Просмотр архива RotorCms 14.2.1


<?php

declare(strict_types=1);

namespace AppHttpControllersUser;

use AppClassesValidator;
use AppHttpControllersController;
use AppModelsPasswordReset;
use AppModelsUser;
use IlluminateHttpRedirectResponse;
use IlluminateHttpRequest;
use IlluminateSupportFacadesAuth;
use IlluminateSupportFacadesHash;
use IlluminateSupportStr;
use IlluminateViewView;

class RecoveryController extends Controller
{
    /**
     * Восстановление пароля
     */
    public function recovery(Request $request, Validator $validator): View|RedirectResponse
    {
        if (getUser()) {
            return redirect('/')->with('danger', __('main.already_authorized'));
        }

        if ($request->isMethod('post')) {
            $user = getUserByLoginOrEmail($request->input('user'));
            if (! $user) {
                abort(200, __('validator.user'));
            }

            $validator->true(captchaVerify(), ['protect' => __('validator.captcha')]);

            PasswordReset::query()
                ->where('created_at', '<', now()->subHour())
                ->delete();

            $reset = PasswordReset::query()->where('email', $user->email)->first();
            if ($reset) {
                $validator->addError(['user' => __('mails.password_recovery_time')]);
            }

            if ($validator->isValid()) {
                $token = Str::random(32);

                PasswordReset::query()->create([
                    'email'      => $user->email,
                    'token'      => $token,
                    'created_at' => now(),
                ]);

                route('restore', ['token' => $token]);

                // Инструкция по восстановлению пароля на email
                $subject = 'Восстановление пароля на ' . setting('title');
                $data = [
                    'to'       => $user->email,
                    'subject'  => $subject,
                    'username' => $user->getName(),
                    'resetUrl' => route('restore', ['token' => $token]),
                ];

                sendMail('mailer.recovery', $data);

                return redirect('/')->with('success', __('mails.recovery_instructions', ['email' => hideMail($user->email)]));
            }

            return redirect('recovery')
                ->withInput()
                ->withErrors($validator->getErrors());
        }

        return view('users/recovery');
    }

    /**
     * Восстановление пароля
     */
    public function restore(string $token): View|RedirectResponse
    {
        if (getUser()) {
            return redirect('/')->with('danger', __('mails.already_authorized'));
        }

        PasswordReset::query()
            ->where('created_at', '<', now()->subHour())
            ->delete();

        $reset = PasswordReset::query()->where('token', $token)->first();
        if (! $reset) {
            abort(200, __('mails.token_invalid'));
        }

        $user = User::query()->where('email', $reset->email)->first();
        if (! $user) {
            abort(200, __('mails.password_not_recovery'));
        }

        $password = Str::random();
        $user->update(['password' => Hash::make($password)]);

        // Восстановление пароля на email
        $subject = 'Новый пароль на ' . setting('title');
        $data = [
            'to'       => $user->email,
            'subject'  => $subject,
            'username' => $user->getName(),
            'login'    => $user->login,
            'password' => $password,
        ];
        sendMail('mailer.restore', $data);

        Auth::login($user, true);

        $reset->delete();
        PasswordReset::query()
            ->where('created_at', '<', now()->subHour())
            ->delete();

        return redirect('/')
            ->with('success', __('mails.success_recovery', ['password' => $password]));
    }
}