001// --------------------------------------------------------------------------------
002// Copyright 2002-2026 Echo Three, LLC
003//
004// Licensed under the Apache License, Version 2.0 (the "License");
005// you may not use this file except in compliance with the License.
006// You may obtain a copy of the License at
007//
008//     http://www.apache.org/licenses/LICENSE-2.0
009//
010// Unless required by applicable law or agreed to in writing, software
011// distributed under the License is distributed on an "AS IS" BASIS,
012// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
013// See the License for the specific language governing permissions and
014// limitations under the License.
015// --------------------------------------------------------------------------------
016
017package com.echothree.model.control.party.server.logic;
018
019import com.echothree.model.control.party.server.control.PartyControl;
020import com.echothree.model.data.party.server.entity.Party;
021import com.echothree.model.data.party.server.entity.PartyTypeLockoutPolicyDetail;
022import com.echothree.model.data.user.server.entity.UserLoginStatus;
023import com.echothree.util.common.message.ExecutionErrors;
024import com.echothree.util.server.message.ExecutionErrorAccumulator;
025import com.echothree.util.server.persistence.Session;
026import javax.enterprise.context.ApplicationScoped;
027import javax.inject.Inject;
028
029@ApplicationScoped
030public class LockoutPolicyLogic {
031
032    @Inject
033    PartyControl partyControl;
034
035    protected LockoutPolicyLogic() {
036        super();
037    }
038    
039    private void resetFailureCount(final Session session, final UserLoginStatus userLoginStatus,
040            final PartyTypeLockoutPolicyDetail policyDetail) {
041        if(!policyDetail.getManualLockoutReset()) {
042            var resetFailureCountTime = policyDetail.getResetFailureCountTime();
043            
044            if(resetFailureCountTime != null && userLoginStatus.getFailureCount() != 0) {
045                if(session.getStartTime() - userLoginStatus.getLastFailureTime() > resetFailureCountTime) {
046                    userLoginStatus.setFailureCount(0);
047                }
048            }
049        }
050    }
051    
052    private void checkLockoutFailureCount(final ExecutionErrorAccumulator ema, final UserLoginStatus userLoginStatus,
053            final PartyTypeLockoutPolicyDetail policyDetail) {
054        var lockoutFailureCount = policyDetail.getLockoutFailureCount();
055        
056        if(lockoutFailureCount != null && userLoginStatus.getFailureCount() >= lockoutFailureCount) {
057            ema.addExecutionError(ExecutionErrors.LockoutFailureCountExceeded.name());
058            
059            if(policyDetail.getManualLockoutReset()) {
060                ema.addExecutionError(ExecutionErrors.LockoutManualResetRequired.name());
061            }
062        }
063    }
064    
065    private void checkLockoutInactiveTime(final Session session, final ExecutionErrorAccumulator ema,
066            final UserLoginStatus userLoginStatus, final PartyTypeLockoutPolicyDetail policyDetail) {
067        var lockoutInactiveTime = policyDetail.getLockoutInactiveTime();
068        var lastLoginTime = userLoginStatus.getLastLoginTime();
069        
070        if(lockoutInactiveTime != null && lastLoginTime != null && session.getStartTime() - userLoginStatus.getLastLoginTime() >= lockoutInactiveTime) {
071            ema.addExecutionError(ExecutionErrors.LockoutInactiveTimeExceeded.name());
072        }
073    }
074    
075    public void checkUserLogin(final Session session, final ExecutionErrorAccumulator ema, final Party party,
076            final UserLoginStatus userLoginStatus) {
077        var policy = partyControl.getPartyTypeLockoutPolicy(party.getLastDetail().getPartyType());
078        
079        if(policy != null) {
080            var policyDetail = policy.getLastDetail();
081            
082            resetFailureCount(session, userLoginStatus, policyDetail);
083            checkLockoutFailureCount(ema, userLoginStatus, policyDetail);
084            checkLockoutInactiveTime(session, ema, userLoginStatus, policyDetail);
085        }
086    }
087    
088}