ldc-gen-game-web/app/Http/Controllers/LoginController.php

<?php

namespace App\Http\Controllers;

use App\Mail\PasswordReset;
use App\Mail\VerifyEmail;
use App\Models\Settings;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Str;
use App\User;
use Exception;
use Illuminate\Support\Facades\Hash;
use Illuminate\Support\Facades\Mail;

class LoginController extends Controller
{

    private $apiCrm;

    public function __construct() {
        $this->middleware('guest')->except('logout');
        $this->apiCrm = new \LDCCRM\ApiV1(config('crm.endpoint'), config('crm.token'));
    }

    public function index() {
        return view('front.basic.login');
    }

    public function authenticate(Request $request)
    {
        $request->validate([
            'email' => 'required|email',
            'password' => 'required',
        ]);

        $email = filter_var($request->email, FILTER_SANITIZE_EMAIL);
        $password = $request->password;
        $remember = $request->remember !== null ? true : false;

        $userLocal = User::where('email', $email)->first();

        if ($userLocal) {
            if ($userLocal->email_verified === 1) {
                if ($userLocal->role > 2) {

                    $connect = $this->apiCrm->loginCustomer($email, $password);

                    if ($connect->status === 'KO'){
                        if ($connect->code === 500) {
                            return back()->withInput($request->except("password"))->withErrors("La connexion est impossible pour le moment, veuillez réessayer plus tard.");
                        }else{
                            return back()->withInput($request->except("password"))->withErrors("Email ou mot de passe incorrect.");
                        }
                    }
                }
            } else {
                $userLocal->email_verify_token = Str::uuid();
                $userLocal->save();
                Mail::to($email)->send(new VerifyEmail($userLocal));
                return back()->withInput($request->except( "password"))->withErrors("Votre compte existe mais votre email n'est pas confirmé, merci de vérifier vos emails.");
            }
        } else {

            $connect = $this->apiCrm->loginCustomer($email, $password);

            if ($connect->status === 'OK'){

                $userLocal = User::create([
                    'crm_id' => $connect->user->crm_id,
                    'firstname' => $connect->user->firstname,
                    'lastname' => $connect->user->lastname,
                    'birth_date' => $connect->user->birth_date,
                    'email' => $email,
                    'password' => Hash::make("MOTDEPASSE"), // TODO : ???
                    'address' => $connect->user->address,
                    'address2' => $connect->user->address2,
                    'town' => $connect->user->city,
                    'postal_code' => $connect->user->postcode,
                    'country' => $connect->user->country,
                    'email_verified' => 1
                ]);

            }else{

                if ($connect->code === 116) { // Compte existant mais non activé

                    $userLocal = User::create([
                        'crm_id' => $connect->user->crm_id,
                        'firstname' => $connect->user->firstname,
                        'lastname' => $connect->user->lastname,
                        'birth_date' => $connect->user->birth_date,
                        'email' => $email,
                        'password' => Hash::make("MOTDEPASSE"), // TODO : ???
                        'address' => $connect->user->address,
                        'address2' => $connect->user->address2,
                        'town' => $connect->user->city,
                        'postal_code' => $connect->user->postcode,
                        'country' => $connect->user->country
                    ]);

                    $userLocal->email_verify_token = Str::uuid();
                    $userLocal->save();
                    Mail::to($email)->send(new VerifyEmail($userLocal));
                    return back()->withInput($request->except( "password"))->withErrors("Votre compte existe mais votre email n'est pas confirmé, merci de vérifier vos emails.");

                }elseif ($connect->code === 500){
                    return back()->withInput($request->except("password"))->withErrors("La connexion est impossible pour le moment, veuillez réessayer plus tard.");
                }else{
                    return back()->withInput($request->except("password"))->withErrors("Email ou mot de passe incorrect.");
                }
            }
        }

        // TODO : Modifier avec separation guard
        $tmpPwd = "MOTDEPASSE";
        if ($userLocal->role <= 2)
            $tmpPwd = $password;

        if (Auth::attempt(["email" => $email, "password" => $tmpPwd], $remember)) {
            if ($userLocal->role <= 2)
                return redirect()->route('bo.dashboard');
            return redirect()->route('saisir-code');
        } else {
            return back()->withInput($request->except('password'))->withErrors('Les identifiants entrés sont incorrects.');
        }


    }

    public function logout() {
        Auth::logout();
        return redirect()->route('home');
    }

    public function confirmEmail($verifyToken) {
        $result = false;
        $user = User::where('email_verify_token', $verifyToken)->first();
        if (!$user)
            return view('front.basic.confirm-email', compact('result'));

        $activation = $this->apiCrm->activateCustomer($user->crm_id);

        if ($activation->status === 'OK'){
            $user->email_verified = 1;
            $user->email_verify_token = NULL;
            $user->save();
            $result = true;
        }else{
            if ($activation->code === 110){ // User already active
                $user->email_verified = 1;
                $user->email_verify_token = NULL;
                $user->save();
                $result = true;
            }
        }

        return view('front.basic.confirm-email', compact('result'));
    }

    public function forgotPassword(Request $request) {
        if ($request->tokenValid && $request->token) {
            $tokenValid = $request->tokenValid;
            $token = $request->token;
            return view('front.basic.forgot-password', compact('tokenValid', 'token'));
        }
        return view('front.basic.forgot-password');
    }

    public function forgotPasswordReset(Request $request, $token) {
        if (!$request->hasValidSignature(false))
            return redirect()->route('login')->withErrors("Le lien de changement de votre mot de passe n'est plus valide, veuillez réessayer.");
        $tokenValid = false;
        $user = User::where('password_token', $token)->first();
        if (!$user)
            return redirect()->route('forgot-password', compact('tokenValid'))->withErrors('Le lien de changement du mot de passe est incorrect.');
        $tokenValid = true;
        return redirect()->route('forgot-password', compact('tokenValid', 'token'));
    }

    public function mailPassword(Request $request) {
        $email = filter_var($request->email, FILTER_SANITIZE_STRING);
        $user = User::where('email', $email)->first();

        if (!$user) {
            $userCrm = $this->apiCrm->getCustomerByEmail($email);
            if ($userCrm->status === 'OK'){
                $user = User::create([
                    'crm_id' => $userCrm->user->crm_id,
                    'firstname' => $userCrm->user->firstname,
                    'lastname' => $userCrm->user->lastname,
                    'birth_date' => $userCrm->user->birth_date,
                    'email' => $email,
                    'password' => Hash::make("MOTDEPASSE"), // TODO : ???
                    'address' => $userCrm->user->address,
                    'address2' => $userCrm->user->address2,
                    'town' => $userCrm->user->city,
                    'postal_code' => $userCrm->user->postcode,
                    'country' => $userCrm->user->country,
                    'email_verified' => 1
                ]);

                if ($userCrm->user->status === 0){
                    $user->email_verified = 0;
                    $user->email_verify_token = Str::uuid();
                    $user->save();
                    Mail::to($email)->send(new VerifyEmail($user));
                    return back()->withInput($request->except( "password"))->withErrors("Votre compte existe mais votre email n'est pas confirmé, merci de vérifier vos emails.");
                }

            }else{
                if ($userCrm->code === 101) {
                    return back()->withInput($request->only('email'))->withErrors("Le mail que vous avez entré n'est pas enregistré dans nos services.");
                }else{
                    return back()->withErrors("Une erreur est survenue, veuillez réessayer plus tard.");
                }
            }
        }

        $user->password_token = Str::uuid();
        $user->save();
        $settings = Settings::find(1);
        Mail::to($email)->send(new PasswordReset($user, $settings));
        return redirect()->route('login')->with('success', 'Un mail de réinitialisation de votre mot de passe vous a été envoyé(e).');
    }

    public function changePassword(Request $request) {
        $request->validate([
            'password' => 'required|min:8|confirmed',
        ]);

        $user = User::where('password_token', filter_var($request->token, FILTER_SANITIZE_STRING))->first();
        if (!$user)
            return back()->withErrors('Le lien de changement de votre mot de passe est incorrect, veuillez réessayer.');

        // TODO : Ajouter controle du contenu du mot de passe
        $newPassword = $request->password;

        $update = $this->apiCrm->changePwdCustomer($user->crm_id, $newPassword);

        if ($update->status === 'OK'){
            $user->password_token = NULL;
            $user->save();
            return redirect()->route('login')->with('success', 'Vous pouvez désormais vous connecter avec votre nouveau mot de passe.');
        }else{
            if ($update->code === 123){
                return back()->withErrors("Il semblerait que vous ayez déjà utilisé ce mot de passe pour votre compte. Veuillez réessayer en changeant de mot de passe.");
            }else{
                return back()->withErrors("Une erreur est survenue, veuillez réessayer plus tard.");
            }
        }
    }
}