Skip to content
Snippets Groups Projects
Commit fc970a3a authored by Felix Sidokhine's avatar Felix Sidokhine
Browse files

tested that I can see my own profile

parent 0729e20e
No related branches found
No related tags found
No related merge requests found
......@@ -123,4 +123,8 @@ print(response.text)
response = requests.get("http://localhost:8080//api/auth/directories",headers=header)
print(response.status_code)
print(response.text)
response = requests.get("http://localhost:8080/api/auth/user",headers=header)
print(response.status_code)
print(response.text)
\ No newline at end of file
......@@ -22,6 +22,7 @@ module jams.server {
exports net.jami.jams.server.servlets.api.auth.login to org.apache.tomcat.embed.core;
exports net.jami.jams.server.servlets.api.auth.device to org.apache.tomcat.embed.core;
exports net.jami.jams.server.servlets.api.auth.directory to org.apache.tomcat.embed.core;
exports net.jami.jams.server.servlets.api.auth.user to org.apache.tomcat.embed.core;
exports net.jami.jams.server.servlets.api.install to org.apache.tomcat.embed.core;
......@@ -29,4 +30,5 @@ module jams.server {
exports net.jami.jams.server.servlets.api.jaminameserver to org.apache.tomcat.embed.core;
exports net.jami.jams.server.servlets.x509 to org.apache.tomcat.embed.core;
}
\ No newline at end of file
package net.jami.jams.server.servlets.api.auth.user;
import com.jsoniter.output.JsonStream;
import jakarta.servlet.ServletException;
import jakarta.servlet.annotation.WebServlet;
import jakarta.servlet.http.HttpServlet;
......@@ -19,7 +20,11 @@ public class UserServlet extends HttpServlet {
//User can "read" his own profile.
@Override
protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
super.doGet(req, resp);
String username = req.getAttribute("username").toString();
StatementList select = new StatementList();
StatementElement st = new StatementElement("username","=",username,"");
select.addStatement(st);
resp.getOutputStream().write(JsonStream.serialize(dataStore.getUserDao().getObjects(select).get(0)).getBytes());
}
//The user can update 3 fields: password,privatekey,publickey
......@@ -27,7 +32,7 @@ public class UserServlet extends HttpServlet {
@Override
protected void doPut(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
String username = req.getAttribute("username").toString();
//Check if he is AD/LDAP - then return a 403, because we can't set such password.
//Check if he is AD/LDAP - then return a 401, because we can't set such password.
StatementList select = new StatementList();
StatementElement st = new StatementElement("username","=",username,"");
if(dataStore.getUserDao().getObjects(select).get(0).getUserType() != AuthenticationSourceType.LOCAL){
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment