256 lines
10 KiB
PHP
256 lines
10 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Mail\PasswordReset;
|
|
use App\Mail\VerifyEmail;
|
|
use App\Models\Settings;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Auth;
|
|
use Illuminate\Support\Str;
|
|
use App\User;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Illuminate\Support\Facades\Mail;
|
|
|
|
class LoginController extends Controller
|
|
{
|
|
|
|
private $apiCrm;
|
|
|
|
public function __construct()
|
|
{
|
|
$this->middleware('guest')->except('logout');
|
|
$this->apiCrm = new \LDCCRM\ApiV1(config('crm.endpoint'), config('crm.token'));
|
|
}
|
|
|
|
public function index()
|
|
{
|
|
return view('front.basic.login');
|
|
}
|
|
|
|
public function authenticate(Request $request)
|
|
{
|
|
$request->validate([
|
|
'email' => 'required|email',
|
|
'password' => 'required',
|
|
]);
|
|
|
|
$email = filter_var($request->email, FILTER_SANITIZE_EMAIL);
|
|
$password = $request->password;
|
|
$remember = $request->remember !== null ? true : false;
|
|
|
|
$userLocal = User::where('email', $email)->first();
|
|
|
|
if ($userLocal) {
|
|
if ($userLocal->email_verified === 1) {
|
|
if ($userLocal->role > 2) {
|
|
$connect = $this->apiCrm->loginCustomer($email, $password);
|
|
|
|
if ($connect->status === 'KO') {
|
|
if ($connect->code === 500) {
|
|
return back()->withInput($request->except("password"))->withErrors("La connexion est impossible pour le moment, veuillez réessayer plus tard.");
|
|
} else {
|
|
return back()->withInput($request->except("password"))->withErrors("Email ou mot de passe incorrect.");
|
|
}
|
|
}
|
|
}
|
|
} else {
|
|
$userLocal->email_verify_token = Str::uuid();
|
|
$userLocal->save();
|
|
Mail::to($email)->send(new VerifyEmail($userLocal));
|
|
return back()->withInput($request->except("password"))->withErrors("Votre compte existe mais votre email n'est pas confirmé, merci de vérifier vos emails.");
|
|
}
|
|
} else {
|
|
$connect = $this->apiCrm->loginCustomer($email, $password);
|
|
|
|
if ($connect->status === 'OK') {
|
|
$userLocal = User::create([
|
|
'crm_id' => $connect->user->crm_id,
|
|
'firstname' => $connect->user->firstname,
|
|
'lastname' => $connect->user->lastname,
|
|
'birth_date' => $connect->user->birth_date,
|
|
'email' => $email,
|
|
'password' => Hash::make("MOTDEPASSE"), // TODO : ???
|
|
'address' => $connect->user->address,
|
|
'address2' => $connect->user->address2,
|
|
'town' => $connect->user->city,
|
|
'postal_code' => $connect->user->postcode,
|
|
'country' => $connect->user->country,
|
|
'email_verified' => 1
|
|
]);
|
|
} else {
|
|
if ($connect->code === 116) { // Compte existant mais non activé
|
|
$userLocal = User::create([
|
|
'crm_id' => $connect->user->crm_id,
|
|
'firstname' => $connect->user->firstname,
|
|
'lastname' => $connect->user->lastname,
|
|
'birth_date' => $connect->user->birth_date,
|
|
'email' => $email,
|
|
'password' => Hash::make("MOTDEPASSE"), // TODO : ???
|
|
'address' => $connect->user->address,
|
|
'address2' => $connect->user->address2,
|
|
'town' => $connect->user->city,
|
|
'postal_code' => $connect->user->postcode,
|
|
'country' => $connect->user->country
|
|
]);
|
|
|
|
$userLocal->email_verify_token = Str::uuid();
|
|
$userLocal->save();
|
|
Mail::to($email)->send(new VerifyEmail($userLocal));
|
|
return back()->withInput($request->except("password"))->withErrors("Votre compte existe mais votre email n'est pas confirmé, merci de vérifier vos emails.");
|
|
} elseif ($connect->code === 500) {
|
|
return back()->withInput($request->except("password"))->withErrors("La connexion est impossible pour le moment, veuillez réessayer plus tard.");
|
|
} else {
|
|
return back()->withInput($request->except("password"))->withErrors("Email ou mot de passe incorrect.");
|
|
}
|
|
}
|
|
}
|
|
|
|
// TODO : Modifier avec separation guard
|
|
$tmpPwd = "MOTDEPASSE";
|
|
if ($userLocal->role <= 2) {
|
|
$tmpPwd = $password;
|
|
}
|
|
|
|
if (Auth::attempt(["email" => $email, "password" => $tmpPwd], $remember)) {
|
|
if ($userLocal->role <= 2) {
|
|
return redirect()->route('bo.dashboard');
|
|
}
|
|
return redirect()->route('saisir-code');
|
|
} else {
|
|
return back()->withInput($request->except('password'))->withErrors('Les identifiants entrés sont incorrects.');
|
|
}
|
|
}
|
|
|
|
public function logout()
|
|
{
|
|
Auth::logout();
|
|
return redirect()->route('home');
|
|
}
|
|
|
|
public function confirmEmail($verifyToken)
|
|
{
|
|
$result = false;
|
|
$user = User::where('email_verify_token', $verifyToken)->first();
|
|
if (!$user) {
|
|
return view('front.basic.confirm-email', compact('result'));
|
|
}
|
|
|
|
$activation = $this->apiCrm->activateCustomer($user->crm_id);
|
|
|
|
if ($activation->status === 'OK') {
|
|
$user->email_verified = 1;
|
|
$user->email_verify_token = null;
|
|
$user->save();
|
|
$result = true;
|
|
} else {
|
|
if ($activation->code === 110) { // User already active
|
|
$user->email_verified = 1;
|
|
$user->email_verify_token = null;
|
|
$user->save();
|
|
$result = true;
|
|
}
|
|
}
|
|
|
|
return view('front.basic.confirm-email', compact('result'));
|
|
}
|
|
|
|
public function forgotPassword(Request $request)
|
|
{
|
|
if ($request->tokenValid && $request->token) {
|
|
$tokenValid = $request->tokenValid;
|
|
$token = $request->token;
|
|
return view('front.basic.forgot-password', compact('tokenValid', 'token'));
|
|
}
|
|
return view('front.basic.forgot-password');
|
|
}
|
|
|
|
public function forgotPasswordReset(Request $request, $token)
|
|
{
|
|
if (!$request->hasValidSignature(false)) {
|
|
return redirect()->route('login')->withErrors("Le lien de changement de votre mot de passe n'est plus valide, veuillez réessayer.");
|
|
}
|
|
$tokenValid = false;
|
|
$user = User::where('password_token', $token)->first();
|
|
if (!$user) {
|
|
return redirect()->route('forgot-password', compact('tokenValid'))->withErrors('Le lien de changement du mot de passe est incorrect.');
|
|
}
|
|
$tokenValid = true;
|
|
return redirect()->route('forgot-password', compact('tokenValid', 'token'));
|
|
}
|
|
|
|
public function mailPassword(Request $request)
|
|
{
|
|
$email = filter_var($request->email, FILTER_SANITIZE_STRING);
|
|
$user = User::where('email', $email)->first();
|
|
|
|
if (!$user) {
|
|
$userCrm = $this->apiCrm->getCustomerByEmail($email);
|
|
if ($userCrm->status === 'OK') {
|
|
$user = User::create([
|
|
'crm_id' => $userCrm->user->crm_id,
|
|
'firstname' => $userCrm->user->firstname,
|
|
'lastname' => $userCrm->user->lastname,
|
|
'birth_date' => $userCrm->user->birth_date,
|
|
'email' => $email,
|
|
'password' => Hash::make("MOTDEPASSE"), // TODO : ???
|
|
'address' => $userCrm->user->address,
|
|
'address2' => $userCrm->user->address2,
|
|
'town' => $userCrm->user->city,
|
|
'postal_code' => $userCrm->user->postcode,
|
|
'country' => $userCrm->user->country,
|
|
'email_verified' => 1
|
|
]);
|
|
|
|
if ($userCrm->user->status === 0) {
|
|
$user->email_verified = 0;
|
|
$user->email_verify_token = Str::uuid();
|
|
$user->save();
|
|
Mail::to($email)->send(new VerifyEmail($user));
|
|
return back()->withInput($request->except("password"))->withErrors("Votre compte existe mais votre email n'est pas confirmé, merci de vérifier vos emails.");
|
|
}
|
|
} else {
|
|
if ($userCrm->code === 101) {
|
|
return back()->withInput($request->only('email'))->withErrors("Le mail que vous avez entré n'est pas enregistré dans nos services.");
|
|
} else {
|
|
return back()->withErrors("Une erreur est survenue, veuillez réessayer plus tard.");
|
|
}
|
|
}
|
|
}
|
|
|
|
$user->password_token = Str::uuid();
|
|
$user->save();
|
|
$settings = Settings::find(1);
|
|
Mail::to($email)->send(new PasswordReset($user, $settings));
|
|
return redirect()->route('login')->with('success', 'Un mail de réinitialisation de votre mot de passe vous a été envoyé(e).');
|
|
}
|
|
|
|
public function changePassword(Request $request)
|
|
{
|
|
$request->validate([
|
|
'password' => 'required|min:8|confirmed',
|
|
]);
|
|
|
|
$user = User::where('password_token', filter_var($request->token, FILTER_SANITIZE_STRING))->first();
|
|
if (!$user) {
|
|
return back()->withErrors('Le lien de changement de votre mot de passe est incorrect, veuillez réessayer.');
|
|
}
|
|
|
|
// TODO : Ajouter controle du contenu du mot de passe
|
|
$newPassword = $request->password;
|
|
|
|
$update = $this->apiCrm->changePwdCustomer($user->crm_id, $newPassword);
|
|
|
|
if ($update->status === 'OK') {
|
|
$user->password_token = null;
|
|
$user->save();
|
|
return redirect()->route('login')->with('success', 'Vous pouvez désormais vous connecter avec votre nouveau mot de passe.');
|
|
} else {
|
|
if ($update->code === 123) {
|
|
return back()->withErrors("Il semblerait que vous ayez déjà utilisé ce mot de passe pour votre compte. Veuillez réessayer en changeant de mot de passe.");
|
|
} else {
|
|
return back()->withErrors("Une erreur est survenue, veuillez réessayer plus tard.");
|
|
}
|
|
}
|
|
}
|
|
}
|