Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions config/config.go
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ import (
"github.com/opensourceways/app-cla-server/signing/domain"
"github.com/opensourceways/app-cla-server/signing/domain/dp"
"github.com/opensourceways/app-cla-server/signing/infrastructure/accesstokenimpl"
"github.com/opensourceways/app-cla-server/signing/infrastructure/captchaimpl"
"github.com/opensourceways/app-cla-server/signing/infrastructure/localclaimpl"
"github.com/opensourceways/app-cla-server/signing/infrastructure/loginimpl"
"github.com/opensourceways/app-cla-server/signing/infrastructure/passwordimpl"
Expand Down Expand Up @@ -48,6 +49,7 @@ type redisdbConfig struct {
DB redisdb.Config `json:"db"`
Login loginimpl.Config `json:"login"`
AccessToken accesstokenimpl.Config `json:"access_token"`
Captcha captchaimpl.Config `json:"captcha"`
}

type Config struct {
Expand Down Expand Up @@ -77,6 +79,7 @@ func (cfg *Config) ConfigItems() []interface{} {
&cfg.Redisdb.DB,
&cfg.Redisdb.Login,
&cfg.Redisdb.AccessToken,
&cfg.Redisdb.Captcha,
&cfg.Password,
&cfg.LocalCLA,
&cfg.Symmetric,
Expand Down
41 changes: 39 additions & 2 deletions controllers/auth_on_corp_manager.go
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,8 @@ import (

type corpAuthFailure struct {
errMsg
RetryNum int `json:"retry_num"`
RetryNum int `json:"retry_num"`
NeedCaptcha bool `json:"need_captcha,omitempty"`
}

// @Title Logout
Expand Down Expand Up @@ -52,7 +53,17 @@ func (ctl *CorporationManagerController) Login() {
if merr != nil {
if merr.IsErrorOf(models.ErrWrongIDOrPassword) {
body := corpAuthFailure{
RetryNum: v.RetryNum,
RetryNum: v.RetryNum,
NeedCaptcha: v.NeedCaptcha,
}
body.ErrCode = merr.ErrCode()
body.ErrMsg = merr.Error()

ctl.sendResponse(action, body, 400)

} else if merr.IsErrorOf(models.ErrCaptchaInvalid) {
body := corpAuthFailure{
NeedCaptcha: true,
}
body.ErrCode = merr.ErrCode()
body.ErrMsg = merr.Error()
Expand Down Expand Up @@ -83,6 +94,32 @@ func (ctl *CorporationManagerController) Login() {
ctl.addOperationLog(v.UserId+" / "+v.Role, action, 0)
}

// @Title GetCaptcha
// @Description get a graphic captcha image for login brute-force protection
// @Tags CorpManager
// @Produce json
// @Success 200
// @router /captcha [get]
func (ctl *CorporationManagerController) GetCaptcha() {
action := "get login captcha"

id, image, merr := models.GetLoginCaptcha()
if merr != nil {
ctl.sendModelErrorAsResp(merr, action)
return
}

ctl.sendSuccessResp(action, loginCaptchaResp{
CaptchaId: id,
CaptchaImage: image,
})
}

type loginCaptchaResp struct {
CaptchaId string `json:"captcha_id"`
CaptchaImage string `json:"captcha_image"`
}

func (ctl *CorporationManagerController) genToken(linkID string, info *models.CorpManagerLoginInfo) error {
permission := ""
switch info.Role {
Expand Down
5 changes: 5 additions & 0 deletions controllers/corp_manager.go
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,11 @@ func (ctl *CorporationManagerController) Prepare() {
}

if ctl.isGetRequest() {
if strings.HasSuffix(ctl.routerPattern(), "/captcha") {
// get login captcha — no authentication required
return
}

// get basic info
ctl.apiPrepareWithAC(
&accessController{Payload: &acForCorpManagerPayload{}},
Expand Down
3 changes: 3 additions & 0 deletions go.mod
Original file line number Diff line number Diff line change
Expand Up @@ -18,11 +18,13 @@ require (
github.com/beorn7/perks v1.0.1 // indirect
github.com/cespare/xxhash/v2 v2.2.0 // indirect
github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
github.com/golang/freetype v0.0.0-20170609003504-e2365dfdc4a0 // indirect
github.com/golang/snappy v0.0.1 // indirect
github.com/hashicorp/golang-lru v0.5.4 // indirect
github.com/klauspost/compress v1.13.6 // indirect
github.com/kr/text v0.2.0 // indirect
github.com/mitchellh/mapstructure v1.5.0 // indirect
github.com/mojocn/base64Captcha v1.3.8 // indirect
github.com/montanaflynn/stats v0.0.0-20171201202039-1bf9dbcd8cbe // indirect
github.com/prometheus/client_golang v1.19.0 // indirect
github.com/prometheus/client_model v0.5.0 // indirect
Expand All @@ -33,6 +35,7 @@ require (
github.com/xdg-go/scram v1.1.2 // indirect
github.com/xdg-go/stringprep v1.0.4 // indirect
github.com/youmark/pkcs8 v0.0.0-20181117223130-1be2e3e5546d // indirect
golang.org/x/image v0.23.0 // indirect
golang.org/x/net v0.47.0 // indirect
golang.org/x/sync v0.18.0 // indirect
golang.org/x/sys v0.38.0 // indirect
Expand Down
42 changes: 42 additions & 0 deletions go.sum
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,8 @@ github.com/fsnotify/fsnotify v1.4.9 h1:hsms1Qyu0jgnwNXIxa+/V/PDsU6CfLf6CNO8H7IWo
github.com/fsnotify/fsnotify v1.4.9/go.mod h1:znqG4EE+3YCdAaPaxE2ZRY/06pZUdp0tY4IgpuI1SZQ=
github.com/go-redis/redis/v8 v8.11.5 h1:AcZZR7igkdvfVmQTPnu9WE37LRrO/YrBH5zWyjDC0oI=
github.com/go-redis/redis/v8 v8.11.5/go.mod h1:gREzHqY1hg6oD9ngVRbLStwAWKhA0FEgq8Jd4h5lpwo=
github.com/golang/freetype v0.0.0-20170609003504-e2365dfdc4a0 h1:DACJavvAHhabrF08vX0COfcOBJRhZ8lUbR+ZWIs0Y5g=
github.com/golang/freetype v0.0.0-20170609003504-e2365dfdc4a0/go.mod h1:E/TSTwGwJL78qG/PmXZO1EjYhfJinVAhrmmHX6Z8B9k=
github.com/golang/snappy v0.0.1 h1:Qgr9rKW7uDUkrbSmQeiDsGa8SjGyCOGtuasMWwvp2P4=
github.com/golang/snappy v0.0.1/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
github.com/google/go-cmp v0.5.2/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
Expand All @@ -36,6 +38,8 @@ github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
github.com/mitchellh/mapstructure v1.5.0 h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY=
github.com/mitchellh/mapstructure v1.5.0/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo=
github.com/mojocn/base64Captcha v1.3.8 h1:rrN9BhCwXKS8ht1e21kvR3iTaMgf4qPC9sRoV52bqEg=
github.com/mojocn/base64Captcha v1.3.8/go.mod h1:QFZy927L8HVP3+VV5z2b1EAEiv1KxVJKZbAucVgLUy4=
github.com/montanaflynn/stats v0.0.0-20171201202039-1bf9dbcd8cbe h1:iruDEfMl2E6fbMZ9s0scYfZQ84/6SPL6zC8ACM2oIL0=
github.com/montanaflynn/stats v0.0.0-20171201202039-1bf9dbcd8cbe/go.mod h1:wL8QJuTMNUDYhXwkmfOly8iTdp5TEcJFWZD2D7SIkUc=
github.com/nxadm/tail v1.4.8 h1:nPr65rt6Y5JFSKQO7qToXr7pePgD6Gwiw05lkbyAQTE=
Expand Down Expand Up @@ -80,20 +84,39 @@ go.mongodb.org/mongo-driver v1.12.0/go.mod h1:AZkxhPnFJUoH7kZlFkVKucV20K387miPfm
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
golang.org/x/crypto v0.13.0/go.mod h1:y6Z2r+Rw4iayiXXAIxJIDAJ1zMW4yaTpebo8fPOliYc=
golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU=
golang.org/x/crypto v0.23.0/go.mod h1:CKFgDieR+mRhux2Lsu27y0fO304Db0wZe70UKqHu0v8=
golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q=
golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4=
golang.org/x/image v0.0.0-20190910094157-69e4b8554b2a/go.mod h1:FeLwcggjj3mMvU+oOTbSwawSJRM1uh48EjtB4UJZlP0=
golang.org/x/image v0.23.0 h1:HseQ7c2OpPKTPVzNjG5fwJsOTCiiwS4QdsYi5XU6H68=
golang.org/x/image v0.23.0/go.mod h1:wJJBTdLfCCf3tiHa1fNxpZmUI4mmoZvwMCPP0ddoNKY=
golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
golang.org/x/mod v0.12.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
golang.org/x/mod v0.15.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
golang.org/x/net v0.15.0/go.mod h1:idbUs1IY1+zTqbi8yxTbhexhEEk5ur9LInksu6HrEpk=
golang.org/x/net v0.21.0/go.mod h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44=
golang.org/x/net v0.25.0/go.mod h1:JkAGAh7GEvH74S6FOH42FLoXpXbE/aqXSrIQjXgsiwM=
golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY=
golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU=
golang.org/x/oauth2 v0.27.0 h1:da9Vo7/tDv5RH/7nZDz1eMGS/q1Vv1N/7FCrBhI9I3M=
golang.org/x/oauth2 v0.27.0/go.mod h1:onh5ek6nERTohokkhCD/y2cV4Do3fxFHFuAejCkRWT8=
golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.3.0/go.mod h1:FU7BRWz2tNW+3quACPkgCx/L+uEAv1htQ0V83Z9Rj+Y=
golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I=
golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI=
golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
Expand All @@ -102,21 +125,40 @@ golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7w
golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
golang.org/x/sys v0.20.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
golang.org/x/telemetry v0.0.0-20240228155512-f48c80bd79b2/go.mod h1:TeRTkGYfJXctD9OcfyVLyj2J3IxLnKwHJR8f4D8a3YE=
golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo=
golang.org/x/term v0.12.0/go.mod h1:owVbMEjm3cBLCHdkQu9b1opXd4ETQWc3BhuQGKgXgvU=
golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk=
golang.org/x/term v0.20.0/go.mod h1:8UkIAJTvZgivsXaD6/pH6U9ecQzZ45awqEOzuCvwpFY=
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
golang.org/x/text v0.3.8/go.mod h1:E6s5w1FMmriuDzIBO73fBruAKo1PCIq6d2Q6DHfQ8WQ=
golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
golang.org/x/text v0.15.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ=
golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM=
golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM=
golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
golang.org/x/tools v0.13.0/go.mod h1:HvlwmtVNQAhOuCjW7xxvovg8wbNq7LwfXh/k7wXUl58=
golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d/go.mod h1:aiJjzUbINMkxbQROHiO6hDPo2LHcIPhhQsa9DLh0yGk=
golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
google.golang.org/protobuf v1.34.2 h1:6xV6lTsCfpGD21XK49h7MhtcApnLqkfYgPcdHftf6hg=
Expand Down
5 changes: 5 additions & 0 deletions models/adapter.go
Original file line number Diff line number Diff line change
Expand Up @@ -230,6 +230,11 @@ func ResetPassword(linkId string, opt *PasswordRetrieval, key string) IModelErro
return userAdapterInstance.ResetPassword(linkId, key, opt.Password)
}

// GetLoginCaptcha returns a new graphic captcha ID and base64-encoded image.
func GetLoginCaptcha() (string, string, IModelError) {
return userAdapterInstance.GetCaptcha()
}

// migration
func MigrateCommunityData(userId string, opt *CommunityMigrationOpt) IModelError {
return migrationAdapterInstance.MigrateCommunityData(userId, opt)
Expand Down
3 changes: 3 additions & 0 deletions models/corp_manager.go
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,8 @@ type CorporationManagerLoginInfo struct {
LinkID string `json:"link_id"`
Password []byte `json:"password"`
PrivacyConsented bool `json:"privacy_consented"`
CaptchaId string `json:"captcha_id"`
CaptchaAnswer string `json:"captcha_answer"`
}

func (info *CorporationManagerLoginInfo) Validate() IModelError {
Expand Down Expand Up @@ -49,6 +51,7 @@ type CorpManagerLoginInfo struct {
PrivacyVersion string
InitialPWChanged bool
RetryNum int
NeedCaptcha bool
}

type CorporationManagerCreateOption struct {
Expand Down
1 change: 1 addition & 0 deletions models/error.go
Original file line number Diff line number Diff line change
Expand Up @@ -53,6 +53,7 @@ const (
ErrTooManyRequest ModelErrCode = "too_many_request"
ErrUserLoginFrozen ModelErrCode = "user_login_frozen"
ErrUserNotExists ModelErrCode = "user_not_exists"
ErrCaptchaInvalid ModelErrCode = "captcha_invalid"
ErrCLAIsUsed ModelErrCode = "cla_is_used"
ErrLinkIsUsed ModelErrCode = "link_is_used"
ErrNoPermission ModelErrCode = "no_permission"
Expand Down
1 change: 1 addition & 0 deletions models/init.go
Original file line number Diff line number Diff line change
Expand Up @@ -77,6 +77,7 @@ type userAdapter interface {
ChangePassword(string, *CorporationManagerChangePassword) IModelError
ResetPassword(linkId string, email string, password []byte) IModelError
GenKeyForPasswordRetrieval(linkId string, email string) (string, IModelError)
GetCaptcha() (id string, imageBase64 string, err IModelError)
}

func RegisterUserAdapter(a userAdapter) {
Expand Down
9 changes: 9 additions & 0 deletions routers/commentsRouter.go
Original file line number Diff line number Diff line change
Expand Up @@ -133,6 +133,15 @@ func init() {
Filters: nil,
Params: nil})

beego.GlobalControllerRouter["github.com/opensourceways/app-cla-server/controllers:CorporationManagerController"] = append(beego.GlobalControllerRouter["github.com/opensourceways/app-cla-server/controllers:CorporationManagerController"],
beego.ControllerComments{
Method: "GetCaptcha",
Router: `/captcha`,
AllowHTTPMethods: []string{"get"},
MethodParams: param.Make(),
Filters: nil,
Params: nil})

beego.GlobalControllerRouter["github.com/opensourceways/app-cla-server/controllers:CorporationPDFController"] = append(beego.GlobalControllerRouter["github.com/opensourceways/app-cla-server/controllers:CorporationPDFController"],
beego.ControllerComments{
Method: "Review",
Expand Down
10 changes: 9 additions & 1 deletion signing.go
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,7 @@ import (
"github.com/opensourceways/app-cla-server/signing/domain/userservice"
"github.com/opensourceways/app-cla-server/signing/domain/vcservice"
"github.com/opensourceways/app-cla-server/signing/infrastructure/accesstokenimpl"
"github.com/opensourceways/app-cla-server/signing/infrastructure/captchaimpl"
"github.com/opensourceways/app-cla-server/signing/infrastructure/encryptionimpl"
"github.com/opensourceways/app-cla-server/signing/infrastructure/limiterimpl"
"github.com/opensourceways/app-cla-server/signing/infrastructure/localclaimpl"
Expand Down Expand Up @@ -131,7 +132,14 @@ func initSigning(cfg *config.Config) error {
adapter.NewUserAdapter(
app.NewUserService(
userService, loginService, repo, symmetric, ur,
interval, vcService, privacyVersion,
interval, vcService,
captchaimpl.NewCaptchaImpl(
redisdb.DAO(),
&cfg.Redisdb.Captcha,
cfg.Domain.Config.IsTestEnvironment,
cfg.Domain.Config.TestCaptchaAnswer,
),
privacyVersion,
),
),
)
Expand Down
20 changes: 20 additions & 0 deletions signing/adapter/user.go
Original file line number Diff line number Diff line change
Expand Up @@ -118,6 +118,7 @@ func (adapter *userAdatper) Login(opt *models.CorporationManagerLoginInfo) (
v, err := adapter.s.Login(&cmd)
if err != nil {
r.RetryNum = v.RetryNum
r.NeedCaptcha = v.NeedCaptcha

code, ok := err.(errorCode)
// unify the error message
Expand All @@ -135,6 +136,13 @@ func (adapter *userAdatper) Login(opt *models.CorporationManagerLoginInfo) (
)
}

if ok && code.ErrorCode() == domain.ErrorCodeCaptchaInvalid {
return r, models.NewModelError(
models.ErrCaptchaInvalid,
errors.New("captcha invalid"),
)
}

return r, toModelError(err)
}

Expand All @@ -148,6 +156,16 @@ func (adapter *userAdatper) Login(opt *models.CorporationManagerLoginInfo) (
return r, nil
}

// GetCaptcha
func (adapter *userAdatper) GetCaptcha() (string, string, models.IModelError) {
id, image, err := adapter.s.GetCaptcha()
if err != nil {
return "", "", toModelError(err)
}

return id, image, nil
}

// GetUserInfo
func (adapter *userAdatper) GetUserInfo(userId string) (
models.CorpManagerUserInfo, models.IModelError,
Expand All @@ -171,6 +189,8 @@ func (adapter *userAdatper) cmdToLogin(opt *models.CorporationManagerLoginInfo)
) {
cmd.LinkId = opt.LinkID
cmd.PrivacyConsented = opt.PrivacyConsented
cmd.CaptchaId = opt.CaptchaId
cmd.CaptchaAnswer = opt.CaptchaAnswer

if cmd.Password, err = dp.NewPassword(opt.Password); err != nil {
return
Expand Down
Loading
Loading