chapter 1

Author: Karl Seguin

app/controllers/Sessions.java

@@ -10,7 +10,12 @@ public static void novus() {
   }
 
   public static void save(String name, String password) {
-    renderText("todo");
+    User user = User.loadFromCredentials(name, password);
+    if (user != null) {
+      signin(user);
+    }
+    addError("invalid name or password, please try again");
+    renderTemplate("Sessions/novus.html");
   }
 
   public static void logout() {

app/controllers/Users.java

@@ -10,6 +10,15 @@ public static void novus() {
   }
 
   public static void save(User user) {
-    renderText("todo");
+    try
+    {
+      if(user != null && user.validateAndSave()) {
+        signin(user);
+      }  
+      validationError(new FieldError(validation.errors()));
+    } catch (DuplicateKeyException ex) {
+      validationError(new FieldError("user.name", "is already taken"));
+    }
+    renderTemplate("Users/novus.html");
   }
 }

app/models/User.java

@@ -1,9 +1,33 @@
 package models;
- 
+
+import utils.*;
+import play.data.validation.*;
 import play.modules.morphia.Model;
 import com.google.code.morphia.annotations.*;
+import com.mongodb.MongoException.DuplicateKey;
 
 @Entity(value="users", noClassnameStored=true)
-public class User extends Model {
+public class User extends Model {  
+  @Required @MaxSize(20) @Indexed(unique=true)
+  public String name;
+  
+  @Required @MinSize(8)
+  public String password;
+  
+  public static User loadFromCredentials(String name, String password) {
+    if (name == null || password == null) { return null; }
+
+    User user = filter("name = ", name).first();
+    return user == null || !BCrypt.checkpw(password, user.password) ? null : user;
+  }
 
+  @Override
+  public User save() {
+    try {
+      password = BCrypt.hashpw(password, BCrypt.gensalt());
+      return super.save();
+    } catch(DuplicateKey e) {
+      throw new DuplicateKeyException(e);
+    }
+  }
 }

app/utils/DuplicateKeyException.java

@@ -0,0 +1,7 @@
+package utils;
+
+public class DuplicateKeyException extends RuntimeException {
+  public DuplicateKeyException(Throwable t) {
+    super(t);
+  }
+}

app/utils/readme.md

@@ -5,6 +5,9 @@ These classes will be used throughout our code as we move forward.
 ### BCrypt
 We'll use [BCrypt](http://en.wikipedia.org/wiki/Bcrypt) to hash a user's password
 
+## DuplicateKeyException
+Used whenever we want to raise a duplicate key exception. Having our own exception is cleaner, in my opinion, than having the Mongo exception exposed everywhere.
+
 ### ExactSizeList + ExactSizeListCheck
 Validation annotation and logic to ensure that a list is of an exact size/length.