<%-- DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER. Copyright (c) 2011-2013 ForgeRock AS. All rights reserved. The contents of this file are subject to the terms of the Common Development and Distribution License (the License). You may not use this file except in compliance with the License. You can obtain a copy of the License at http://forgerock.org/license/CDDLv1.0.html See the License for the specific language governing permission and limitations under the License. When distributing Covered Code, include this CDDL Header Notice in each file and include the License file at http://forgerock.org/license/CDDLv1.0.html If applicable, add the following below the CDDL Header, with the fields enclosed by brackets [] replaced by your own identifying information: "Portions Copyrighted [year] [name of copyright owner]" --%> <%@ page language="java" %> <%@ page import="org.owasp.esapi.ESAPI" %> <%@ page import="com.iplanet.am.util.SystemProperties" %> <%@ page import="com.sun.identity.shared.Constants" %> <%@ page import="static org.forgerock.openam.authentication.modules.oauth2.OAuthParam.*" %> <%@ page import="java.util.ResourceBundle" %> <%@ page import="java.util.MissingResourceException" %> <%@ page import="java.util.Locale" %> <%@ page import="org.forgerock.openam.authentication.modules.oauth2.OAuthUtil" %> <%@ page import="org.owasp.esapi.ESAPI" %> <% // Internationalization String ServiceURI = SystemProperties.get(Constants.AM_SERVICES_DEPLOYMENT_DESCRIPTOR); String termsAndConditionsPage = ServiceURI + "/tc.html"; String lang = request.getParameter("lang"); ResourceBundle resources; Locale locale = null; try { if (lang != null && lang.length() != 0) { locale = new Locale(lang); } else { locale = request.getLocale(); } resources = ResourceBundle.getBundle("amAuthOAuth", locale); OAuthUtil.debugMessage("OAuthPwd: obtained resource bundle with locale " + locale); } catch (MissingResourceException mr) { OAuthUtil.debugError("OAuthPwd: Resource Bundle not found", mr); resources = ResourceBundle.getBundle("amAuthOAuth"); } String logoutURL = request.getParameter(PARAM_GOTO); if (logoutURL == null) { logoutURL = ServiceURI; } else { boolean isValidURL = ESAPI.validator(). isValidInput("URLContext", logoutURL, "URL", 255, false); if (!isValidURL) { OAuthUtil.debugError("OAuthPwd: wrong logoutURL URL attempted to be used " + "in the OAuthPwd page: " + logoutURL); logoutURL = ServiceURI; } } String errLength = ESAPI.encoder().encodeForHTML(resources.getString("errLength")); String errNumbers = ESAPI.encoder().encodeForHTML(resources.getString("errNumbers")); String errLowercase = ESAPI.encoder().encodeForHTML(resources.getString("errLowercase")); String errUppercase = ESAPI.encoder().encodeForHTML(resources.getString("errUppercase")); String errInvalidPass = ESAPI.encoder().encodeForHTML(resources.getString("errInvalidPass")); String errNoMatch = ESAPI.encoder().encodeForHTML(resources.getString("errNoMatch")); String errEmptyPass = ESAPI.encoder().encodeForHTML(resources.getString("errEmptyPass")); String emptyField = ESAPI.encoder().encodeForHTML(""); String errTandC = ESAPI.encoder().encodeForHTML(resources.getString("errTandC")); String passwordSetMsg = resources.getString("passwordSetMsg"); String newPassLabel = resources.getString("newPassLabel"); String token1 = ESAPI.encoder().encodeForHTML(PARAM_TOKEN1); String token2 = ESAPI.encoder().encodeForHTML(PARAM_TOKEN2); String confirmPassLabel = resources.getString("confirmPassLabel"); String terms = ESAPI.encoder().encodeForHTML("terms"); String termsAndCondsLabel = resources.getString("termsAndCondsLabel"); String settingForm = ESAPI.encoder().encodeForHTML("settingForm"); String button1 = ESAPI.encoder().encodeForHTML("button1"); String submitValue = ESAPI.encoder().encodeForHTML(resources.getString("submit")); String cancelValue = ESAPI.encoder().encodeForHTML(resources.getString("cancel")); String accept = ESAPI.encoder().encodeForHTML("accept"); String outputField = ESAPI.encoder().encodeForHTML("output"); String passwordRules = resources.getString("passwordRules"); %> Password change

Password change

<%= passwordSetMsg %> <%= passwordRules %>