org.openmrs.web.controller.user

Class ChangePasswordFormController

java.lang.Object

org.openmrs.web.controller.user.ChangePasswordFormController

@Controller
 @RequestMapping(value="/admin/users/changePassword.form")
public class ChangePasswordFormController
extends Object

Used for changing the password when the force password change option is set during a new user creation.

Constructor Summary

Constructors

Constructor and Description
ChangePasswordFormController()

Method Summary

Modifier and Type	Method and Description
User	formBackingObject() The model from which the data binding happens on the view
String	handleSubmission(javax.servlet.http.HttpSession httpSession, String oldPassword, String password, String confirmPassword, String question, String answer, String confirmAnswer, User user, org.springframework.validation.BindingResult errors) Method to save changes of the new password for a user.
String	showForm(javax.servlet.http.HttpSession httpSession) This method will display the change password form

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ChangePasswordFormController

public ChangePasswordFormController()

Method Detail

formBackingObject

@ModelAttribute(value="user")
public User formBackingObject()

The model from which the data binding happens on the view

Returns:

authenticated user

Expected Behavior:

Should return an authenticated User

showForm

@RequestMapping(method=GET)
public String showForm(javax.servlet.http.HttpSession httpSession)

This method will display the change password form

Parameters:

httpSession - current browser session

Returns:

the view to be rendered

handleSubmission

@RequestMapping(method=POST)
public String handleSubmission(javax.servlet.http.HttpSession httpSession,
                                                            @RequestParam(required=true,value="oldPassword")
                                                            String oldPassword,
                                                            @RequestParam(required=true,value="password")
                                                            String password,
                                                            @RequestParam(required=true,value="confirmPassword")
                                                            String confirmPassword,
                                                            @RequestParam(required=false,value="question")
                                                            String question,
                                                            @RequestParam(required=false,value="answer")
                                                            String answer,
                                                            @RequestParam(required=false,value="confirmAnswer")
                                                            String confirmAnswer,
                                                            @ModelAttribute(value="user")
                                                            User user,
                                                            org.springframework.validation.BindingResult errors)

Method to save changes of the new password for a user. The password will be validated against the current rules and will display error messages in case the password is not strong enough.

Parameters:

password - to be applied

confirmPassword - confirmation for the password to be applied

question - in case of a forgotten password

answer - answer for the question

confirmAnswer - confirmation of the answer for the question

errors - while processing the form

Expected Behavior:

Should display an error message when the password and confirm password entries are different

Should not display error message if password and confirm password are the same

Should display error message when the password is empty

Should display error message if password is weak

Should display error message when question is empty and answer is not empty

Should display error message when the answer and the confirm answer entered are not the same

Should display error message when the answer is empty and question is not empty

Should navigate to the home page if the authentication is successful

Should set the user property forcePassword to false after successful password change

Should not set the user property forcePassword to false after unsuccessful password change

Should remain on the changePasswordForm page if there are errors

Should set the secret question and answer of the user