mirror of https://github.com/Bubka/2FAuth.git
91 lines
3.0 KiB
PHP
91 lines
3.0 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Auth;
|
|
|
|
use App\Api\v1\Resources\UserResource;
|
|
use App\Http\Controllers\Controller;
|
|
use App\Http\Requests\UserDeleteRequest;
|
|
use App\Http\Requests\UserUpdateRequest;
|
|
use Illuminate\Support\Facades\Artisan;
|
|
use Illuminate\Support\Facades\Auth;
|
|
use Illuminate\Support\Facades\DB;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Illuminate\Support\Facades\Log;
|
|
|
|
class UserController extends Controller
|
|
{
|
|
/**
|
|
* Update the user's profile information.
|
|
*
|
|
* @param \App\Http\Requests\UserUpdateRequest $request
|
|
* @return \App\Api\v1\Resources\UserResource|\Illuminate\Http\JsonResponse
|
|
*/
|
|
public function update(UserUpdateRequest $request)
|
|
{
|
|
$user = $request->user();
|
|
$validated = $request->validated();
|
|
|
|
if (! Hash::check($request->password, Auth::user()->password)) {
|
|
Log::notice('Account update failed: wrong password provided');
|
|
|
|
return response()->json(['message' => __('errors.wrong_current_password')], 400);
|
|
}
|
|
|
|
if (! config('2fauth.config.isDemoApp')) {
|
|
$user->update([
|
|
'name' => $validated['name'],
|
|
'email' => $validated['email'],
|
|
]);
|
|
}
|
|
Log::info('User account updated');
|
|
|
|
return new UserResource($user);
|
|
}
|
|
|
|
/**
|
|
* Delete the user's account.
|
|
*
|
|
* @param \App\Http\Requests\UserDeleteRequest $request
|
|
* @return \Illuminate\Http\JsonResponse
|
|
*/
|
|
public function delete(UserDeleteRequest $request)
|
|
{
|
|
Log::info('User deletion requested');
|
|
$validated = $request->validated();
|
|
|
|
if (! Hash::check($validated['password'], Auth::user()->password)) {
|
|
return response()->json(['message' => __('errors.wrong_current_password')], 400);
|
|
}
|
|
|
|
try {
|
|
DB::transaction(function () {
|
|
DB::table('twofaccounts')->delete();
|
|
DB::table('groups')->delete();
|
|
DB::table('options')->delete();
|
|
DB::table('webauthn_credentials')->delete();
|
|
DB::table('webauthn_recoveries')->delete();
|
|
DB::table('oauth_access_tokens')->delete();
|
|
DB::table('oauth_auth_codes')->delete();
|
|
DB::table('oauth_clients')->delete();
|
|
DB::table('oauth_personal_access_clients')->delete();
|
|
DB::table('oauth_refresh_tokens')->delete();
|
|
DB::table('password_resets')->delete();
|
|
DB::table('users')->delete();
|
|
});
|
|
|
|
Artisan::call('passport:install --force');
|
|
Artisan::call('config:clear');
|
|
}
|
|
// @codeCoverageIgnoreStart
|
|
catch (\Throwable $e) {
|
|
Log::error('User deletion failed');
|
|
|
|
return response()->json(['message' => __('errors.user_deletion_failed')], 400);
|
|
}
|
|
// @codeCoverageIgnoreEnd
|
|
Log::info('User deleted');
|
|
|
|
return response()->json(null, 204);
|
|
}
|
|
}
|