AMM-118: Add time-based account lockout with auto-unlock

Signed-off-by: Varun Deep Saini <varun.23bcs10048@ms.sst.scaler.com>

Author: Varun Deep Saini

src/main/java/com/iemr/common/controller/users/IEMRAdminController.java

@@ -1230,4 +1230,42 @@ public ResponseEntity<?> getUserDetails(@PathVariable("userName") String userNam
 		}
 
 	}
+
+	@Operation(summary = "Unlock user account locked due to failed login attempts")
+	@RequestMapping(value = "/unlockUserAccount", method = RequestMethod.POST, produces = MediaType.APPLICATION_JSON, headers = "Authorization")
+	public String unlockUserAccount(@RequestBody String request) {
+		OutputResponse response = new OutputResponse();
+		try {
+			Long userId = parseUserIdFromRequest(request);
+			boolean unlocked = iemrAdminUserServiceImpl.unlockUserAccount(userId);
+			response.setResponse(unlocked ? "User account successfully unlocked" : "User account was not locked");
+		} catch (Exception e) {
+			logger.error("Error unlocking user account: " + e.getMessage(), e);
+			response.setError(e);
+		}
+		return response.toString();
+	}
+
+	@Operation(summary = "Get user account lock status")
+	@RequestMapping(value = "/getUserLockStatus", method = RequestMethod.POST, produces = MediaType.APPLICATION_JSON, headers = "Authorization")
+	public String getUserLockStatus(@RequestBody String request) {
+		OutputResponse response = new OutputResponse();
+		try {
+			Long userId = parseUserIdFromRequest(request);
+			String lockStatusJson = iemrAdminUserServiceImpl.getUserLockStatusJson(userId);
+			response.setResponse(lockStatusJson);
+		} catch (Exception e) {
+			logger.error("Error getting user lock status: " + e.getMessage(), e);
+			response.setError(e);
+		}
+		return response.toString();
+	}
+
+	private Long parseUserIdFromRequest(String request) throws IEMRException {
+		JsonObject requestObj = JsonParser.parseString(request).getAsJsonObject();
+		if (!requestObj.has("userId") || requestObj.get("userId").isJsonNull()) {
+			throw new IEMRException("userId is required");
+		}
+		return requestObj.get("userId").getAsLong();
+	}
 }

src/main/java/com/iemr/common/data/users/User.java

@@ -213,6 +213,10 @@ public class User implements Serializable  {
 	@Column(name = "dhistoken")
 	private String dhistoken;
 
+	@Expose
+	@Column(name = "lock_timestamp")
+	private Timestamp lockTimestamp;
+
 	/*
 	 * protected User() { }
 	 */

src/main/java/com/iemr/common/repository/users/IEMRUserRepositoryCustom.java

@@ -75,7 +75,7 @@ UserSecurityQMapping verifySecurityQuestionAnswers(@Param("UserID") Long UserID,
 
 	@Query("SELECT u FROM User u WHERE u.userID=5718")
 	User getAllExistingUsers();
-	
+
 	User findByUserID(Long userID);
 
 }

src/main/java/com/iemr/common/service/users/IEMRAdminUserService.java

@@ -123,6 +123,8 @@ public List<ServiceRoleScreenMapping> getUserServiceRoleMappingForProvider(Integ
 
 	List<User> getUserIdbyUserName(String userName) throws IEMRException;
 
+	boolean unlockUserAccount(Long userId) throws IEMRException;
+
+	String getUserLockStatusJson(Long userId) throws IEMRException;
 
-	
 }