Application.java

package org.jenkinsci.account;

import com.captcha.botdetect.web.servlet.Captcha;
import com.google.common.net.InetAddresses;
import jakarta.mail.Authenticator;
import jakarta.mail.Message;
import jakarta.mail.MessagingException;
import jakarta.mail.PasswordAuthentication;
import jakarta.mail.Session;
import jakarta.mail.Transport;
import jakarta.mail.internet.InternetAddress;
import jakarta.mail.internet.MimeMessage;
import java.io.UnsupportedEncodingException;
import java.net.URLEncoder;
import java.text.SimpleDateFormat;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Base64;
import java.util.Date;
import java.util.Enumeration;
import java.util.HashSet;
import java.util.Hashtable;
import java.util.Iterator;
import java.util.List;
import java.util.Locale;
import java.util.Properties;
import java.util.Set;
import java.util.logging.Level;
import java.util.logging.Logger;
import java.util.regex.Pattern;
import javax.annotation.CheckForNull;
import javax.naming.AuthenticationException;
import javax.naming.Context;
import javax.naming.NameAlreadyBoundException;
import javax.naming.NamingEnumeration;
import javax.naming.NamingException;
import javax.naming.directory.AttributeInUseException;
import javax.naming.directory.Attributes;
import javax.naming.directory.BasicAttributes;
import javax.naming.directory.DirContext;
import javax.naming.directory.SearchControls;
import javax.naming.directory.SearchResult;
import javax.naming.ldap.InitialLdapContext;
import javax.naming.ldap.LdapContext;
import javax.servlet.http.Cookie;
import org.apache.commons.lang.StringUtils;
import org.jenkinsci.account.openid.JenkinsOpenIDServer;
import org.kohsuke.stapler.Header;
import org.kohsuke.stapler.HttpRedirect;
import org.kohsuke.stapler.HttpResponse;
import org.kohsuke.stapler.HttpResponses;
import org.kohsuke.stapler.QueryParameter;
import org.kohsuke.stapler.Stapler;
import org.kohsuke.stapler.StaplerRequest;
import org.kohsuke.stapler.StaplerResponse;

import static javax.naming.directory.DirContext.ADD_ATTRIBUTE;
import static javax.naming.directory.DirContext.REMOVE_ATTRIBUTE;
import static javax.naming.directory.DirContext.REPLACE_ATTRIBUTE;
import static javax.naming.directory.SearchControls.SUBTREE_SCOPE;
import static org.apache.commons.lang.StringUtils.isEmpty;
import static org.jenkinsci.account.LdapAbuse.REGISTRATION_DATE;
import static org.jenkinsci.account.LdapAbuse.SENIOR_STATUS;

/**
 * Root of the account application.
 *
 * @author Kohsuke Kawaguchi
 */
public class Application {
    /**
     * Configuration parameter.
     */
    private final Parameters params;

    /**
     * For bringing the OpenID server into the URL space.
     */
    public final JenkinsOpenIDServer openid;

    // not exposing this to UI
    /*package*/ final CircuitBreaker circuitBreaker;

    public Application(Parameters params) throws Exception {
        this.params = params;
        this.openid = new JenkinsOpenIDServer(this);
        this.circuitBreaker = new CircuitBreaker(params);
    }

    public String getUrl() {
        return params.url();
    }

    public String showCaptcha(String name){
        Captcha captcha = Captcha.load(Stapler.getCurrentRequest(), name);
        captcha.setUserInputID("captchaCode");
        return captcha.getHtml();
    }

    /**
     * Receives the sign-up form submission.
     */
    public HttpResponse doDoSignup(
            StaplerRequest request,
            StaplerResponse response,
            @QueryParameter String userid,
            @QueryParameter String firstName,
            @QueryParameter String lastName,
            @QueryParameter String email,
            @QueryParameter String emailconfirm,
            @QueryParameter String hp,
            @QueryParameter String captchaCode,
            @Header("X-Forwarded-For") String ip    // client IP
    ) throws Exception {

        ip = extractFirst(ip);

        Captcha captcha = Captcha.load(request, "signUpCaptcha");
        boolean isHuman = captcha.validate(request.getParameter("captchaCode"));

        // Check if userid and email are available before going further
        final DirContext con = connect();
        try {
            if (userid == null || isEmpty(userid))
                throw new UserError("UserId is required");

            userid = userid.toLowerCase();

            Iterator<User> a = searchByWord(userid, con);
            if (a.hasNext())
                throw new UserError("account "+ getUserById(userid,con).id  + " already exist");
            a = searchByWord(email, con);

            if (a.hasNext())
                throw new UserError("email: "+ email + " already exist");

        } finally {
            con.close();
        }

        if (!VALID_ID.matcher(userid).matches())
            throw new UserError("Invalid user name: "+userid);
        if (isEmpty(firstName))
            throw new UserError("First name is required");
        if (isEmpty(lastName))
            throw new UserError("Last name is required");
        if (isEmpty(email))
            throw new UserError("email is required");
        if (!email.equals(emailconfirm))
            throw new UserError(String.format("Following emails are not matching: %s - %s", email, emailconfirm));
        if(!email.contains("@"))
            throw new UserError("Need a valid email address.");
        if (!isHuman)
            throw new UserError("Captcha mismatch. Please try again and retry a captcha to prove that you are a human");

        List<String> blockReasons = new ArrayList<String>();

        if(!isEmpty(hp))
            blockReasons.add("Honeypot: " + hp);

        if(Pattern.matches("(?:^jb\\d+@gmail.com|seo\\d+@)", email)) {
            blockReasons.add("BL: email (custom)");
        }

        if(
            (firstName.equalsIgnoreCase("help") && lastName.equalsIgnoreCase("desk")) ||
                (firstName.contains("quickbook") || lastName.contains("quickbook"))
            ) {
            blockReasons.add("BL: name (custom)");
        }

        for (String fragment : USERID_BLACKLIST) {
            if(userid.toLowerCase().contains(fragment.toLowerCase())) {
                blockReasons.add("BL: userid");
            }
        }

        for (String fragment : IP_BLACKLIST) {
            if(ip.startsWith(fragment)) {
                blockReasons.add("BL: IP");
            }
        }
        // domain black list
        String lm = email.toLowerCase(Locale.ENGLISH);
        for (String fragment : EMAIL_BLACKLIST) {
            if (lm.contains(fragment.toLowerCase()))
                blockReasons.add("BL: email");
        }

        for(String fragment : NAUGHTY_BLACKLIST) {
            if(userid.toLowerCase().contains(fragment.toLowerCase())
                || firstName.toLowerCase().contains(fragment.toLowerCase())
                || lastName.toLowerCase().contains(fragment.toLowerCase())
                ) {
                blockReasons.add("BL: naughty");
            }
        }

        if(checkCookie(request, ALREADY_SIGNED_UP)) {
            blockReasons.add("Cookie");
        }

        if(circuitBreaker.check()) {
            blockReasons.add("circuit breaker");
        }

        String userDetails = userDetails(userid, firstName, lastName, email, ip);
        if(!blockReasons.isEmpty()) {
            String body = "Rejecting, likely spam:\n\n" + userDetails + "\n\nHTTP Headers\n" +
                dumpHeaders(request) + "\n\n" +
                "===Block Reasons===\n"
                + String.join("\n", blockReasons) + "\n===================" + "\n\n" +
                "IP Void link: http://ipvoid.com/scan/" + ip + "\n\n" +
                "To allow this account to be created, click the following link:\n" +
                getUrl() + "/admin/signup?userId=" + enc(userid) + "&firstName=" + enc(firstName) + "&lastName=" + enc(lastName) + "&email=" + enc(email) + "\n";
            LOGGER.warning(userDetails.replaceAll("\\R", " ") + " signup rejected, likely spam: " + String.join(" / ", blockReasons));
            mail("jenkinsci-account-admins@googlegroups.com", "Rejection of a new account creation for " + firstName + " " + lastName, body, "text/plain");
            throw new SystemError(SPAM_MESSAGE);
        }

        String password = createRecord(userid, firstName, lastName, email);
        LOGGER.info("User "+userid+" is from "+ip);
        mail("jenkinsci-account-admins@googlegroups.com", "New user created for " + userid,
            userDetails + "\n\nHTTP Headers\n" +
                dumpHeaders(request) + "\n\n" + "Account page: " + getUrl() + "/admin/search?word=" + userid + "\n\nIP Void link: http://ipvoid.com/scan/" + ip + "/\n", "text/plain");
        new User(userid,email).mailPassword(password);

        Cookie cookie = new Cookie(ALREADY_SIGNED_UP, "1");
        cookie.setDomain("accounts.jenkins.io");
        cookie.setPath("/");
        cookie.setMaxAge(24 * 60 * 60);
        response.addCookie(cookie);

        return new HttpRedirect("doneMail");
    }

    private String dumpHeaders(StaplerRequest request) {
        Enumeration headerNames = request.getHeaderNames();
        StringBuffer buffer = new StringBuffer();
        while(headerNames.hasMoreElements()) {
            String headerName = (String)headerNames.nextElement();
            buffer.append(headerName).append("=").append(request.getHeader(headerName)).append("\n");
        }
        return buffer.toString();
    }

    private boolean checkCookie(StaplerRequest request, String x) {
        for (Cookie cookie: request.getCookies()) {
            if(cookie.getName().equals(ALREADY_SIGNED_UP)) {
                return "1".equals(cookie.getValue());
            }
        }
        return false;
    }

    private void mail(String to, String subject, String body, String encoding) throws MessagingException {
        Session s = createJavaMailSession();
        MimeMessage msg = new MimeMessage(s);
        msg.setSubject(subject);
        msg.setFrom(new InternetAddress(String.format("Jenkins Accounts <%s>", params.smtpSender())));
        msg.setRecipient(Message.RecipientType.TO, new InternetAddress(to));
        msg.setContent(body, encoding);
        Transport.send(msg);
    }

    private String userDetails(String userid, String firstName, String lastName, String email, String ip) {
        return String.format(
            "ip=%s\nemail=%s\nuserId=%s\nlastName=%s\nfirstName=%s",
            ip, email, userid, lastName, firstName);
    }

    /**
     * If IP consists of multiple tokens, like "1.2.3.4, 5.6.7.8" then just extract the first one.
     */
    private String extractFirst(String ip) {
        if (ip==null)   return "127.0.0.1";
        int idx = ip.indexOf(",");
        if(idx>0) {
            for (String xForwardedFor : ip.split(",")) {
                if (StringUtils.isNotBlank(xForwardedFor) && !InetAddresses.forString(xForwardedFor).isSiteLocalAddress()) {
                    return ip;
                }
            }
        }
        return ip;
    }

    private static String enc(String s) throws UnsupportedEncodingException {
        return URLEncoder.encode(s,"UTF-8");
    }

    /**
     * Adds the new user entry to LDAP.
     */
    public String createRecord(String userid, String firstName, String lastName, String email) throws NamingException {
        Attributes attrs = new BasicAttributes();
        attrs.put("objectClass", "inetOrgPerson");
        attrs.put("givenName", firstName);
        attrs.put("sn", lastName);
        attrs.put("mail", email);
        String password = PasswordUtil.generateRandomPassword();
        attrs.put("userPassword", PasswordUtil.hashPassword(password));
        attrs.put(REGISTRATION_DATE, new SimpleDateFormat("yyyy/MM/dd HH:mm:ss").format(new Date()));
        attrs.put(SENIOR_STATUS, "N");

        final DirContext con = connect();
        try {
            String fullDN = "cn=" + userid + "," + params.newUserBaseDN();
            con.createSubcontext(fullDN, attrs).close();

            // add to the right group
            try {
                con.modifyAttributes("cn=all,ou=groups,dc=jenkins-ci,dc=org",ADD_ATTRIBUTE,new BasicAttributes("member",fullDN));
            } catch (AttributeInUseException e) {
                // deletes and re-add it to make the case match
                con.modifyAttributes("cn=all,ou=groups,dc=jenkins-ci,dc=org",REMOVE_ATTRIBUTE,new BasicAttributes("member",fullDN));
                con.modifyAttributes("cn=all,ou=groups,dc=jenkins-ci,dc=org",ADD_ATTRIBUTE,new BasicAttributes("member",fullDN));
            }
        } catch (NameAlreadyBoundException e) {
            throw new UserError("ID "+userid+" is already taken. Perhaps you already have an account imported from legacy java.net? You may try resetting the password.");
        } finally {
            con.close();
        }

        LOGGER.info("User "+userid+" signed up: "+email);
        return password;
    }

    /**
     * Handles the password reset form submission.
     */
    public HttpResponse doDoPasswordReset(@QueryParameter String id, @QueryParameter String reason) throws Exception {
        final DirContext con = connect();
        if (id.isEmpty())
            throw new UserError("No email or user account provided");
        try {
            Iterator<User> a = searchByWord(id, con);
            if (a.hasNext()) {
                User u = a.next();

                String p = PasswordUtil.generateRandomPassword();
                u.modifyPassword(con, p);
                u.mailPasswordReset(p, Stapler.getCurrentRequest().getRemoteUser(),
                    StringUtils.isBlank(reason) ? "request in the account management app" : reason );
            }
        } finally {
            con.close();
        }

        return new HttpRedirect("resetMail");
    }

    public User getUserById(String id, DirContext con) throws NamingException {
        String dn = "cn=" + id + "," + params.newUserBaseDN();
        return new User(con.getAttributes(dn));
    }

    /**
     * Object that represents some user in LDAP.
     */
    public class User {
        /**
         * User ID, such as 'kohsuke'
         */
        public final String id;
        /**
         * Email address.
         */
        public final String mail;

        public User(String id, String mail) {
            this.id = id;
            this.mail = mail;
        }

        public User(Attributes att) throws NamingException {
            id = (String) att.get("cn").get();
            mail = (String) att.get("mail").get();
        }

        public String getDn() {
            return String.format("cn=%s,%s", id, params.newUserBaseDN());
        }

        public void modifyPassword(DirContext con, String password) throws NamingException {
            con.modifyAttributes(getDn(),REPLACE_ATTRIBUTE,new BasicAttributes("userPassword",PasswordUtil.hashPassword(password)));
            LOGGER.info("User "+id+" reset the password: "+mail);
        }

        public void modifyEmail(DirContext con, String email) throws NamingException {
            con.modifyAttributes(getDn(),REPLACE_ATTRIBUTE,new BasicAttributes("mail",email));
            LOGGER.info("User "+id+" reset the email address to: "+email);
        }

        /**
         * Sends a new password to this user.
         */
        public void mailPassword(String password) throws MessagingException {
            mail(mail, "Your access to Jenkins resources", "Your userid is " + id + "\n" +
                "Your temporary password is " + password + "\n" +
                "\n" +
                "Please visit " + getUrl() + " and update your password and profile\n", "text/plain");
        }

        /**
         * Sends a new password to this user.
         */
        public void mailAccountCreated(boolean sendPassword, String password, @CheckForNull String message) throws MessagingException {
            mail(mail, "New account on the Jenkins project infrastructure",
                "Dear recipient, \n\n" +
                "We have created a new Jenkins project account for you. Your new user ID is " + id + "\n" +
                ( sendPassword ? "Your temporary password is " + password + "\n" : "" ) +
                ( StringUtils.isNotBlank(message) ? message + "\n" : "" ) +
                "\n" +
                ( sendPassword ? "Please visit " + getUrl() + " and update your password and profile\n" : "" ), 
                "text/plain");
        }

        /**
         * Sends a new password and a password reset notification to this user.
         */
        public void mailPasswordReset(String password, @CheckForNull String requestedByUser, @CheckForNull String reason) throws MessagingException {
            mail(mail, "Password reset on the Jenkins project infrastructure",
                "Your Jenkins account password was reset. " +
                (requestedByUser != null ? String.format("It was requested by user %s. ", requestedByUser) : "") +
                (StringUtils.isNotBlank(reason) ? String.format("Reason: %s. ", reason) : "") +
                "Your userid is " + id + "\n" +
                "Your temporary password is " + password + "\n" +
                "\n" +
                "Please visit " + getUrl() + " and update your password and profile\n", "text/plain");
        }

        public void delete(DirContext con) throws NamingException {
            con.destroySubcontext(getDn());
            LOGGER.info("User " + id + " deleted");
        }
    }

    private Session createJavaMailSession() {
        Session session;
        Properties props = new Properties(System.getProperties());
        props.put("mail.smtp.host",params.smtpServer());
        props.put("mail.smtp.port", params.smtpPort());
        if(params.smtpAuth()) {
            props.put("mail.smtp.auth", params.smtpAuth());
            props.put("mail.smtp.starttls.enable", true);
            session = Session.getInstance(props,
                    new Authenticator() {
                        protected PasswordAuthentication getPasswordAuthentication() {
                            return new PasswordAuthentication(params.smtpUser(), params.smtpPassword());
                        }
                    });
        } else {
            session = Session.getInstance(props);
        }
        return session;
    }

    /**
     * Search LDAP with the given keyword, returning matching users.
     */
    public Iterator<User> searchByWord(String idOrMail, DirContext con) throws NamingException {
        final NamingEnumeration<SearchResult> e = con.search(params.newUserBaseDN(), "(|(mail={0})(cn={0}))", new Object[]{idOrMail}, new SearchControls());
        return new Iterator<User>() {
            public boolean hasNext() {
                return e.hasMoreElements();
            }

            public User next() {
                try {
                    return new User(e.nextElement().getAttributes());
                } catch (NamingException x) {
                    throw new RuntimeException(x);
                }
            }

            public void remove() {
                throw new UnsupportedOperationException();
            }
        };
    }

    public LdapContext connect() throws NamingException {
        return connect(params.managerDN(), params.managerPassword());
    }

    public LdapContext connect(String dn, String password) throws NamingException {
        Hashtable<String,String> env = new Hashtable<String,String>();
        env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
        env.put(Context.PROVIDER_URL, params.server());
        env.put(Context.SECURITY_PRINCIPAL, dn);
        env.put(Context.SECURITY_CREDENTIALS, password);
        return new InitialLdapContext(env, null);
    }

    /**
     * Handles the login form submission.
     */
    public HttpResponse doDoLogin(
            @QueryParameter String userid,
            @QueryParameter String password,
            @QueryParameter String from
    ) {
        login(userid, password);

        // to limit the redirect to this application, require that the from URL starts from '/'
        if (from==null || !from.startsWith("/")) from="/";
        return HttpResponses.redirectTo(from);
    }

    private Myself login(String userid, String password) throws UserError {
        if (StringUtils.isBlank(userid)) {
            throw new UserError("Missing username");
        }
        if (StringUtils.isBlank(password)) {
            throw new UserError("Missing password");
        }
        
        String dn = "cn=" + userid + "," + params.newUserBaseDN();
        try {
            LdapContext context = connect(dn, password);    // make sure the password is valid
            try {
                Myself myself = new Myself(this, dn, context.getAttributes(dn), getGroups(dn,context));
                Stapler.getCurrentRequest().getSession().setAttribute(Myself.class.getName(), myself);
                return myself;
            } finally {
                context.close();
            }
        } catch (AuthenticationException e) {
            throw new UserError(String.format("User \"%s\" not found or password incorrect %n", userid) );
        } catch (Exception e) {
            String errorId = String.valueOf(Math.round(Math.random() * 1e8));
            LOGGER.log(Level.SEVERE, "Login error " + errorId, e);
            throw new UserError("Something went wrong. Please try again later.", errorId);
        }
    }

    /**
     * Obtains the group of the user specified by the given DN.
     */
    Set<String> getGroups(String dn, LdapContext context) throws NamingException {
        Set<String> groups = new HashSet<String>();
        SearchControls c = new SearchControls();
        c.setReturningAttributes(new String[]{"cn"});
        c.setSearchScope(SUBTREE_SCOPE);
        NamingEnumeration<SearchResult> e = context.search("dc=jenkins-ci,dc=org", "(& (objectClass=groupOfNames) (member={0}))", new Object[]{dn}, c);
        while (e.hasMore()) {
            groups.add(e.nextElement().getAttributes().get("cn").get().toString());
        }
        return groups;
    }

    public HttpResponse doLogout(StaplerRequest req) {
        req.getSession().invalidate();
        return HttpResponses.redirectToDot();
    }

    public boolean isLoggedIn() {
        return Myself.current() !=null;
    }

    public boolean isAdmin() {
        Myself myself = Myself.current();
        return myself !=null && myself.isAdmin();
    }

    /**
     * If the user has already logged in, retrieve the current user, otherwise
     * send the user to the login page.
     */
    public Myself getMyself() {
        Myself myself = Myself.current();
        if (myself == null) {
            return needToLogin();
        }
        return myself;
    }

    private Myself needToLogin() {
        // needs to login
        StaplerRequest req = Stapler.getCurrentRequest();

        String authHeader = req.getHeader("Authorization");
        if (authHeader != null) { // Basic auth
            if (!authHeader.startsWith("Basic")) {
                throw HttpResponses.error(403, "Only Basic authentication is supported");
            }
            byte[] userPasswordBytes = Base64.getDecoder().decode(authHeader.trim().substring(6));
            String[] res = new String(userPasswordBytes).split(":");
            String user = res[0];
            String password = res[1];
            return login(user, password).withRESTAuthentication(true);
        }

        StringBuilder from = new StringBuilder(req.getRequestURI());
        if (req.getQueryString()!=null)
            from.append('?').append(req.getQueryString());
        try {
            throw HttpResponses.redirectViaContextPath("login?from="+ URLEncoder.encode(from.toString(),"UTF-8"));
        } catch (UnsupportedEncodingException e) {
            throw new AssertionError(e);
        }
    }

    /**
     * This is a test endpoint to make sure the reverse proxy forwarding is working.
     */
    public HttpResponse doForwardTest(@Header("X-Forwarded-For") String header) {
        return HttpResponses.plainText(header);
    }

    public AdminUI getAdmin() {
        if (!getMyself().isAdmin()) {
            throw HttpResponses.forbidden();
        }
        return new AdminUI(this);
    }

    private static final Logger LOGGER = Logger.getLogger(Application.class.getName());

    private static final Pattern VALID_ID = Pattern.compile("[a-z0-9_]+");

    public static final List<String> EMAIL_BLACKLIST = Arrays.asList(
        // TODO: Integrate with https://github.com/wesbos/burner-email-providers
        // Also can use this to check if disposable service: http://www.block-disposable-email.com/cms/try/
        "@akglsgroup.com",
        "@anappthat.com",
        "@boximail.com",
        "@clrmail.com",
        "@dodsi.com",
        "@eelmail.com",
        "@getairmail.com",
        "@grandmamail.com",
        "@grandmasmail.com",
        "@guerrillamail.com",
        "@imgof.com",
        "@mailcatch.com",
        "@maildx.com",
        "@mailinator.com",
        "@mailnesia.com",
        "@my10minutemail.com",
        "@rediffmail.com",
        "@sharklasers.com",
        "@thrma.com",
        "@tryalert.com",
        "@vomoto.com",
        "@webtrackker.com",
        "@yahoo.co.id",
        "@yeslifecyclemarketing.com",
        "@yopmail.com",
        "@zetmail.com",
        "abdhesh090@gmail.com",
        "abdheshnir.vipra@gmail.com",
        "adnanishami28",
        "adreahilton@gmail.com",
        "airtelshopstore",
        "ajayrudelee@gmail.com",
        "ajit86153@gmail.com",
        "ajymaansingh@gmail.com",
        "ak384304@gmail.com",
        "akleshnirala@gmail.com",
        "alamsarfaraz791@gmail.com",
        "albertthomas",
        "aliskimis@gmail.com",
        "allymptedpokdebraj@gmail.com",
        "amarniket4@codehot.co.uk",
        "ambikaku12@gmail.com",
        "amiteshku12@gmail.com",
        "andentspourita@gmail.com",
        "andorclifs@gmail.com",
        "andrewd@ghostmail.com",
        "andrusmith",
        "angthpofphilip@gmail.com",
        "anilkandpal0@gmail.com",
        "anilsingh7885945@gmail.com",
        "anjilojilo@gmail.com",
        "anshikaescorts@gmail.com",
        "april.caword1589@gmail.com",
        "apwebs7012@yahoo.com",
        "apwebs70@gmail.com",
        "arena.wilson91@gmail.com",
        "arth.smith@yandex.com",
        "asadk7856",
        "asadkiller2@gmail.com",
        "asadwoz",
        "ashwanikumar",
        "avanrajput5@gmail.com",
        "avanrajput5@gmail.com",
        "baalzebub12021996@gmail.com",
        "balramchoudhary.ballu@gmail.com",
        "baueierjose@gmail.com",
        "bcmdsbncskj@yandex.com",
        "besto.sty@yandex.com",
        "bidupan12@gmail.com",
        "bill.cardy1366@gmail.com",
        "billydoch021@gmail.com",
        "biodotlab",
        "boleshahuja88@gmail.com",
        "boymorpoupamm@gmail.com",
        "caulnurearkporjohnh@gmail.com",
        "choutpoyjenniferm@gmail.com",
        "ciodsjiocxjosa@yandex.com",
        "clarencepatterson570@gmail.com",
        "coatseardeaspozwilliamb",
        "cooktimseo@gmail.com",
        "cooperdavidd@gmail.com",
        "crsgroupindia@gmail.com",
        "daduajiggy@gmail.com",
        "dasdasdsas32@gmail.com",
        "davidtech46@gmail.com",
        "deal4udeal4me@gmail.com",
        "deepak19795up@gmail.com",
        "deepakkumar02singh@gmail.com",
        "dersttycert101@gmail.com",
        "devilr724",
        "doetpouernestp@gmail.com",
        "donallakarpissaa@gmail.com",
        "dr74402@gmail.com",
        "drruytuyj@gmail.com",
        "dutchess.meethi@gmail.com",
        "dwari.hdyr528@gmail.com",
        "emaxico",
        "estherj@ghostmail.com",
        "ethanluna635@gmail.com",
        "evagreen277@gmail.com",
        "fievepowgeorgeg@gmail.com",
        "fifixtpoqpatrickh@gmail.com",
        "fishepoemary@gmail.com",
        "flustpozwilliamp@gmail.com",
        "folk.zin87@gmail.com",
        "fragendpotmauriciok@gmail.com",
        "gallifingspoyjoannel@gmail.com",
        "gamblerbhaijaan@gmail.com",
        "georgegallego.com@gmail.com",
        "georgiaaby@gmail.com",
        "gladyskempf427@gmail.com",
        "hatteroublepocmartha@gmail.com",
        "hauptnuo214@gmail.com",
        "hcjxdbschjbdsj",
        "hcuiodsciodso@yandex.com",
        "henrymullins",
        "herstpopenriqued@gmail.com",
        "himeshsinghiq@gmail.com",
        "hipearspodarthurd@gmail.com",
        "hontpojpatricia",
        "hounchpowjohn@gmail.com",
        "howerpofharold@gmail.com",
        "hpprinter",
        "hrrbanga",
        "hsharish",
        "huin.lisko097@gmail.com",
        "hwayne2812",
        "ik96550@gmail.com",
        "inchestoacres@gmail.com",
        "intelomedia02@gmail.com",
        "intuitphonenumber",
        "iqinfotech",
        "iscopedigital11@gmail.com",
        "italygroupspecialist@gmail.com",
        "jacobshown1@gmail.com",
        "jamersonnvy309@gmail.com",
        "jamesdelvin2@gmail.com",
        "janes6521@gmail.com",
        "janessmith",
        "jayshown81@gmail.com",
        "jecksonmike1512@gmail.com",
        "jeevikasraj@gmail.com",
        "jhonsinha",
        "jiloanjilo",
        "jim.cook2681@gmail.com",
        "jksadnhk@gmail.com",
        "jmike7162@gmail.com",
        "jmtechnosolve@gmail.com",
        "johngarry227@gmail.com",
        "johnmaclan1@gmail.com",
        "johnmatty55@gmail.com",
        "johnmcclan009@gmail.com",
        "johnmclean278@gmail.com",
        "johnmikulis8",
        "johnnycolvin428@gmail.com",
        "johnprashar1@gmail.com",
        "johnsinha",
        "johnydeep0712@gmail.com",
        "joshuahurst928@gmail.com",
        "jusbabyespowbobby@gmail.com",
        "kalidass34212@gmail.com",
        "karansinghrawat15@gmail.com",
        "kashyap.kashyap07@yahoo.in",
        "kaveribhardwaj@outlook.com",
        "kevin24by7@gmail.com",
        "kisamar7@gmail.com",
        "kk+spamtest@kohsuke.org",
        "kripalsingh446@gmail.com",
        "krishgail30@yahoo.com",
        "ks0449452@gmail.com",
        "kukurkutta9@gmail.com",
        "kumar.raghavendra84@gmail.com",
        "kumar.uma420@gmail.com",
        "kumar0121@yahoo.com",
        "kumarprem",
        "kumarsujit899@gmail.com",
        "laknerickman@gmail.com",
        "laptoprepair",
        "larrysilva",
        "leonard.freddie@yandex.com",
        "litagray931@gmail.com",
        "litawilliam36@gmail.com",
        "loefflerpay462@gmail.com",
        "loksabha100@gmail.com",
        "lovebhaiseo@gmail.com",
        "lutherorea2807@gmail.com",
        "mac2help@outlook.com",
        "mac2help@outlook.com",
        "macden",
        "madeleineforsyth290@gmail.com",
        "maineeru@gnail.com",
        "makbaldwin1@gmail.com",
        "manasfirdose",
        "maohinseeeeeee@outlook.com",
        "mariavitory1212@gmail.com",
        "marklewis0903@gmail.com",
        "masmartin71@gmail.com",
        "mehrabharat137@gmail.com",
        "michelbavan@gmail.com",
        "mk2434990@gmail.com",
        "mmmarsh12@gmail.com",
        "mohandaerer",
        "mohankeeded",
        "monubhardwaj12451@gmail.com",
        "monurobert",
        "morrisonjohn293@gmail.com",
        "msofficeservices13@gmail.com",
        "mujafer@yandex.com",
        "nalspoibarbarab@gmail.com",
        "ncrpoo",
        "ncrraanisapna@gmail.com",
        "ncrradha@gmail.com",
        "ncrrohit",
        "ncrsona",
        "nelsonnelsen11021992@gmail.com",
        "newellnewallne56@gmail.com",
        "nextgenwebstore@gmail.com",
        "nirajsinghrawat12@gmail.com",
        "nishanoor32",
        "nishuyadav257@gmail.com",
        "obat@",
        "ollouretypotida@gmail.com",
        "outlookhelpline",
        "pala41667@gmail.com",
        "paroccepoytamarac@gmail.com",
        "paulseanseo91@gmail.com",
        "pawankundu99@gmail.com",
        "petersenk509@gmail.com",
        "petersmith2331@gmail.com",
        "pintu",
        "pk76997246@gmail.com",
        "pogogames483@gmail.com",
        "poonamkamalpatel@gmail.com",
        "porterquines@gmail.com",
        "poweltpowwilliamm@gmail.com",
        "pranay4job@gmail.com",
        "pratik.vipra@gmail.com",
        "premk258@gmail.com",
        "printerhelplinenumber@gmail.com",
        "priturpocdickr@gmail.com",
        "quickbook",
        "qukenservicess",
        "r.onysokha@gmail.com",
        "rahul4cool2003@gmail.com",
        "rahuldheere@gmail.com",
        "rajdsky7@gmail.com",
        "rajkumarskbd@gmail.com",
        "rajuk0838@gmail.com",
        "ramlakhaann@gmail.com",
        "randyortam68@gmail.com",
        "ransonfreeman@gmail.com",
        "rasidegingpoflaceyz@gmail.com",
        "ravi1991allahabaduniversity@gmail.com",
        "ravirknayak@gmail.com",
        "ravis70291@gmail.com",
        "rawatmeenakshi12123s",
        "rawatsonam",
        "rehel55rk@gmail.com",
        "righttechnical",
        "rikybhel23@gmail.com",
        "rodriquesnuv728@gmail.com",
        "rohitsharma7294@outlook.com",
        "rohitsona121090@gmail.com",
        "sajankaur5@gmail.com",
        "samit8974@gmail.com",
        "sandy@voip4callcenters.com",
        "sandysharmja121@gmail.com",
        "saundraclogston@gmail.com",
        "sawanjha17@gmail.com",
        "sbabita149@gmail.com",
        "sellikepovscotta@gmail.com",
        "seo@gmail.com",
        "seosupport",
        "seoxpertchandan@gmail.com",
        "service.thepc@yandex.com",
        "shashisemraha@gmail.com",
        "shichpodlakeisha@gmail.com",
        "shilpikispotta2508@gmail.com",
        "shobha.kachhap23@gmail.com",
        "shyamtengo91@gmail.com",
        "simon.ken7@gmail.com",
        "singhavan31@gmail.com",
        "singhmukul",
        "skprajapaty@gmail.com",
        "sman33935@gmail.com",
        "smartsolution3000@gmail.com",
        "smithlora912@gmail.com",
        "smithmartin919@gmail.com",
        "smithmaxseo@gmail.com",
        "sneharajput931@gmail.com",
        "snjbisth8@gmail.com",
        "sonu70251",
        "sorianonvy291@gmail.com",
        "spyindia",
        "spyvikash",
        "stephanflorian1@gmail.com",
        "stuartbinny12021996@gmail.com",
        "sty.besto",
        "stybesto13",
        "sujatakumari8236@gmail.com",
        "sujitkumarthakur8@gmail.com",
        "sundeepsa123@gmail.com",
        "sunflowerrosy@outlook.com",
        "sunilkundujat@gmail.com",
        "sunjara10@gmail.com",
        "sweenypar210@gmail.com",
        "telemarket3004",
        "teresarothschild198@gmail.com",
        "therewpoxjamix",
        "thjyt@yandex.com",
        "thornestedpokrodneyn@gmail.com",
        "tinku8384@gmail.com",
        "tomcopper6@gmail.com",
        "tomhanks1121@gmail.com",
        "toren55rk@gmail.com",
        "uma.shank122451ddsds@gmail.com",
        "updateursoftware2016@gmail.com",
        "useenpofchristopherc@gmail.com",
        "vcb@gmail.com",
        "viz.michel@gmail.com",
        "vr4vikasrastogi@gmail.com",
        "vvicky4001@gmail.com",
        "vvicky4003@gmail.com",
        "watpad",
        "webdevelopera@gmail.com",
        "webtracker",
        "webtrackker",
        "win.tech",
        "winstond@tutanota.com",
        "wittepepobjustina@gmail.com",
        "yadavqs@gmail.com",
        "yadavshalini501@gmail.com",
        "yashraj_one",
        "yetwallpoudonnal@gmail.com",
        "youltaspocdonald@gmail.com",
        "youmint.lav@gmail.com",
        "ytdeqwduqwy@yandex.com",
        "zebakhan.ssit@gmail.com",
        "zozojams11@gmail.com"
    );

    public static final List<String> IP_BLACKLIST = Arrays.asList(
        "1.186.172.",
        "1.187.114.172",
        "1.187.118.175",
        "1.187.123.123",
        "1.187.126.76",
        "1.187.162.39",
        "1.22.130.142",
        "1.22.131.140",
        "1.22.164.211",
        "1.22.164.227",
        "1.22.212.209",
        "1.22.38.186",
        "1.22.39.244",
        "1.23.110.86",
        "1.39.101.93",
        "1.39.32.",
        "1.39.33.",
        "1.39.34.",
        "1.39.35.",
        "1.39.40.",
        "1.39.50.144",
        "1.39.51.63",
        "101.212.67.25",
        "101.212.69.213",
        "101.212.71.120",
        "101.222.175.13",
        "101.56.169.183",
        "101.56.181.69",
        "101.56.2.232",
        "101.57.173.94",
        "101.57.198.190",
        "101.57.198.201",
        "101.57.198.22",
        "101.57.7.41",
        "101.59.227.148",
        "101.59.72.90",
        "101.59.76.223",
        "101.60.",
        "101.63.200.188",
        "103.10.197.194",
        "103.18.72.91",
        "103.19.153.130",
        "103.192.64.",
        "103.192.65.",
        "103.192.66.163",
        "103.204.168.18",
        "103.22.172.142",
        "103.226.202.171",
        "103.226.202.211",
        "103.233.116.124",
        "103.233.118.222",
        "103.233.118.230",
        "103.245.118.",
        "103.251.61.50",
        "103.254.154.229",
        "103.43.33.101",
        "103.43.35.42",
        "103.44.18.221",
        "103.47.168.129",
        "103.47.168.57",
        "103.47.169.137",
        "103.47.169.7",
        "103.49.49.49",
        "103.50.151.68",
        "103.55.",
        "104.128.21.186", // burleigh
        "104.156.228.84", // http://www.ipvoid.com/scan/104.156.228.84
        "104.156.240.140", // http://www.ipvoid.com/scan/104.156.240.140
        "104.200.154.4", // http://www.ipvoid.com/scan/104.200.154.4
        "104.224.35.122", // http://www.ipvoid.com/scan/104.224.35.122/
        "104.236.123.17", // persistent spammer
        "104.236.3.101", // casejackson49
        "104.238.169.58", // http://www.ipvoid.com/scan/104.238.169.58
        "106.201.144.243",
        "106.201.174.113",
        "106.201.196.70",
        "106.201.33.175",
        "106.202.84.222",
        "106.204.124.188",
        "106.204.142.176",
        "106.204.194.124",
        "106.204.236.224",
        "106.204.246.196",
        "106.204.46.93",
        "106.204.50.214",
        "106.205.188.247",
        "106.205.56.253",
        "106.208.183.157",
        "106.215.176.34",
        "106.67.102.143",
        "106.67.113.167",
        "106.67.118.250",
        "106.67.28.163",
        "106.67.28.22",
        "106.67.46.209",
        "106.67.76.237",
        "106.67.89.196",
        "106.76.167.41",
        "106.79.57.84",
        "106.79.59.178",
        "107.168.18.212", // mujafer_l
        "107.191.46.37", // williamthousus35
        "107.191.53.51", // persistent spammer
        "108.59.10.141", // http://www.ipvoid.com/scan/108.59.10.141
        "108.61.184.146", // adnanishami28
        "109.163.234.8", // http://www.ipvoid.com/scan/109.163.234.8
        "109.201.137.46", // tomhanks1121
        "110.172.140.98",
        "110.227.181.55",
        "110.227.183.246",
        "110.227.183.36",
        "111.125.137.83",
        "111.93.63.62",
        "112.110.118.56",
        "112.110.2.245",
        "112.110.21.8",
        "112.110.22.229",
        "112.196.147.",
        "112.196.160.",
        "112.196.170.150",
        "112.196.170.8",
        "114.143.173.139",
        "115.111.183.14",
        "115.111.223.43",
        "115.112.159.250",
        "115.114.191.92",
        "115.115.131.166",
        "115.160.250.34",
        "115.184.",
        "115.249.46.242",
        "116.202.32.38",
        "116.202.36.",
        "116.203.",
        "117.193.130.11",
        "117.198.",
        "117.201.159.73",
        "117.201.166.21",
        "117.242.5.201",
        "119.81.230.137",
        "119.81.249.132", // http://www.ipvoid.com/scan/119.81.249.132
        "119.81.253.243", // http://www.ipvoid.com/scan/119.81.253.243
        "119.82.95.142",
        "120.57.17.65",
        "120.57.86.248",
        "120.59.205.205",
        "121.241.96.5",
        "121.242.40.15",
        "121.242.77.200",
        "121.244.181.162",
        "121.244.95.1",
        "121.245.126.7",
        "121.245.137.28",
        "122.162.88.67",
        "122.167.104.9",
        "122.169.130.19",
        "122.172.222.232",
        "122.173.",
        "122.175.221.219",
        "122.176.18.41",
        "122.176.78.14",
        "122.177.",
        "122.180.",
        "123.136.209.119",
        "123.239.77.189",
        "123.254.107.229",
        "124.41.241.203",
        "124.42.12.77",
        "125.16.2.102",
        "125.63.101.236",
        "125.63.104.53",
        "125.63.107.141",
        "125.63.107.204",
        "125.63.73.249",
        "125.63.96.184",
        "125.63.99.102",
        "128.199.242.223", // persistent spammer
        "136.185.192.239",
        "138.128.180.",
        "14.141.1.58",
        "14.141.148.206",
        "14.141.148.222",
        "14.141.163.58",
        "14.141.49.210",
        "14.141.51.5",
        "14.96.",
        "14.98.",
        "154.127.63.33", // saundraclogston
        "155.254.246.",
        "155.94.183.102", // grantp
        "158.255.208.72",
        "162.245.144.142", // jamesdevlin
        "167.114.159.186", // Persistent spammer
        "169.57.0.235", // http://www.ipvoid.com/scan/169.57.0.235
        "171.48.32.3",
        "171.48.38.188",
        "171.50.131.221",
        "171.50.146.100",
        "171.50.42.142",
        "172.98.67.25", // http://www.ipvoid.com/scan/172.98.67.25
        "172.98.67.71", // http://www.ipvoid.com/scan/172.98.67.71
        "174.140.170.121", // monurobert
        "176.222.33.42", // imistupidtammy
        "176.53.21.213", // http://www.ipvoid.com/scan/176.53.21.213
        "176.67.85.1", // http://www.ipvoid.com/scan/176.67.85.1
        "176.67.86.", // laptoprepair gmail guy and Persistent spammers
        "176.67.86.36", // Persistent spammer
        "177.154.139.203", // http://www.ipvoid.com/scan/177.154.139.203
        "180.151.",
        "180.254.96.177", // http://www.ipvoid.com/scan/180.254.96.177
        "181.41.197.63", // Persistent spammer
        "182.156.72.162",
        "182.156.89.34",
        "182.64.",
        "182.65.32.63",
        "182.68.",
        "182.69.",
        "182.71.71.102",
        "182.73.117.142",
        "182.73.182.170",
        "182.74.135.26",
        "182.74.88.42",
        "182.75.144.58",
        "182.75.176.202",
        "182.77.14.159",
        "182.77.4.162",
        "182.77.8.24",
        "182.77.8.92",
        "183.82.199.55",
        "185.108.128.12", // http://www.ipvoid.com/scan/185.108.128.12
        "185.22.232.91", // Persistent spammer
        "185.61.148.226", // Persistent spammer
        "188.116.36.188", // Persistent spammer
        "188.172.220.71", // johnmclean007
        "192.171.254.207", // andrewd
        "192.200.23.16", // anital
        "192.230.49.120", // winstond
        "193.182.144.106", // Persistent spammer
        "196.207.106.219",
        "196.207.107.56",
        "198.203.29.123", // winstond
        "198.8.80.172", // http://www.ipvoid.com/scan/198.8.80.172
        "200.80.48.34", // babhy
        "202.122.134.254",
        "202.159.213.10",
        "202.3.120.6",
        "202.53.94.4",
        "202.91.134.66",
        "202.91.134.67",
        "202.91.76.164",
        "202.91.76.82",
        "203.110.83.66",
        "203.122.16.168",
        "203.122.41.130",
        "203.122.7.236",
        "203.99.192.210",
        "211.79.127.11", // Persistent spammer
        "212.7.220.136", // aprilcowardy
        "212.83.165.204", // http://www.ipvoid.com/scan/212.83.165.204/
        "213.183.56.51", // Persistent spammer
        "216.185.103.139", // http://www.ipvoid.com/scan/216.185.103.139
        "217.114.211.246", // http://www.ipvoid.com/scan/106.51.27.106
        "223.176.141.173",
        "223.176.142.230",
        "223.176.143.154",
        "223.176.152.27",
        "223.176.156.193",
        "223.176.159.235",
        "223.176.165.11",
        "223.176.170.100",
        "223.176.176.254",
        "223.176.177.174",
        "223.176.178.24",
        "223.176.188.147",
        "223.176.189.144",
        "223.176.190.59",
        "223.180.245.176",
        "223.183.100.179",
        "223.183.67.247",
        "223.225.42.57",
        "223.229.99.61",
        "23.81.47.235", // leonard_freddie
        "27.255.252.28",
        "27.4.184.217",
        "27.56.47.65",
        "27.60.131.203",
        "27.7.210.21",
        "27.7.213.175",
        "27.7.231.16",
        "37.235.53.75", // Persistent spammer IP
        "38.132.106.132", // http://www.ipvoid.com/scan/38.132.106.132
        "38.95.108.245", // http://www.ipvoid.com/scan/38.95.108.245
        "38.95.109.37", // http://www.ipvoid.com/scan/38.95.109.37
        "38.95.109.67", // http://www.ipvoid.com/scan/38.95.109.67
        "41.215.241.114", // Persistent spammer IP
        "43.225.195.92",
        "43.230.198.",
        "43.239.204.41",
        "43.239.68.",
        "43.242.36.56",
        "43.245.138.109",
        "43.245.139.203",
        "43.245.149.107",
        "43.245.149.205",
        "43.245.151.",
        "43.245.156.239",
        "43.245.156.94",
        "43.245.158.172",
        "43.245.158.5",
        "43.245.209.170",
        "43.245.211.",
        "43.249.38.69", // Persistent spammer IP
        "43.251.84.",
        "43.252.24.155",
        "43.252.25.153",
        "43.252.25.45",
        "43.252.27.35",
        "43.252.27.52",
        "43.252.29.202",
        "43.252.29.206",
        "43.252.30.75",
        "43.252.30.93",
        "43.252.31.133",
        "43.252.31.138",
        "43.252.32.181",
        "43.252.33.2",
        "43.252.33.70",
        "43.252.34.9",
        "43.252.35.80",
        "45.114.63.184",
        "45.115.",
        "45.120.162.172",
        "45.120.56.65",
        "45.120.59.232",
        "45.120.59.9",
        "45.121.188.46",
        "45.121.189.236",
        "45.121.191.78",
        "45.122.120.178",
        "45.122.123.47",
        "45.122.123.81",
        "45.127.40.",
        "45.127.42.219",
        "45.127.42.63",
        "45.127.43.154",
        "45.32.226.36", // daduajiggy
        "45.42.150.85",
        "45.42.243.83",
        "45.55.3.174",
        "45.56.154.150",
        "45.59.185.104", // alishalal
        "46.101.245.193", // Persistent spammers
        "46.165.208.207", // http://www.ipvoid.com/scan/46.165.208.207
        "46.166.179.59", // Persistent spammers
        "46.21.149.10", // jamesthomas (manasfirdose@gmail.com)
        "46.218.58.138", // http://www.ipvoid.com/scan/46.218.58.138/
        "49.14.126.20",
        "49.15.149.23",
        "49.15.150.57",
        "49.15.158.7",
        "49.156.150.242",
        "49.204.252.214",
        "49.207.188.57",
        "49.244.214.39",
        "49.248.212.18",
        "49.40.2.224",
        "5.62.21.", // Anonymous proxy
        "5.62.5.71", // http://www.ipvoid.com/scan/5.62.5.71
        "50.31.252.31", // Persistent spammers
        "54.193.91.83", // guru123qbji
        "54.84.8.145", // Persistent spammers
        "59.180.132.51",
        "59.180.155.34",
        "59.180.25.215",
        "59.180.27.191",
        "59.91.216.88",
        "59.92.74.170",
        "61.0.85.206",
        "61.12.36.234",
        "61.12.72.244",
        "61.12.72.246",
        "62.210.139.80", // proxy? twice an Indian spammer jumped to this IP
        "69.28.83.89", // Persistent spammers
        "69.31.101.3", // Persistent spammers
        "69.65.43.205", // http://www.ipvoid.com/scan/69.65.43.205
        "74.120.223.151", // petersenk509
        "78.110.165.187", // robin24by7
        "81.218.235.170", // http://www.ipvoid.com/scan/81.218.235.170
        "91.121.219.236", // http://www.ipvoid.com/scan/91.121.219.236
        "91.205.175.34", // http://www.ipvoid.com/scan/91.205.175.34
        "92.114.94.106", // http://www.ipvoid.com/scan/92.114.94.106/
        "93.114.44.187", // http://www.ipvoid.com/scan/93.114.44.187
        "93.115.92.169", // http://www.ipvoid.com/scan/93.115.92.169
        "95.141.31.7", // http://www.ipvoid.com/scan/95.141.31.7
        "95.211.101.216", // makbaldwin1
        "95.211.171.164" // http://www.ipvoid.com/scan/95.211.171.164
    );

    public static final List<String> USERID_BLACKLIST = Arrays.asList(
        "babhy",
        "intuitphonenumber",
        "jamesbond",
        "larrysilva",
        "macden",
        "quickbook",
        "smartjane",
        "turbotax",
        "watpad"
    );

    public static final List<String> NAUGHTY_BLACKLIST = Arrays.asList(
        "asshole",
        "bastard",
        "bitches",
        "dicksuck",
        "fuck",
        "pussy",
        "vagina"
    );

    public static final String SPAM_MESSAGE = "The anti-spam system was triggered: we need your help to prove that you are human and not a robot (or a human spammer). " +
        "Open an issue on the <a href=\"https://github.com/jenkins-infra/helpdesk/issues/new?template=2-account-issue.yml&labels=triage,accounts&url=account.jenkins.io/antispam\">Jenkins Infrastructure Help Desk</a> and provide the email and the userid you tried to register with, as well as the version of Jenkins you currently are running. " +
        "Try to make your issue look legitimate and not like it's written by someone who doesn't know anything or just read the jenkins.io home page. " +
        "If we don't think your signup request is legitimate, it won't be approved. We're a popular target of human spammers, i.e. actual people with actual web browsers trying to post their spam in our applications. ";

    // Somewhat cryptic name for cookie, so prying eyes don't know its use.
    public static final String ALREADY_SIGNED_UP = "JENKINSACCOUNT";
}