package servlets.admin.config; import jakarta.servlet.ServletException; import jakarta.servlet.http.Cookie; import jakarta.servlet.http.HttpServlet; import jakarta.servlet.http.HttpServletRequest; import jakarta.servlet.http.HttpServletResponse; import jakarta.servlet.http.HttpSession; import java.io.IOException; import java.io.PrintWriter; import org.apache.logging.log4j.LogManager; import org.apache.logging.log4j.Logger; import utils.OpenRegistration; import utils.ShepherdLogManager; import utils.Validate; /** * This control class is responsible for toggling the availability of the Registration functionality *
*
* This file is part of the Security Shepherd Project. * *

The Security Shepherd project is free software: you can redistribute it and/or modify it under * the terms of the GNU General Public License as published by the Free Software Foundation, either * version 3 of the License, or (at your option) any later version.
* *

The Security Shepherd project is distributed in the hope that it will be useful, but WITHOUT * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR * PURPOSE. See the GNU General Public License for more details.
* *

You should have received a copy of the GNU General Public License along with the Security * Shepherd project. If not, see . * * @author Mark Denihan */ public class ToggleRegistration extends HttpServlet { private static final long serialVersionUID = 1L; private static final Logger log = LogManager.getLogger(ToggleRegistration.class); /** * This method when called by an administrator toggles the availability of the registraion * functionality, This is actually performed by the OpenRegistration.toggle() method. * * @param csrfToken */ public void doPost(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException { // Setting IpAddress To Log and taking header for original IP if forwarded from proxy ShepherdLogManager.setRequestIp(request.getRemoteAddr(), request.getHeader("X-Forwarded-For")); log.debug("*** servlets.Admin.config.ToggleRegistration ***"); PrintWriter out = response.getWriter(); out.print(getServletInfo()); HttpSession ses = request.getSession(true); Cookie tokenCookie = Validate.getToken(request.getCookies()); Object tokenParmeter = request.getParameter("csrfToken"); if (Validate.validateAdminSession(ses, tokenCookie, tokenParmeter)) { ShepherdLogManager.setRequestIp( request.getRemoteAddr(), request.getHeader("X-Forwarded-For"), ses.getAttribute("userName").toString()); if (Validate.validateTokens(tokenCookie, tokenParmeter)) { try { log.debug("Getting ApplicationRoot"); String ApplicationRoot = getServletContext().getRealPath(""); log.debug("Servlet root = " + ApplicationRoot); OpenRegistration.toggle(); String htmlOutput = new String(); if (OpenRegistration.isDisabled()) { htmlOutput = "

Registration Closed

The application Registration has been" + " disabled. Users will not be able to register new accounts.

"; } else { htmlOutput = "

Registration Opened

The application Registration has been" + " enabled. Users will now be able to register new accounts.

"; } out.write(htmlOutput); } catch (Exception e) { log.error("Registration Availability Update Error: " + e.toString()); out.print( "

Registration Availability Update Failure


" + "

" + "An error Occurred! Please try again." + "

"); } } else { log.debug("CSRF tokens did not match"); out.print( "

Registration Availability Update Failure


" + "

" + "An error Occurred! CSRF Tokens did not match." + "

"); } } else { out.print( "

Registration Availability Update Failure


An error Occurred! Please log in or try non administrator" + " functions!

"); } log.debug("*** servlets.Admin.ToggleRegistration END ***"); } }