DocSpace-client/web/ASC.Web.Core/Users/UserManagerWrapper.cs

// (c) Copyright Ascensio System SIA 2010-2022
//
// This program is a free software product.
// You can redistribute it and/or modify it under the terms
// of the GNU Affero General Public License (AGPL) version 3 as published by the Free Software
// Foundation. In accordance with Section 7(a) of the GNU AGPL its Section 15 shall be amended
// to the effect that Ascensio System SIA expressly excludes the warranty of non-infringement of
// any third-party rights.
//
// This program is distributed WITHOUT ANY WARRANTY, without even the implied warranty
// of MERCHANTABILITY or FITNESS FOR A PARTICULAR  PURPOSE. For details, see
// the GNU AGPL at: http://www.gnu.org/licenses/agpl-3.0.html
//
// You can contact Ascensio System SIA at Lubanas st. 125a-25, Riga, Latvia, EU, LV-1021.
//
// The  interactive user interfaces in modified source and object code versions of the Program must
// display Appropriate Legal Notices, as required under Section 5 of the GNU AGPL version 3.
//
// Pursuant to Section 7(b) of the License you must retain the original Product logo when
// distributing the program. Pursuant to Section 7(e) we decline to grant you any rights under
// trademark law for use of our trademarks.
//
// All the Product's GUI elements, including illustrations and icon sets, as well as technical writing
// content are licensed under the terms of the Creative Commons Attribution-ShareAlike 4.0
// International. See the License terms at http://creativecommons.org/licenses/by-sa/4.0/legalcode



using Constants = ASC.Core.Users.Constants;

namespace ASC.Web.Core.Users;

/// <summary>
/// Web studio user manager helper
/// </summary>
/// 
[Scope]
public sealed class UserManagerWrapper
{
    private readonly StudioNotifyService _studioNotifyService;
    private readonly UserManager _userManager;
    private readonly SecurityContext _securityContext;
    private readonly MessageService _messageService;
    private readonly CustomNamingPeople _customNamingPeople;
    private readonly TenantUtil _tenantUtil;
    private readonly CoreBaseSettings _coreBaseSettings;
    private readonly IPSecurity.IPSecurity _iPSecurity;
    private readonly DisplayUserSettingsHelper _displayUserSettingsHelper;
    private readonly SettingsManager _settingsManager;
    private readonly UserFormatter _userFormatter;

    public UserManagerWrapper(
        StudioNotifyService studioNotifyService,
        UserManager userManager,
        SecurityContext securityContext,
        MessageService messageService,
        CustomNamingPeople customNamingPeople,
        TenantUtil tenantUtil,
        CoreBaseSettings coreBaseSettings,
        IPSecurity.IPSecurity iPSecurity,
        DisplayUserSettingsHelper displayUserSettingsHelper,
        SettingsManager settingsManager,
        UserFormatter userFormatter)
    {
        _studioNotifyService = studioNotifyService;
        _userManager = userManager;
        _securityContext = securityContext;
        _messageService = messageService;
        _customNamingPeople = customNamingPeople;
        _tenantUtil = tenantUtil;
        _coreBaseSettings = coreBaseSettings;
        _iPSecurity = iPSecurity;
        _displayUserSettingsHelper = displayUserSettingsHelper;
        _settingsManager = settingsManager;
        _userFormatter = userFormatter;
    }

    private bool TestUniqueUserName(string uniqueName)
    {
        if (string.IsNullOrEmpty(uniqueName))
        {
            return false;
        }

        return Equals(_userManager.GetUserByUserName(uniqueName), Constants.LostUser);
    }

    private string MakeUniqueName(UserInfo userInfo)
    {
        if (string.IsNullOrEmpty(userInfo.Email))
        {
            throw new ArgumentException(Resource.ErrorEmailEmpty, nameof(userInfo));
        }

        var uniqueName = new MailAddress(userInfo.Email).User;
        var startUniqueName = uniqueName;
        var i = 0;
        while (!TestUniqueUserName(uniqueName))
        {
            uniqueName = $"{startUniqueName}{(++i).ToString(CultureInfo.InvariantCulture)}";
        }
        return uniqueName;
    }

    public bool CheckUniqueEmail(Guid userId, string email)
    {
        var foundUser = _userManager.GetUserByEmail(email);
        return Equals(foundUser, Constants.LostUser) || foundUser.Id == userId;
    }

    public UserInfo AddUser(UserInfo userInfo, string passwordHash, bool afterInvite = false, bool notify = true, bool isVisitor = false, bool fromInviteLink = false, bool makeUniqueName = true)
    {
        ArgumentNullException.ThrowIfNull(userInfo);

        if (!_userFormatter.IsValidUserName(userInfo.FirstName, userInfo.LastName))
        {
            throw new Exception(Resource.ErrorIncorrectUserName);
        }

        if (!CheckUniqueEmail(userInfo.Id, userInfo.Email))
        {
            throw new Exception(_customNamingPeople.Substitute<Resource>("ErrorEmailAlreadyExists"));
        }

        if (makeUniqueName)
        {
            userInfo.UserName = MakeUniqueName(userInfo);
        }
        if (!userInfo.WorkFromDate.HasValue)
        {
            userInfo.WorkFromDate = _tenantUtil.DateTimeNow();
        }

        if (!_coreBaseSettings.Personal && !fromInviteLink)
        {
            userInfo.ActivationStatus = !afterInvite ? EmployeeActivationStatus.Pending : EmployeeActivationStatus.Activated;
        }

        var newUserInfo = _userManager.SaveUserInfo(userInfo);
        _securityContext.SetUserPasswordHash(newUserInfo.Id, passwordHash);

        if (_coreBaseSettings.Personal)
        {
            _studioNotifyService.SendUserWelcomePersonal(newUserInfo);
            return newUserInfo;
        }

        if ((newUserInfo.Status & EmployeeStatus.Active) == EmployeeStatus.Active && notify)
        {
            //NOTE: Notify user only if it's active
            if (afterInvite)
            {
                if (isVisitor)
                {
                    _studioNotifyService.GuestInfoAddedAfterInvite(newUserInfo);
                }
                else
                {
                    _studioNotifyService.UserInfoAddedAfterInvite(newUserInfo);
                }

                if (fromInviteLink)
                {
                    _studioNotifyService.SendEmailActivationInstructions(newUserInfo, newUserInfo.Email);
                }
            }
            else
            {
                //Send user invite
                if (isVisitor)
                {
                    _studioNotifyService.GuestInfoActivation(newUserInfo);
                }
                else
                {
                    _studioNotifyService.UserInfoActivation(newUserInfo);
                }

            }
        }

        if (isVisitor)
        {
            _userManager.AddUserIntoGroup(newUserInfo.Id, Constants.GroupVisitor.ID);
        }

        return newUserInfo;
    }

    #region Password

    public void CheckPasswordPolicy(string password)
    {
        if (string.IsNullOrWhiteSpace(password))
        {
            throw new Exception(Resource.ErrorPasswordEmpty);
        }

        var passwordSettingsObj = _settingsManager.Load<PasswordSettings>();

        if (!CheckPasswordRegex(passwordSettingsObj, password))
        {
            throw new Exception(GenerateErrorMessage(passwordSettingsObj));
        }
    }

    public string GetPasswordRegex(PasswordSettings passwordSettings)
    {
        var pwdBuilder = new StringBuilder();

        if (_coreBaseSettings.CustomMode)
        {
            pwdBuilder.Append(@"^(?=.*[a-z]{0,})");

            if (passwordSettings.Digits)
            {
                pwdBuilder.Append(@"(?=.*\d)");
            }

            if (passwordSettings.UpperCase)
            {
                pwdBuilder.Append(@"(?=.*[A-Z])");
            }

            if (passwordSettings.SpecSymbols)
            {
                pwdBuilder.Append(@"(?=.*[_\-.~!$^*()=|])");
            }

            pwdBuilder.Append(@"[0-9a-zA-Z_\-.~!$^*()=|]");
        }
        else
        {
            pwdBuilder.Append(@"^(?=.*\p{Ll}{0,})");

            if (passwordSettings.Digits)
            {
                pwdBuilder.Append(@"(?=.*\d)");
            }

            if (passwordSettings.UpperCase)
            {
                pwdBuilder.Append(@"(?=.*\p{Lu})");
            }

            if (passwordSettings.SpecSymbols)
            {
                pwdBuilder.Append(@"(?=.*[\W])");
            }

            pwdBuilder.Append('.');
        }

        pwdBuilder.Append('{');
        pwdBuilder.Append(passwordSettings.MinLength);
        pwdBuilder.Append(',');
        pwdBuilder.Append(PasswordSettings.MaxLength);
        pwdBuilder.Append(@"}$");

        return pwdBuilder.ToString();
    }

    public bool CheckPasswordRegex(PasswordSettings passwordSettings, string password)
    {
        var passwordRegex = GetPasswordRegex(passwordSettings);

        return new Regex(passwordRegex).IsMatch(password);
    }

    public string SendUserPassword(string email)
    {
        email = (email ?? "").Trim();
        if (!email.TestEmailRegex())
        {
            throw new ArgumentNullException(nameof(email), Resource.ErrorNotCorrectEmail);
        }

        var settings = _settingsManager.Load<IPRestrictionsSettings>();

        if (settings.Enable && !_iPSecurity.Verify())
        {
            throw new Exception(Resource.ErrorAccessRestricted);
        }

        var userInfo = _userManager.GetUserByEmail(email);
        if (!_userManager.UserExists(userInfo) || string.IsNullOrEmpty(userInfo.Email))
        {
            return string.Format(Resource.ErrorUserNotFoundByEmail, email);
        }
        if (userInfo.Status == EmployeeStatus.Terminated)
        {
            return Resource.ErrorDisabledProfile;
        }
        if (userInfo.IsLDAP())
        {
            return Resource.CouldNotRecoverPasswordForLdapUser;
        }
        if (userInfo.IsSSO())
        {
            return Resource.CouldNotRecoverPasswordForSsoUser;
        }

        _studioNotifyService.UserPasswordChange(userInfo);

        var displayUserName = userInfo.DisplayUserName(false, _displayUserSettingsHelper);
        _messageService.Send(MessageAction.UserSentPasswordChangeInstructions, displayUserName);

        return null;
    }

    public static string GeneratePassword()
    {
        return Guid.NewGuid().ToString();
    }

    internal static string GeneratePassword(int minLength, int maxLength, string noise)
    {
        var length = RandomNumberGenerator.GetInt32(minLength, maxLength + 1);

        var sb = new StringBuilder();
        while (length-- > 0)
        {
            sb.Append(noise[RandomNumberGenerator.GetInt32(noise.Length - 1)]);
        }
        return sb.ToString();
    }

    internal static string GenerateErrorMessage(PasswordSettings passwordSettings)
    {
        var error = new StringBuilder();

        error.Append($"{Resource.ErrorPasswordMessage} ");
        error.AppendFormat(Resource.ErrorPasswordLength, passwordSettings.MinLength, PasswordSettings.MaxLength);
        if (passwordSettings.UpperCase)
        {
            error.AppendFormat($", {Resource.ErrorPasswordNoUpperCase}");
        }

        if (passwordSettings.Digits)
        {
            error.Append($", {Resource.ErrorPasswordNoDigits}");
        }

        if (passwordSettings.SpecSymbols)
        {
            error.Append($", {Resource.ErrorPasswordNoSpecialSymbols}");
        }

        return error.ToString();
    }

    public string GetPasswordHelpMessage()
    {
        var info = new StringBuilder();
        var passwordSettings = _settingsManager.Load<PasswordSettings>();
        info.Append($"{Resource.ErrorPasswordMessageStart} ");
        info.AppendFormat(Resource.ErrorPasswordLength, passwordSettings.MinLength, PasswordSettings.MaxLength);
        if (passwordSettings.UpperCase)
        {
            info.Append($", {Resource.ErrorPasswordNoUpperCase}");
        }

        if (passwordSettings.Digits)
        {
            info.Append($", {Resource.ErrorPasswordNoDigits}");
        }

        if (passwordSettings.SpecSymbols)
        {
            info.Append($", {Resource.ErrorPasswordNoSpecialSymbols}");
        }

        return info.ToString();
    }

    #endregion

    public static bool ValidateEmail(string email)
    {
        const string pattern = @"^(([^<>()[\]\\.,;:\s@\""]+"
                               + @"(\.[^<>()[\]\\.,;:\s@\""]+)*)|(\"".+\""))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}"
                               + @"\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$";
        const RegexOptions options = RegexOptions.IgnoreCase | RegexOptions.Compiled;
        return new Regex(pattern, options).IsMatch(email);
    }
}