dw.customer
Class Credentials
dw.customer.CredentialsRepresents the credentials of a customer.
Since 13.6 it is possible to have customers who are not authenticated through a
login and password but through an external authentication provider via the OAuth2 protocol.
In such cases, the AuthenticationProviderID will point to an OAuth provider configured in the system
and the ExternalID will be the unique identifier of the customer on the Authentication Provider's system.
For example, if an authentication provider with ID "Google123" is configured pointing to Google
and the customer has a logged in into Google in the past and has created a profile there, Google
assigns a unique number identifier to that customer. If the storefront is configured to allow
authentication through Google and a new customer logs into the storefront using Google,
the AuthenticationProviderID property of his Credentials will contain "Google123" and
the ExternalID property will contain whatever unique identifier Google has assigned to him.
In such cases the password-related properties of the Credentials will be empty.
Note: this class handles sensitive security-related data.
Pay special attention to PCI DSS v3. requirements 2, 4, and 12.
Properties
authenticationProviderID
:
String
The authentication provider ID.
Deprecated:
As of release 17.2, replaced by methods on the new class ExternalProfile which can be obtained from Customer.getExternalProfiles()
Until the method is fully removed from the API it will get the Authentication Provider from the first element of the Customer.getExternalProfiles() collection
Until the method is fully removed from the API it will get the Authentication Provider from the first element of the Customer.getExternalProfiles() collection
externalID
:
String
The external ID of the customer.
Deprecated:
As of release 17.2, replaced by methods on the new class ExternalProfile which can be obtained from Customer.getExternalProfiles()
Until the method is fully removed from the API it will get the External ID from the first element of the Customer.getExternalProfiles() collection
Until the method is fully removed from the API it will get the External ID from the first element of the Customer.getExternalProfiles() collection
locked
:
boolean
(Read Only)
Identifies if this customer is temporarily locked out because of invalid
login attempts. If customer locking is not enabled, this method always
returns false.
login
:
String
The login of the user. It must be unique.
passwordAnswer
:
String
The answer to the password question for the customer. The answer is used
with the password question to confirm the identity of a customer when
they are trying to fetch their password.
passwordQuestion
:
String
The password question for the customer. The password question is
used with the password answer to confirm the identity of a customer when
they are trying to fetch their password.
passwordSet
:
boolean
(Read Only)
Returns whether the password is set. Creating externally authenticated customers
results in customers with credentials for which the password is not set.
remainingLoginAttempts
:
Number
(Read Only)
The number of consecutive failed logins after which this customer
will be temporarily locked out and prevented from logging in to the
current site. This value is based on the number of previous invalid
logins for this customer and customer site preferences defining the
limits.
If this customer is already locked out, this method will always return 0.
If customer locking is disabled altogether, or if the system cannot
determine the number of failed login attempts for this customer, then
this method will return a negative number.
Constructor Summary
This class does not have a constructor, so you cannot create it directly.
Method Summary
createResetPasswordToken()
:
String
Generate a random token which can be used for resetting the password of the underlying Customer.
getAuthenticationProviderID()
:
String
Returns the authentication provider ID.
getEnabledFlag()
:
boolean
Identifies if this customer is enabled and can log in - same as isEnabled().
getExternalID()
:
String
Returns the external ID of the customer.
getPasswordAnswer()
:
String
Returns the answer to the password question for the customer.
getPasswordQuestion()
:
String
Returns the password question for the customer.
getRemainingLoginAttempts()
:
Number
Returns the number of consecutive failed logins after which this customer will be temporarily locked out and prevented from logging in to the current site.
isEnabled()
:
boolean
Identifies if this customer is enabled and can log in.
isLocked()
:
boolean
Identifies if this customer is temporarily locked out because of invalid login attempts.
isPasswordSet()
:
boolean
Returns whether the password is set.
setAuthenticationProviderID(authenticationProviderID
:
String)
:
void
Sets the authentication provider ID corresponding to an OAuth provider configured in the system.
setEnabledFlag(enabledFlag
:
boolean)
:
void
Sets the enabled status of the customer.
setExternalID(externalID
:
String)
:
void
Sets the external ID of the customer at the authentication provider.
setLogin(newLogin
:
String, currentPassword
:
String)
:
boolean
Sets the login value for the customer, and also re-encrypt the customer password based on the new login.
setPassword(newPassword
:
String, oldPassword
:
String, verifyOldPassword
:
boolean)
:
Status
Sets the password of an authenticated customer.
The method can be called for externally authenticated customers as well but these customers will still be externally authenticated so calling the method for such customers does not have an immediate practical benefit.
The method can be called for externally authenticated customers as well but these customers will still be externally authenticated so calling the method for such customers does not have an immediate practical benefit.
setPasswordAnswer(answer
:
String)
:
void
Sets the answer to the password question for the customer.
setPasswordQuestion(question
:
String)
:
void
Sets the password question for the customer.
setPasswordWithToken(token
:
String, newPassword
:
String)
:
Status
Set the password of the specified customer to the specified value.
Methods inherited from class
Object
assign, create, create, defineProperties, defineProperty, entries, freeze, fromEntries, getOwnPropertyDescriptor, getOwnPropertyNames, getOwnPropertySymbols, getPrototypeOf, hasOwnProperty, is, isExtensible, isFrozen, isPrototypeOf, isSealed, keys, preventExtensions, propertyIsEnumerable, seal, setPrototypeOf, toLocaleString, toString, valueOf, values
Method Detail
createResetPasswordToken
createResetPasswordToken()
:
String
Generate a random token which can be used for resetting the password of the underlying Customer. The token is
guaranteed to be unique and will be valid for 30 minutes. Any token previously generated for this customer will
be invalidated.
Returns:
The generated token.
getAuthenticationProviderID
getAuthenticationProviderID()
:
String
Returns the authentication provider ID.
Deprecated:
As of release 17.2, replaced by methods on the new class ExternalProfile which can be obtained from Customer.getExternalProfiles()
Until the method is fully removed from the API it will get the Authentication Provider from the first element of the Customer.getExternalProfiles() collection
Until the method is fully removed from the API it will get the Authentication Provider from the first element of the Customer.getExternalProfiles() collection
Returns:
the authentication provider ID.
getEnabledFlag
getEnabledFlag()
:
boolean
Identifies if this customer is enabled and can log in - same as isEnabled().
Returns:
true if the customer is enabled and can log in, false otherwise.
getExternalID
getExternalID()
:
String
Returns the external ID of the customer.
Deprecated:
As of release 17.2, replaced by methods on the new class ExternalProfile which can be obtained from Customer.getExternalProfiles()
Until the method is fully removed from the API it will get the External ID from the first element of the Customer.getExternalProfiles() collection
Until the method is fully removed from the API it will get the External ID from the first element of the Customer.getExternalProfiles() collection
Returns:
the external ID of the customer.
getLogin
getLogin()
:
String
Returns the login of the user. It must be unique.
Returns:
the login of the user.
getPasswordAnswer
getPasswordAnswer()
:
String
Returns the answer to the password question for the customer. The answer is used
with the password question to confirm the identity of a customer when
they are trying to fetch their password.
Returns:
the answer to the password question for the customer.
getPasswordQuestion
getPasswordQuestion()
:
String
Returns the password question for the customer. The password question is
used with the password answer to confirm the identity of a customer when
they are trying to fetch their password.
Returns:
the password question for the customer.
getRemainingLoginAttempts
getRemainingLoginAttempts()
:
Number
Returns the number of consecutive failed logins after which this customer
will be temporarily locked out and prevented from logging in to the
current site. This value is based on the number of previous invalid
logins for this customer and customer site preferences defining the
limits.
If this customer is already locked out, this method will always return 0.
If customer locking is disabled altogether, or if the system cannot
determine the number of failed login attempts for this customer, then
this method will return a negative number.
Returns:
The number of consecutive failed logins after which this customer will be locked out.
isEnabled
isEnabled()
:
boolean
Identifies if this customer is enabled and can log in.
Returns:
true if the customer is enabled and can log in, false otherwise.
isLocked
isLocked()
:
boolean
Identifies if this customer is temporarily locked out because of invalid
login attempts. If customer locking is not enabled, this method always
returns false.
Returns:
true if the customer is locked, false otherwise.
isPasswordSet
isPasswordSet()
:
boolean
Returns whether the password is set. Creating externally authenticated customers
results in customers with credentials for which the password is not set.
Returns:
true if the password is set.
setAuthenticationProviderID
setAuthenticationProviderID(authenticationProviderID
:
String)
:
void
Sets the authentication provider ID corresponding to an OAuth provider configured in the system.
Deprecated:
As of release 17.2, replaced by methods on the new class ExternalProfile which can be obtained from Customer.getExternalProfiles()
Until the method is fully removed from the API it will set the Authentication Provider on the first element of the Customer.getExternalProfiles() collection if there is only one. It will create the collection and add an element if no elements are present. It will not change anything and will log an error if there are more than one elements in the collection.
Until the method is fully removed from the API it will set the Authentication Provider on the first element of the Customer.getExternalProfiles() collection if there is only one. It will create the collection and add an element if no elements are present. It will not change anything and will log an error if there are more than one elements in the collection.
Parameters:
authenticationProviderID
-
the authentication Provider ID to set.
setEnabledFlag
setEnabledFlag(enabledFlag
:
boolean)
:
void
Sets the enabled status of the customer.
Parameters:
enabledFlag
-
controls if a customer is enabled or not.
setExternalID
setExternalID(externalID
:
String)
:
void
Sets the external ID of the customer at the authentication provider.
The value is provided by the authentication provider during the
OAuth authentication and is unique within that provider.
Deprecated:
As of release 17.2, replaced by methods on the new class ExternalProfile which can be obtained from Customer.getExternalProfiles()
Until the method is fully removed from the API it will set the ExternalID on the first element of the Customer.getExternalProfiles() collection if there is only one. It will create the collection and add an element if no elements are present. It will not change anything and will log an error if there are more than one elements in the collection.
Until the method is fully removed from the API it will set the ExternalID on the first element of the Customer.getExternalProfiles() collection if there is only one. It will create the collection and add an element if no elements are present. It will not change anything and will log an error if there are more than one elements in the collection.
Parameters:
externalID
-
the external ID to set.
setLogin
setLogin(login
:
String)
:
void
Sets the login value for the customer.
IMPORTANT: This method should no longer be used for the following
reasons:
- It changes the login without re-encrypting the password. (The customer password is stored internally using a one-way encryption scheme which uses the login as one of its inputs. Therefore changing the login requires re-encrypting the password.)
- It does not validate the structure of the login to ensure that it only uses acceptable characters.
- It does not correctly prevent duplicate logins. If the passed login matches a different customer's login exactly, then this method will throw an exception. However, it does not prevent the creation of inexact matches, where two customers have a login differing only by alphabetic case (e.g. "JaneDoe" and "janedoe")
Deprecated:
Parameters:
login
-
The login value for the customer.
setLogin
Sets the login value for the customer, and also re-encrypt the customer
password based on the new login. Customer login must be a sequence of
letters, numbers, and the following characters: space, period, ampersand,
underscore and dash.
This method fails to set the login and returns false in the following
cases:
- newLogin is of an invalid form (e.g. contains invalid characters).
- currentPassword is not the customer's correct password.
- newLogin is already in use by another customer (i.e. there is another customer in the system with the exact same login name or a name differing only by alphabetic case.)
Parameters:
newLogin
-
The login value for the customer.
currentPassword
-
The customer's current password in plain-text.
Returns:
true if setting the login succeeded, false otherwise.
setPassword
Sets the password of an authenticated customer.
The method can be called for externally authenticated customers as well but these customers will still be externally authenticated so calling the method for such customers does not have an immediate practical benefit. If such customers are converted back to regularly authenticated (via login and password) the new password will be used.
Method call will fail under any of these conditions:
The method can be called for externally authenticated customers as well but these customers will still be externally authenticated so calling the method for such customers does not have an immediate practical benefit. If such customers are converted back to regularly authenticated (via login and password) the new password will be used.
Method call will fail under any of these conditions:
- customer is not registered
- customer is not authenticated
- verifyOldPassword=true && oldPassword is empty
- verifyOldPassword=true and oldPassword does not match the existing password
- newPassword is empty
- newPassword does not meet acceptance criteria
Parameters:
newPassword
-
the new password
oldPassword
-
the old password (optional, only needed if 'verifyOldPassword' is set to 'true'
verifyOldPassword
-
whether the oldPassword should be verified
Returns:
Status the status of the operation (OK or ERROR). If status is Error, there will be additional information in the Status message
setPasswordAnswer
setPasswordAnswer(answer
:
String)
:
void
Sets the answer to the password question for the customer.
Parameters:
answer
-
the answer to the password question.
setPasswordQuestion
setPasswordQuestion(question
:
String)
:
void
Sets the password question for the customer.
Parameters:
question
-
the password question.
setPasswordWithToken
Set the password of the specified customer to the specified value. This operation will fail if the specified
token is invalid (i.e. not associated with the specified Customer), the token is expired, or the password does
not satisfy system password requirements.
Parameters:
token
-
The token required for performing the password reset.
newPassword
-
The new password. Must meet all requirements for passwords
Returns:
Status the status of the operation (OK or ERROR). If status is Error, there will be additional information in the Status message
© Copyright 2000-2023, salesforce.com inc. All rights reserved. Various trademarks held by their respective owners.