94 lines
2.9 KiB
PHP
94 lines
2.9 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Auth;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\DB;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Illuminate\Support\Facades\Validator;
|
|
use App\Models\User;
|
|
use Carbon\Carbon;
|
|
|
|
class PasswordResetWithCodeController extends Controller
|
|
{
|
|
public function resetWithCode(Request $request)
|
|
{
|
|
$data = $request->only(['email','token','password','password_confirmation']);
|
|
|
|
$validator = Validator::make($data, [
|
|
'email' => 'required|email',
|
|
'token' => 'required|digits:6',
|
|
'password' => 'required|string|min:8|confirmed',
|
|
]);
|
|
|
|
if ($validator->fails()) {
|
|
return back()->withErrors($validator)->withInput();
|
|
}
|
|
|
|
$email = $data['email'];
|
|
$code = $data['token'];
|
|
|
|
$expiryMinutes = config('auth.passwords.users.expire', 60);
|
|
$cutoff = Carbon::now()->subMinutes($expiryMinutes);
|
|
|
|
$row = DB::table('password_reset_codes')
|
|
->where('email', $email)
|
|
->where('code', $code)
|
|
->where('created_at', '>=', $cutoff)
|
|
->first();
|
|
|
|
if (! $row) {
|
|
return back()->withErrors(['token' => 'Token tidak valid atau sudah kadaluarsa.'])->withInput();
|
|
}
|
|
|
|
$user = User::where('email', $email)->first();
|
|
if (! $user) {
|
|
return back()->withErrors(['email' => 'Akun dengan email ini tidak ditemukan.'])->withInput();
|
|
}
|
|
|
|
$user->password = Hash::make($data['password']);
|
|
$user->save();
|
|
|
|
// remove used codes
|
|
DB::table('password_reset_codes')->where('email', $email)->delete();
|
|
|
|
return redirect()->route('login')->with('status', 'Password berhasil diubah. Silakan login dengan password baru.');
|
|
}
|
|
|
|
/**
|
|
* Verify code for an email without changing password (used for two-step flow)
|
|
*/
|
|
public function verifyCode(Request $request)
|
|
{
|
|
$data = $request->only(['email','token']);
|
|
|
|
$validator = \Illuminate\Support\Facades\Validator::make($data, [
|
|
'email' => 'required|email',
|
|
'token' => 'required|digits:6',
|
|
]);
|
|
|
|
if ($validator->fails()) {
|
|
return response()->json(['ok' => false, 'errors' => $validator->errors()->all()], 422);
|
|
}
|
|
|
|
$email = $data['email'];
|
|
$code = $data['token'];
|
|
|
|
$expiryMinutes = config('auth.passwords.users.expire', 60);
|
|
$cutoff = Carbon::now()->subMinutes($expiryMinutes);
|
|
|
|
$row = DB::table('password_reset_codes')
|
|
->where('email', $email)
|
|
->where('code', $code)
|
|
->where('created_at', '>=', $cutoff)
|
|
->first();
|
|
|
|
if (! $row) {
|
|
return response()->json(['ok' => false, 'message' => 'Token tidak valid atau sudah kadaluarsa.'], 404);
|
|
}
|
|
|
|
return response()->json(['ok' => true, 'message' => 'Token valid. Silakan masukkan password baru.']);
|
|
}
|
|
}
|