mirror of https://github.com/Bubka/2FAuth.git
45 lines
1.4 KiB
PHP
45 lines
1.4 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Auth;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use App\Http\Requests\UserPatchPwdRequest;
|
|
use Illuminate\Support\Facades\Auth;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Illuminate\Support\Facades\Log;
|
|
|
|
class PasswordController extends Controller
|
|
{
|
|
/**
|
|
* Update the user's password.
|
|
*
|
|
* @return \Illuminate\Http\JsonResponse
|
|
*/
|
|
public function update(UserPatchPwdRequest $request)
|
|
{
|
|
$user = $request->user();
|
|
$validated = $request->validated();
|
|
|
|
if (config('auth.defaults.guard') === 'reverse-proxy-guard' || $user->oauth_provider) {
|
|
Log::notice('Password update rejected: reverse-proxy-guard enabled or account from external sso provider');
|
|
|
|
return response()->json(['message' => __('errors.account_managed_by_external_provider')], 400);
|
|
}
|
|
|
|
if (! Hash::check($validated['currentPassword'], Auth::user()->password)) {
|
|
Log::notice('Password update failed: wrong password provided');
|
|
|
|
return response()->json(['message' => __('errors.wrong_current_password')], 400);
|
|
}
|
|
|
|
if (! config('2fauth.config.isDemoApp')) {
|
|
$user->update([
|
|
'password' => bcrypt($validated['password']),
|
|
]);
|
|
Log::info(sprintf('Password of user ID #%s updated', $user->id));
|
|
}
|
|
|
|
return response()->json(['message' => __('auth.forms.password_successfully_changed')]);
|
|
}
|
|
}
|