001// --------------------------------------------------------------------------------
002// Copyright 2002-2026 Echo Three, LLC
003//
004// Licensed under the Apache License, Version 2.0 (the "License");
005// you may not use this file except in compliance with the License.
006// You may obtain a copy of the License at
007//
008//     http://www.apache.org/licenses/LICENSE-2.0
009//
010// Unless required by applicable law or agreed to in writing, software
011// distributed under the License is distributed on an "AS IS" BASIS,
012// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
013// See the License for the specific language governing permissions and
014// limitations under the License.
015// --------------------------------------------------------------------------------
016
017package com.echothree.model.control.party.server.logic;
018
019import com.echothree.model.control.party.server.control.PartyControl;
020import com.echothree.model.data.party.server.entity.Party;
021import com.echothree.model.data.party.server.entity.PartyTypeLockoutPolicyDetail;
022import com.echothree.model.data.user.server.entity.UserLoginStatus;
023import com.echothree.util.common.message.ExecutionErrors;
024import com.echothree.util.server.message.ExecutionErrorAccumulator;
025import com.echothree.util.server.persistence.Session;
026import javax.enterprise.context.ApplicationScoped;
027import javax.enterprise.inject.spi.CDI;
028import javax.inject.Inject;
029
030@ApplicationScoped
031public class LockoutPolicyLogic {
032
033    @Inject
034    PartyControl partyControl;
035
036    protected LockoutPolicyLogic() {
037        super();
038    }
039
040    public static LockoutPolicyLogic getInstance() {
041        return CDI.current().select(LockoutPolicyLogic.class).get();
042    }
043    
044    private void resetFailureCount(final Session session, final UserLoginStatus userLoginStatus,
045            final PartyTypeLockoutPolicyDetail policyDetail) {
046        if(!policyDetail.getManualLockoutReset()) {
047            var resetFailureCountTime = policyDetail.getResetFailureCountTime();
048            
049            if(resetFailureCountTime != null && userLoginStatus.getFailureCount() != 0) {
050                if(session.getStartTime() - userLoginStatus.getLastFailureTime() > resetFailureCountTime) {
051                    userLoginStatus.setFailureCount(0);
052                }
053            }
054        }
055    }
056    
057    private void checkLockoutFailureCount(final ExecutionErrorAccumulator ema, final UserLoginStatus userLoginStatus,
058            final PartyTypeLockoutPolicyDetail policyDetail) {
059        var lockoutFailureCount = policyDetail.getLockoutFailureCount();
060        
061        if(lockoutFailureCount != null && userLoginStatus.getFailureCount() >= lockoutFailureCount) {
062            ema.addExecutionError(ExecutionErrors.LockoutFailureCountExceeded.name());
063            
064            if(policyDetail.getManualLockoutReset()) {
065                ema.addExecutionError(ExecutionErrors.LockoutManualResetRequired.name());
066            }
067        }
068    }
069    
070    private void checkLockoutInactiveTime(final Session session, final ExecutionErrorAccumulator ema,
071            final UserLoginStatus userLoginStatus, final PartyTypeLockoutPolicyDetail policyDetail) {
072        var lockoutInactiveTime = policyDetail.getLockoutInactiveTime();
073        var lastLoginTime = userLoginStatus.getLastLoginTime();
074        
075        if(lockoutInactiveTime != null && lastLoginTime != null && session.getStartTime() - userLoginStatus.getLastLoginTime() >= lockoutInactiveTime) {
076            ema.addExecutionError(ExecutionErrors.LockoutInactiveTimeExceeded.name());
077        }
078    }
079    
080    public void checkUserLogin(final Session session, final ExecutionErrorAccumulator ema, final Party party,
081            final UserLoginStatus userLoginStatus) {
082        var policy = partyControl.getPartyTypeLockoutPolicy(party.getLastDetail().getPartyType());
083        
084        if(policy != null) {
085            var policyDetail = policy.getLastDetail();
086            
087            resetFailureCount(session, userLoginStatus, policyDetail);
088            checkLockoutFailureCount(ema, userLoginStatus, policyDetail);
089            checkLockoutInactiveTime(session, ema, userLoginStatus, policyDetail);
090        }
091    }
092    
093}