getEmail(), resetReq.getHubUuid())
-				.orElseThrow(() -> new ResourceNotFoundException(Status.NOT_FOUND,
-						Translator.toLocale(GepafinConstant.USER_NOT_FOUND_MSG)));
+    public void initiatePasswordReset(InitiatePasswordResetReq resetReq) {
+        UserEntity user = userRepository.findUserExcludingRoleType(
+                resetReq.getEmail(),
+                resetReq.getHubUuid(),
+                RoleStatusEnum.ROLE_BENEFICIARY.getValue()
+        ).orElseThrow(() -> new ResourceNotFoundException(
+                Status.NOT_FOUND,
+                Translator.toLocale(GepafinConstant.USER_NOT_FOUND_MSG)
+        ));
 
+        UserEntity oldUserEntity = Utils.getClonedEntityForData(user);
         String token = Utils.generateSecureToken();
         user.setResetPasswordToken(token);
         userRepository.save(user);
+
+        /** This code is responsible for adding a version history log for the "Initiate password reset request" operation **/
+        loggingUtil.addVersionHistory(VersionHistoryRequest.builder().request(request).actionType(VersionActionTypeEnum.UPDATE).oldData(oldUserEntity).newData(user).build());
+
         log.info("Password reset token generated for user: {}", resetReq.getEmail());
-        return token;
+
+        sendResetPasswordTokenEmail(user, token);
+    }
+    public void sendResetPasswordTokenEmail(UserEntity user, String token) {
+
+        SystemEmailTemplateResponse emailTemplate = systemEmailTemplatesService.retrieveTemplateByTypeAndCall(
+                SystemEmailTemplatesEntity.SystemEmailTemplatesEntityTypeEnum.PASSWORD_RESET, user.getHub(), null);
+        String redirectUrl = feBaseUrl;
+        if (Boolean.FALSE.equals(StringUtils.isEmpty(user.getHub().getDomainName()))) {
+            redirectUrl = user.getHub().getDomainName();
+        }
+
+        EmailLogRequest emailLogRequest = emailLogDao.createEmailLogRequest(
+                emailTemplate.getEmailScenario(),
+                RecipientTypeEnum.USER,
+                user.getId(),
+                user.getEmail(),
+                user.getId(),
+                null,
+                null,
+                null);
+        redirectUrl = String.format(
+                user.getHub().getDomainName() + GepafinConstant.RESET_PASSWORD_URL_FORMAT,
+                token,
+                user.getEmail()
+        );
+        String firstName = user.getFirstName() != null ? user.getFirstName() : "";
+        String lastName = user.getLastName() != null ? user.getLastName() : "";
+        String userName = String.join(" ", firstName, lastName).trim();
+        String subject = Utils.replacePlaceholders(emailTemplate.getSubject(), Map.of(
+                "{{user_name}}", userName
+        ));
+        String body = Utils.replacePlaceholders(emailTemplate.getHtmlContent(), Map.of(
+                "{{user_name}}", userName,
+                "{{reset_password_link}}", redirectUrl
+        ));
+        emailNotificationDao.sendMail(
+                user.getHub().getId(),
+                subject,
+                body,
+                List.of(user.getEmail()),
+                emailLogRequest
+        );
+
+        log.info("Password reset token email sent to: {}", user.getEmail());
     }
 
     public Boolean resetPassword(ResetPasswordReq resetPasswordReq) {
-    	UserEntity user = userRepository
-				.findByEmailIgnoreCaseAndHubUniqueUuid(resetPasswordReq.getEmail(), resetPasswordReq.getHubUuid())
-				.orElseThrow(() -> new ResourceNotFoundException(Status.NOT_FOUND,
-						Translator.toLocale(GepafinConstant.USER_NOT_FOUND_MSG)));
-    	
+        UserEntity user = userRepository.findUserExcludingRoleType(
+                resetPasswordReq.getEmail(),
+                resetPasswordReq.getHubUuid(),
+                RoleStatusEnum.ROLE_BENEFICIARY.getValue()
+        ).orElseThrow(() -> new ResourceNotFoundException(
+                Status.NOT_FOUND,
+                Translator.toLocale(GepafinConstant.USER_NOT_FOUND_MSG)
+        ));
+
+        UserEntity oldUserEntity = Utils.getClonedEntityForData(user);
         if (!resetPasswordReq.getNewPassword().equals(resetPasswordReq.getConfirmPassword())) {
             log.info("User creation failed: Passwords do not match for email {}", user.getEmail());
             throw new CustomValidationException(Status.VALIDATION_ERROR, Translator.toLocale(GepafinConstant.PASSWORD_DOESNT_MATCH));
@@ -395,25 +505,36 @@ public class UserDao {
         user.setPassword(passwordEncoder.encode(resetPasswordReq.getNewPassword()));
         user.setResetPasswordToken(null);
         userRepository.save(user);
+
+        /** This code is responsible for adding a version history log for the "Reset Password " operation **/
+        loggingUtil.addVersionHistory(VersionHistoryRequest.builder().request(request).actionType(VersionActionTypeEnum.UPDATE).oldData(oldUserEntity).newData(user).build());
+
         log.info("Password successfully reset for user: {}", resetPasswordReq.getEmail());
         return true;
     }
 
-    public Boolean changePassword(UserEntity userEntity, ChangePasswordRequest request) {
+    public Boolean changePassword(UserEntity userEntity, ChangePasswordRequest changePasswordRequest) {
     	UserEntity user = userRepository
-				.findByEmailIgnoreCaseAndHubUniqueUuid(request.getEmail(), userEntity.getHub().getUniqueUuid())
-				.orElseThrow(() -> new ResourceNotFoundException(Status.NOT_FOUND,
-						Translator.toLocale(GepafinConstant.USER_NOT_FOUND_MSG)));
-    	
-        if (!passwordEncoder.matches(request.getPassword(), user.getPassword())) {
+				.findUserExcludingRoleType(changePasswordRequest.getEmail(), userEntity.getHub().getUniqueUuid(),RoleStatusEnum.ROLE_BENEFICIARY.getValue())
+                .orElseThrow(() -> new ResourceNotFoundException(
+                        Status.NOT_FOUND,
+                        Translator.toLocale(GepafinConstant.USER_NOT_FOUND_MSG)
+                ));
+        UserEntity oldUserEntity = Utils.getClonedEntityForData(userEntity);
+        if (!passwordEncoder.matches(changePasswordRequest.getPassword(), user.getPassword())) {
             throw new ResourceNotFoundException(Status.NOT_FOUND, Translator.toLocale(GepafinConstant.CURRENT_PASSWORD_INCORRECT));
         }
-        if (!request.getNewPassword().equals(request.getConfirmPassword())) {
+        if (!changePasswordRequest.getNewPassword().equals(changePasswordRequest.getConfirmPassword())) {
             log.info("User creation failed: Passwords do not match for email {}", user.getEmail());
             throw new CustomValidationException(Status.VALIDATION_ERROR, Translator.toLocale(GepafinConstant.PASSWORD_DOESNT_MATCH));
         }
-        user.setPassword(passwordEncoder.encode(request.getNewPassword()));
+        user.setPassword(passwordEncoder.encode(changePasswordRequest.getNewPassword()));
         userRepository.save(user);
+
+        /** This code is responsible for adding a version history log for the "Change user password" operation **/
+        loggingUtil.addVersionHistory(VersionHistoryRequest.builder().request(request).actionType(VersionActionTypeEnum.UPDATE).oldData(oldUserEntity).newData(user).build());
+
+
         return true;
     }
     public void logout(HttpServletRequest request, HttpServletResponse response) {