This removes api authentification with token in favor of signature method. Refactorize code and clean up. It add more unit test plus code coverage in test/converage. - Added config.api.timestampTimeout - Added Helper::signRequest This calculates the request signature - Added more unit tests and extend code coverage. - Added rate limiter for web routes - Added RemoveSpaces Sanitizer on api requests - Added stress test suite - Changed AuthServiceProvider api-token to api-hmac - Changed CustomerSeeder to have at least of customer activated (for unit tests) - Changed used transation for saveing multiple models - Changed, in ServiceController generateApiToken to generateServicePassword - Changed, timestamp has to be send in request with a DateTime format, it also has to a UTC value - Composer added brianium/paratest - Composer update - Fixed case where removing single optin could be the wrong one (not for the good service) - Fixed customer delete - Fixed customer would not be resolved by brand. - Fixed Really check that request is json checking body content, preventing sending malformed requests - Remove ApiError::needAuth - Removed api_token - Removed ApiController::authenticate - Removed config.api.tokenTimeout - Removed Header check or usage because of HAProxy doing weird stuff - Removed lock files from gitignore - Removed memcached dependency - Removed unused questions resources api routes - Removed workspace file Migrations - Added unique index on services.bearer_token - Changed customer_id on customer_answer is nullable - Changed services.bearer_pwd length to 312 (the size of the token) - Dropped services.api_token and service.api_token_date
90 lines
3.5 KiB
PHP
90 lines
3.5 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Requests\Api\V2;
|
|
|
|
use App\Enums\Country;
|
|
use Illuminate\Validation\Rules\Password;
|
|
use Kwaadpepper\Enum\Rules\EnumIsValidRule;
|
|
|
|
class UpdateCustomerRequest extends BaseApiRequest
|
|
{
|
|
/**
|
|
* Get the validation rules that apply to the request.
|
|
*
|
|
* @return array
|
|
*/
|
|
public function rules(): array
|
|
{
|
|
$fields = [
|
|
'firstname', 'lastname', 'email', 'password',
|
|
'birth_date', 'address', 'phone', 'country',
|
|
'city', 'postcode', 'opt_in'
|
|
];
|
|
$atLeast = function ($attribute) use ($fields) {
|
|
return 'required_without_all:' . collect($fields)
|
|
->filter(function ($fieldName) use ($attribute) {
|
|
return $fieldName !== $attribute;
|
|
})->implode(',');
|
|
};
|
|
return [
|
|
'firstname' => [$atLeast('firstname'), 'string', 'min:1', 'max:255'],
|
|
'lastname' => [$atLeast('lastname'), 'string', 'min:1', 'max:255'],
|
|
'email' => [$atLeast('email'), 'email:rfc,dns,spoof,filter', 'max:255'],
|
|
'password' => [
|
|
$atLeast('password'), 'max:255', Password::min(8)
|
|
->mixedCase()
|
|
->letters()
|
|
->numbers()
|
|
->symbols()
|
|
->uncompromised()
|
|
],
|
|
'birth_date' => [$atLeast('birth_date'), 'date_format:Y-m-d', 'max:255'],
|
|
'address' => [$atLeast('address'), 'required_with:address2', 'string', 'max:255'],
|
|
'address2' => ['sometimes', 'string', 'max:255'],
|
|
'phone' => [$atLeast('phone'), 'string', 'phone:FR,BE,LU', 'max:255'],
|
|
'country' => [
|
|
$atLeast('country'),
|
|
'numeric',
|
|
new EnumIsValidRule(Country::class),
|
|
sprintf(
|
|
'in:%s',
|
|
implode(',', [
|
|
Country::belgium()->value,
|
|
Country::luxembourg()->value,
|
|
Country::france()->value,
|
|
// * DROM COM.
|
|
Country::guadeloupe()->value,
|
|
Country::martinique()->value,
|
|
Country::frenchGuiana()->value,
|
|
Country::reunion()->value,
|
|
Country::saintPierreAndMiquelon()->value,
|
|
Country::mayotte()->value,
|
|
Country::saintBarthelemy()->value,
|
|
Country::saintMartinFrenchPart()->value,
|
|
Country::wallisAndFutuna()->value,
|
|
Country::frenchPolynesia()->value,
|
|
Country::newCaledonia()->value
|
|
])
|
|
)
|
|
],
|
|
'city' => [$atLeast('city'), 'string', 'min:2', 'max:255'],
|
|
'postcode' => [$atLeast('postcode'), 'string', 'postal_code:FR,BE,LU', 'max:255'],
|
|
'opt_in' => [$atLeast('opt_in'), 'boolean'],
|
|
];
|
|
}
|
|
|
|
/**
|
|
* Messages
|
|
*
|
|
* @return array
|
|
*/
|
|
public function messages()
|
|
{
|
|
return [
|
|
// phpcs:ignore Generic.Files.LineLength.TooLong
|
|
'phone.phone' => trans('Le champ :attribute est invalide, il accepte les numéros des pays suivants France, Belgique, Luxembourg.'),
|
|
// phpcs:ignore Generic.Files.LineLength.TooLong
|
|
'country.in' => trans('Le champ :attribute est invalide, il accepte les pays suivants France, Belgique, Luxembourg.')
|
|
];
|
|
}
|
|
}
|