Julio Montoya
5 years ago
parent
b29eabbfd0
commit
d2f4c8425e
@ -0,0 +1,2 @@ |
||||
maker: |
||||
root_namespace: 'Chamilo\CoreBundle' |
||||
@ -0,0 +1,2 @@ |
||||
symfonycasts_reset_password: |
||||
request_password_repository: Chamilo\CoreBundle\Repository\ResetPasswordRequestRepository |
||||
@ -0,0 +1,173 @@ |
||||
<?php |
||||
|
||||
namespace Chamilo\CoreBundle\Controller; |
||||
|
||||
use Chamilo\CoreBundle\Entity\User; |
||||
use Chamilo\CoreBundle\Form\ChangePasswordFormType; |
||||
use Chamilo\CoreBundle\Form\ResetPasswordRequestFormType; |
||||
use Symfony\Bridge\Twig\Mime\TemplatedEmail; |
||||
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController; |
||||
use Symfony\Component\HttpFoundation\RedirectResponse; |
||||
use Symfony\Component\HttpFoundation\Request; |
||||
use Symfony\Component\HttpFoundation\Response; |
||||
use Symfony\Component\Mailer\MailerInterface; |
||||
use Symfony\Component\Mime\Address; |
||||
use Symfony\Component\Routing\Annotation\Route; |
||||
use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface; |
||||
use SymfonyCasts\Bundle\ResetPassword\Controller\ResetPasswordControllerTrait; |
||||
use SymfonyCasts\Bundle\ResetPassword\Exception\ResetPasswordExceptionInterface; |
||||
use SymfonyCasts\Bundle\ResetPassword\ResetPasswordHelperInterface; |
||||
|
||||
/** |
||||
* @Route("/reset-password") |
||||
*/ |
||||
class ResetPasswordController extends AbstractController |
||||
{ |
||||
use ResetPasswordControllerTrait; |
||||
|
||||
private $resetPasswordHelper; |
||||
|
||||
public function __construct(ResetPasswordHelperInterface $resetPasswordHelper) |
||||
{ |
||||
$this->resetPasswordHelper = $resetPasswordHelper; |
||||
} |
||||
|
||||
/** |
||||
* Display & process form to request a password reset. |
||||
* |
||||
* @Route("", name="app_forgot_password_request") |
||||
*/ |
||||
public function request(Request $request, MailerInterface $mailer): Response |
||||
{ |
||||
$form = $this->createForm(ResetPasswordRequestFormType::class); |
||||
$form->handleRequest($request); |
||||
|
||||
if ($form->isSubmitted() && $form->isValid()) { |
||||
return $this->processSendingPasswordResetEmail( |
||||
$form->get('email')->getData(), |
||||
$mailer |
||||
); |
||||
} |
||||
|
||||
return $this->render('@ChamiloCore/reset_password/request.html.twig', [ |
||||
'requestForm' => $form->createView(), |
||||
]); |
||||
} |
||||
|
||||
/** |
||||
* Confirmation page after a user has requested a password reset. |
||||
* |
||||
* @Route("/check-email", name="app_check_email") |
||||
*/ |
||||
public function checkEmail(): Response |
||||
{ |
||||
// We prevent users from directly accessing this page |
||||
if (!$this->canCheckEmail()) { |
||||
return $this->redirectToRoute('app_forgot_password_request'); |
||||
} |
||||
|
||||
return $this->render('@ChamiloCore/reset_password/check_email.html.twig', [ |
||||
'tokenLifetime' => $this->resetPasswordHelper->getTokenLifetime(), |
||||
]); |
||||
} |
||||
|
||||
/** |
||||
* Validates and process the reset URL that the user clicked in their email. |
||||
* |
||||
* @Route("/reset/{token}", name="app_reset_password") |
||||
*/ |
||||
public function reset(Request $request, UserPasswordEncoderInterface $passwordEncoder, string $token = null): Response |
||||
{ |
||||
if ($token) { |
||||
// We store the token in session and remove it from the URL, to avoid the URL being |
||||
// loaded in a browser and potentially leaking the token to 3rd party JavaScript. |
||||
$this->storeTokenInSession($token); |
||||
|
||||
return $this->redirectToRoute('app_reset_password'); |
||||
} |
||||
|
||||
$token = $this->getTokenFromSession(); |
||||
if (null === $token) { |
||||
throw $this->createNotFoundException('No reset password token found in the URL or in the session.'); |
||||
} |
||||
|
||||
try { |
||||
$user = $this->resetPasswordHelper->validateTokenAndFetchUser($token); |
||||
} catch (ResetPasswordExceptionInterface $e) { |
||||
$this->addFlash('reset_password_error', sprintf( |
||||
'There was a problem validating your reset request - %s', |
||||
$e->getReason() |
||||
)); |
||||
|
||||
return $this->redirectToRoute('app_forgot_password_request'); |
||||
} |
||||
|
||||
// The token is valid; allow the user to change their password. |
||||
$form = $this->createForm(ChangePasswordFormType::class); |
||||
$form->handleRequest($request); |
||||
|
||||
if ($form->isSubmitted() && $form->isValid()) { |
||||
// A password reset token should be used only once, remove it. |
||||
$this->resetPasswordHelper->removeResetRequest($token); |
||||
|
||||
// Encode the plain password, and set it. |
||||
$encodedPassword = $passwordEncoder->encodePassword( |
||||
$user, |
||||
$form->get('plainPassword')->getData() |
||||
); |
||||
|
||||
$user->setPassword($encodedPassword); |
||||
$this->getDoctrine()->getManager()->flush(); |
||||
|
||||
// The session is cleaned up after the password has been changed. |
||||
$this->cleanSessionAfterReset(); |
||||
|
||||
return $this->redirectToRoute('home'); |
||||
} |
||||
|
||||
return $this->render('@ChamiloCore/reset_password/reset.html.twig', [ |
||||
'resetForm' => $form->createView(), |
||||
]); |
||||
} |
||||
|
||||
private function processSendingPasswordResetEmail(string $emailFormData, MailerInterface $mailer): RedirectResponse |
||||
{ |
||||
$user = $this->getDoctrine()->getRepository(User::class)->findOneBy([ |
||||
'email' => $emailFormData, |
||||
]); |
||||
|
||||
// Marks that you are allowed to see the app_check_email page. |
||||
$this->setCanCheckEmailInSession(); |
||||
|
||||
// Do not reveal whether a user account was found or not. |
||||
if (!$user) { |
||||
return $this->redirectToRoute('app_check_email'); |
||||
} |
||||
|
||||
try { |
||||
$resetToken = $this->resetPasswordHelper->generateResetToken($user); |
||||
} catch (ResetPasswordExceptionInterface $e) { |
||||
$this->addFlash('reset_password_error', sprintf( |
||||
'There was a problem handling your password reset request - %s', |
||||
$e->getReason() |
||||
)); |
||||
|
||||
return $this->redirectToRoute('app_forgot_password_request'); |
||||
} |
||||
|
||||
$email = (new TemplatedEmail()) |
||||
->from(new Address('test@test.com', 'test')) |
||||
->to($user->getEmail()) |
||||
->subject('Your password reset request') |
||||
->htmlTemplate('@ChamiloCore/reset_password/email.html.twig') |
||||
->context([ |
||||
'resetToken' => $resetToken, |
||||
'tokenLifetime' => $this->resetPasswordHelper->getTokenLifetime(), |
||||
]) |
||||
; |
||||
|
||||
$mailer->send($email); |
||||
|
||||
return $this->redirectToRoute('app_check_email'); |
||||
} |
||||
} |
||||
@ -0,0 +1,38 @@ |
||||
<?php |
||||
|
||||
namespace Chamilo\CoreBundle\Entity; |
||||
|
||||
use Doctrine\ORM\Mapping as ORM; |
||||
use SymfonyCasts\Bundle\ResetPassword\Model\ResetPasswordRequestInterface; |
||||
use SymfonyCasts\Bundle\ResetPassword\Model\ResetPasswordRequestTrait; |
||||
|
||||
/** |
||||
* @ORM\Entity(repositoryClass="Chamilo\CoreBundle\Repository\ResetPasswordRequestRepository") |
||||
*/ |
||||
class ResetPasswordRequest implements ResetPasswordRequestInterface |
||||
{ |
||||
use ResetPasswordRequestTrait; |
||||
|
||||
/** |
||||
* @ORM\Id() |
||||
* @ORM\GeneratedValue() |
||||
* @ORM\Column(type="integer") |
||||
*/ |
||||
private $id; |
||||
|
||||
/** |
||||
* @ORM\ManyToOne(targetEntity="Chamilo\CoreBundle\Entity\User") |
||||
*/ |
||||
private $user; |
||||
|
||||
public function __construct(object $user, \DateTimeInterface $expiresAt, string $selector, string $hashedToken) |
||||
{ |
||||
$this->user = $user; |
||||
$this->initialize($expiresAt, $selector, $hashedToken); |
||||
} |
||||
|
||||
public function getUser(): object |
||||
{ |
||||
return $this->user; |
||||
} |
||||
} |
||||
@ -0,0 +1,49 @@ |
||||
<?php |
||||
|
||||
namespace Chamilo\CoreBundle\Form; |
||||
|
||||
use Symfony\Component\Form\AbstractType; |
||||
use Symfony\Component\Form\Extension\Core\Type\PasswordType; |
||||
use Symfony\Component\Form\Extension\Core\Type\RepeatedType; |
||||
use Symfony\Component\Form\FormBuilderInterface; |
||||
use Symfony\Component\OptionsResolver\OptionsResolver; |
||||
use Symfony\Component\Validator\Constraints\Length; |
||||
use Symfony\Component\Validator\Constraints\NotBlank; |
||||
|
||||
class ChangePasswordFormType extends AbstractType |
||||
{ |
||||
public function buildForm(FormBuilderInterface $builder, array $options): void |
||||
{ |
||||
$builder |
||||
->add('plainPassword', RepeatedType::class, [ |
||||
'type' => PasswordType::class, |
||||
'first_options' => [ |
||||
'constraints' => [ |
||||
new NotBlank([ |
||||
'message' => 'Please enter a password', |
||||
]), |
||||
new Length([ |
||||
'min' => 6, |
||||
'minMessage' => 'Your password should be at least {{ limit }} characters', |
||||
// max length allowed by Symfony for security reasons |
||||
'max' => 4096, |
||||
]), |
||||
], |
||||
'label' => 'New password', |
||||
], |
||||
'second_options' => [ |
||||
'label' => 'Repeat Password', |
||||
], |
||||
'invalid_message' => 'The password fields must match.', |
||||
// Instead of being set onto the object directly, |
||||
// this is read and encoded in the controller |
||||
'mapped' => false, |
||||
]) |
||||
; |
||||
} |
||||
|
||||
public function configureOptions(OptionsResolver $resolver): void |
||||
{ |
||||
$resolver->setDefaults([]); |
||||
} |
||||
} |
||||
@ -0,0 +1,30 @@ |
||||
<?php |
||||
|
||||
namespace Chamilo\CoreBundle\Form; |
||||
|
||||
use Symfony\Component\Form\AbstractType; |
||||
use Symfony\Component\Form\Extension\Core\Type\EmailType; |
||||
use Symfony\Component\Form\FormBuilderInterface; |
||||
use Symfony\Component\OptionsResolver\OptionsResolver; |
||||
use Symfony\Component\Validator\Constraints\NotBlank; |
||||
|
||||
class ResetPasswordRequestFormType extends AbstractType |
||||
{ |
||||
public function buildForm(FormBuilderInterface $builder, array $options): void |
||||
{ |
||||
$builder |
||||
->add('email', EmailType::class, [ |
||||
'constraints' => [ |
||||
new NotBlank([ |
||||
'message' => 'Please enter your email', |
||||
]), |
||||
], |
||||
]) |
||||
; |
||||
} |
||||
|
||||
public function configureOptions(OptionsResolver $resolver): void |
||||
{ |
||||
$resolver->setDefaults([]); |
||||
} |
||||
} |
||||
@ -0,0 +1,30 @@ |
||||
<?php |
||||
|
||||
|
||||
namespace Chamilo\CoreBundle\Migrations\Schema\V200; |
||||
|
||||
use Chamilo\CoreBundle\Migrations\AbstractMigrationChamilo; |
||||
use Doctrine\DBAL\Schema\Schema; |
||||
use Doctrine\Migrations\AbstractMigration; |
||||
|
||||
/** |
||||
* Auto-generated Migration: Please modify to your needs! |
||||
*/ |
||||
final class Version20200505064121 extends AbstractMigrationChamilo |
||||
{ |
||||
public function getDescription() : string |
||||
{ |
||||
return ''; |
||||
} |
||||
|
||||
public function up(Schema $schema) : void |
||||
{ |
||||
$this->addSql('CREATE TABLE reset_password_request (id INT AUTO_INCREMENT NOT NULL, user_id INT DEFAULT NULL, selector VARCHAR(20) NOT NULL, hashed_token VARCHAR(100) NOT NULL, requested_at DATETIME NOT NULL COMMENT \'(DC2Type:datetime_immutable)\', expires_at DATETIME NOT NULL COMMENT \'(DC2Type:datetime_immutable)\', INDEX IDX_7CE748AA76ED395 (user_id), PRIMARY KEY(id)) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB ROW_FORMAT = DYNAMIC'); |
||||
$this->addSql('ALTER TABLE reset_password_request ADD CONSTRAINT FK_7CE748AA76ED395 FOREIGN KEY (user_id) REFERENCES user (id)'); |
||||
} |
||||
|
||||
public function down(Schema $schema) : void |
||||
{ |
||||
$this->addSql('DROP TABLE reset_password_request'); |
||||
} |
||||
} |
||||
@ -0,0 +1,40 @@ |
||||
<?php |
||||
|
||||
namespace Chamilo\CoreBundle\Repository; |
||||
|
||||
use Chamilo\CoreBundle\Entity\ResetPasswordRequest; |
||||
use Doctrine\Bundle\DoctrineBundle\Repository\ServiceEntityRepository; |
||||
use Doctrine\Common\Persistence\ManagerRegistry; |
||||
use SymfonyCasts\Bundle\ResetPassword\Model\ResetPasswordRequestInterface; |
||||
use SymfonyCasts\Bundle\ResetPassword\Persistence\Repository\ResetPasswordRequestRepositoryTrait; |
||||
use SymfonyCasts\Bundle\ResetPassword\Persistence\ResetPasswordRequestRepositoryInterface; |
||||
|
||||
/** |
||||
* @method ResetPasswordRequest|null find($id, $lockMode = null, $lockVersion = null) |
||||
* @method ResetPasswordRequest|null findOneBy(array $criteria, array $orderBy = null) |
||||
* @method ResetPasswordRequest[] findAll() |
||||
* @method ResetPasswordRequest[] findBy(array $criteria, array $orderBy = null, $limit = null, $offset = null) |
||||
*/ |
||||
class ResetPasswordRequestRepository extends ServiceEntityRepository implements ResetPasswordRequestRepositoryInterface |
||||
{ |
||||
use ResetPasswordRequestRepositoryTrait; |
||||
|
||||
public function __construct(ManagerRegistry $registry) |
||||
{ |
||||
parent::__construct($registry, ResetPasswordRequest::class); |
||||
} |
||||
|
||||
public function createResetPasswordRequest( |
||||
object $user, |
||||
\DateTimeInterface $expiresAt, |
||||
string $selector, |
||||
string $hashedToken |
||||
): ResetPasswordRequestInterface { |
||||
return new ResetPasswordRequest( |
||||
$user, |
||||
$expiresAt, |
||||
$selector, |
||||
$hashedToken |
||||
); |
||||
} |
||||
} |
||||
@ -0,0 +1,8 @@ |
||||
{% extends 'base.html.twig' %} |
||||
|
||||
{% block title %}Password Reset Email Sent{% endblock %} |
||||
|
||||
{% block body %} |
||||
<p>An email has been sent that contains a link that you can click to reset your password. This link will expire in {{ tokenLifetime|date('g') }} hour(s).</p> |
||||
<p>If you don't receive an email please check your spam folder or <a href="{{ path('app_forgot_password_request') }}">try again</a>.</p> |
||||
{% endblock %} |
||||
@ -0,0 +1,11 @@ |
||||
<h1>Hi!</h1> |
||||
|
||||
<p> |
||||
To reset your password, please visit |
||||
<a href="{{ url('app_reset_password', {token: resetToken.token}) }}">here</a> |
||||
This link will expire in {{ tokenLifetime|date('g') }} hour(s).. |
||||
</p> |
||||
|
||||
<p> |
||||
Cheers! |
||||
</p> |
||||
@ -0,0 +1,22 @@ |
||||
{% extends 'base.html.twig' %} |
||||
|
||||
{% block title %}Reset your password{% endblock %} |
||||
|
||||
{% block body %} |
||||
{% for flashError in app.flashes('reset_password_error') %} |
||||
<div class="alert alert-danger" role="alert">{{ flashError }}</div> |
||||
{% endfor %} |
||||
<h1>Reset your password</h1> |
||||
|
||||
{{ form_start(requestForm) }} |
||||
{{ form_row(requestForm.email) }} |
||||
<div> |
||||
<small> |
||||
Enter your email address and we we will send you a |
||||
link to reset your password. |
||||
</small> |
||||
</div> |
||||
|
||||
<button class="btn btn-primary">Send password reset email</button> |
||||
{{ form_end(requestForm) }} |
||||
{% endblock %} |
||||
@ -0,0 +1,12 @@ |
||||
{% extends 'base.html.twig' %} |
||||
|
||||
{% block title %}Reset your password{% endblock %} |
||||
|
||||
{% block body %} |
||||
<h1>Reset your password</h1> |
||||
|
||||
{{ form_start(resetForm) }} |
||||
{{ form_row(resetForm.plainPassword) }} |
||||
<button class="btn btn-primary">Reset password</button> |
||||
{{ form_end(resetForm) }} |
||||
{% endblock %} |
||||
Loading…
Reference in new issue