in reference/src/main/java/org/apache/sling/cms/reference/forms/impl/actions/ResetPasswordAction.java [56:90]
public FormActionResult handleForm(Resource actionResource, FormRequest request) throws FormException {
String email = request.getFormData().get(FormConstants.PN_EMAIL, String.class);
String resetToken = request.getFormData().get(FormConstants.PN_RESETTOKEN, String.class);
String password = request.getFormData().get("password", String.class);
try (ResourceResolver adminResolver = factory.getServiceResourceResolver(
Collections.singletonMap(ResourceResolverFactory.SUBSERVICE, FormConstants.SERVICE_USER))) {
JackrabbitSession session = (JackrabbitSession) adminResolver.adaptTo(Session.class);
final UserManager userManager = session.getUserManager();
User user = (User) userManager.getAuthorizable(email);
if (user == null) {
return FormActionResult.failure("No user found for " + email);
}
String storedToken = getValue(user.getProperty(FormConstants.PN_RESETTOKEN), String.class);
Calendar resetTimeout = getValue(user.getProperty(FormConstants.PN_RESETTIMEOUT), Calendar.class);
if (storedToken == null || !storedToken.equals(resetToken)) {
return FormActionResult.failure("Failed to validate token");
}
if (Calendar.getInstance().after(resetTimeout)) {
return FormActionResult.failure("Timeout already passed");
}
user.changePassword(password);
log.debug("Saving changes!");
adminResolver.commit();
return FormActionResult.success("Password reset successfully!");
} catch (Exception e) {
throw new FormException("Failed to complete password reset", e);
}
}