ldc-jeusselin/app/Http/Controllers/Auth/LoginController.php

<?php

namespace App\Http\Controllers\Auth;

use App\Http\Controllers\Controller;
use App\Mail\VerifyEmail;
use App\Mail\PasswordReset;
use App\Models\User;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Foundation\Auth\AuthenticatesUsers;
use Illuminate\Support\Facades\Mail;
use Illuminate\Support\Str;
use Illuminate\Support\Facades\Hash;

class LoginController extends Controller
{
    /*
    |--------------------------------------------------------------------------
    | Login Controller
    |--------------------------------------------------------------------------
    |
    | This controller handles authenticating users for the application and
    | redirecting them to your home screen. The controller uses a trait
    | to conveniently provide its functionality to your applications.
    |
    */
    use AuthenticatesUsers;

    private $apiCrm;

    /**
     * Where to redirect users after login.
     *
     * @var string
     */
    public function redirectTo() {
        $role = Auth::user()->role;
        switch ($role) {
            case '1':
            case '2':
                return '/bo';
            case '3':
                return '/pro';
            default:
                return '/home';
        }
      }

    /**
     * Create a new controller instance.
     *
     * @return void
     */
    public function __construct()
    {
        $this->middleware('guest')->except('logout');
        $this->apiCrm = new \LDCCRM\ApiV1(config('crm.endpoint'), config('crm.token'));
    }

    public function authenticate(Request $request)
    {
        $request->validate([
            'email' => 'required|email',
            'password' => 'required',
        ]);

        $email     = filter_var($request->email, FILTER_SANITIZE_EMAIL);
        $password  = $request->password;
        $remember  = $request->remember !== null ? true : false;
        $userLocal = User::where('email', $email)->first();

        if ($userLocal) {
            if ($userLocal->email_verified === 1) {
                if ($userLocal->role !== 1 && $userLocal->role !== 2) {
                    $connect = $this->apiCrm->loginCustomer($email, $password);

                    if ($connect->status === 'OK') {
                        /** @var \Illuminate\Auth\SessionGuard */
                        $guard = Auth::guard('web');
                        $guard->login($userLocal, $remember);
                        $url = $this->redirectTo();
                        return redirect()->to($url);
                    } else {
                        if ($connect->code === 500) {
                            return back()->withInput($request->except("password"))
                                ->withErrors("La connexion est impossible pour le moment, veuillez réessayer plus tard.");
                        } else {
                            return back()->withInput($request->except("password"))
                                ->withErrors("Email ou mot de passe incorrect.");
                        }
                    }
                }
            } else {
                $userLocal->email_verify_token = Str::uuid();
                $userLocal->save();
                Mail::to($email)->send(new VerifyEmail($userLocal));
                return back()->withInput($request->except("password"))
                    ->withErrors("Votre compte existe mais votre email n'est pas confirmé, merci de vérifier vos emails.");
            }
        } else {
            //création d'un compte local car il existe en crm
            $connect = $this->apiCrm->loginCustomer($email, $password);

            if ($connect->status === 'OK') {

                $userLocal = User::create([
                    'crm_id' => $connect->user->crm_id,
                    'firstname' => $connect->user->firstname,
                    'lastname' => $connect->user->lastname,
                    'birth_date' => $connect->user->birth_date,
                    'email' => $email,
                    'password' => Hash::make("MOTDEPASSE"), // Quelle infamie!!!
                    'address' => $connect->user->address,
                    'address2' => $connect->user->address2,
                    'town' => $connect->user->city,
                    'postal_code' => $connect->user->postcode,
                    'country' => $connect->user->country,
                    'email_verified' => 1
                ]);
            } else {

                if ($connect->code === 116) { // Compte existant mais non activé
                    $userLocal = User::create([
                        'crm_id' => $connect->user->crm_id,
                        'firstname' => $connect->user->firstname,
                        'lastname' => $connect->user->lastname,
                        'birth_date' => $connect->user->birth_date,
                        'email' => $email,
                        'password' => Hash::make("MOTDEPASSE"), // Quelle infamie!!!
                        'address' => $connect->user->address,
                        'address2' => $connect->user->address2,
                        'town' => $connect->user->city,
                        'postal_code' => $connect->user->postcode,
                        'country' => $connect->user->country
                    ]);

                    $userLocal->email_verify_token = Str::uuid();
                    $userLocal->save();
                    Mail::to($email)->send(new VerifyEmail($userLocal));
                    return back()->withInput($request->except("password"))
                        ->withErrors("Votre compte existe mais votre email n'est pas confirmé, merci de vérifier vos emails.");
                } elseif ($connect->code === 500) {
                    return back()->withInput($request->except("password"))
                        ->withErrors("La connexion est impossible pour le moment, veuillez réessayer plus tard.");
                } else {
                    return back()->withInput($request->except("password"))
                        ->withErrors("Email ou mot de passe incorrect.");
                }
            }
        }

        if ($userLocal->role === 1 || $userLocal->role === 2) {
            if (Auth::attempt(["email" => $email, "password" => $password], $remember)) {
                return redirect()->route('bo.dashboard');
            } else {
                return back()->withInput($request->except('password'))->withErrors('Les identifiants entrés sont incorrects.');
            }
        }
    }


    public function confirmEmail($verifyToken)
    {
        $result = false;
        $user = User::where('email_verify_token', $verifyToken)->first();
        if (!$user) {
            return view('front.confirm-email', compact('result'));
        }

        $activation = $this->apiCrm->activateCustomer($user->crm_id);

        if ($activation->status === 'OK') {
            $user->email_verified     = 1;
            $user->email_verify_token = null;
            $user->save();
            $result = true;
        } else {
            if ($activation->code === 110) { // User already active
                $user->email_verified     = 1;
                $user->email_verify_token = null;
                $user->save();
                $result = true;
            }
        }

        return view('front.confirm-email', compact('result'));
    }

    public function forgotPassword(Request $request)
    {
        if ($request->tokenValid && $request->token) {
            $tokenValid = $request->tokenValid;
            $token = $request->token;
            return view('front.forgot-password', compact('tokenValid', 'token'));
        }
        return view('front.forgot-password');
    }

    public function forgotPasswordReset(Request $request, $token)
    {
        if (!$request->hasValidSignature(false)) {
            return redirect()->route('login')->withErrors("Le lien de changement de votre mot de passe n'est plus valide, veuillez réessayer.");
        }
        $tokenValid = false;
        $user = User::where('password_token', $token)->first();
        if (!$user) {
            return redirect()->route('forgot-password', compact('tokenValid'))->withErrors('Le lien de changement du mot de passe est incorrect.');
        }
        $tokenValid = true;
        return redirect()->route('forgot-password', compact('tokenValid', 'token'));
    }


    public function mailPassword(Request $request)
    {
        $email = filter_var($request->email, FILTER_SANITIZE_STRING);
        $user = User::where('email', $email)->first();

        if (!$user) {
            $userCrm = $this->apiCrm->getCustomerByEmail($email);
            if ($userCrm->status === 'OK') {
                $user = User::create([
                    'crm_id' => $userCrm->user->crm_id,
                    'firstname' => $userCrm->user->firstname,
                    'lastname' => $userCrm->user->lastname,
                    'birth_date' => $userCrm->user->birth_date,
                    'email' => $email,
                    'password' => Hash::make("MOTDEPASSE"), // TODO : ???
                    'address' => $userCrm->user->address,
                    'address2' => $userCrm->user->address2,
                    'town' => $userCrm->user->city,
                    'postal_code' => $userCrm->user->postcode,
                    'country' => $userCrm->user->country,
                    'email_verified' => 1
                ]);

                if ($userCrm->user->status === 0){
                    $user->email_verified = 0;
                    $user->email_verify_token = Str::uuid();
                    $user->save();
                    Mail::to($email)->send(new VerifyEmail($user));
                    return back()->withInput($request->except( "password"))->withErrors("Votre compte existe mais votre email n'est pas confirmé, merci de vérifier vos emails.");
                }

            }else{
                if ($userCrm->code === 101) {
                    return back()->withInput($request->only('email'))->withErrors("Le mail que vous avez entré n'est pas enregistré dans nos services.");
                }else{
                    return back()->withErrors("Une erreur est survenue, veuillez réessayer plus tard.");
                }
            }
        }

        $user->password_token = Str::uuid();
        $user->save();
        Mail::to($email)->send(new PasswordReset($user));
        return redirect()->route('login')->with('success', 'Un mail de réinitialisation de votre mot de passe vous a été envoyé(e).');
    }

    public function changePassword(Request $request) {
        $request->validate([
            'password' => 'required|min:8|confirmed',
        ]);

        $user = User::where('password_token', filter_var($request->token, FILTER_SANITIZE_STRING))->first();
        if (!$user)
            return back()->withErrors('Le lien de changement de votre mot de passe est incorrect, veuillez réessayer.');

        // TODO : Ajouter controle du contenu du mot de passe
        $newPassword = $request->password;

        $update = $this->apiCrm->changePwdCustomer($user->crm_id, $newPassword);

        if ($update->status === 'OK'){
            return redirect()->route('login')->with('success', 'Vous pouvez désormais vous connecter avec votre nouveau mot de passe.');
        }else{
            return back()->withErrors("Une erreur est survenue, veuillez réessayer plus tard.");
        }
    }
}