summaryrefslogtreecommitdiffstats
path: root/core/lostpassword/controller/lostcontroller.php
diff options
context:
space:
mode:
authorMorris Jobke <hey@morrisjobke.de>2016-01-20 10:42:19 +0100
committerMorris Jobke <hey@morrisjobke.de>2016-01-20 10:42:19 +0100
commitd6a63016ae0e14efeefd763a1042c515b60b3f7d (patch)
tree2a9a10e609a79402bc5ea40ff25cfea76d92e8b4 /core/lostpassword/controller/lostcontroller.php
parentc2a1a02fe452fe93057f36e6d37a8634df2e0bd6 (diff)
downloadnextcloud-server-d6a63016ae0e14efeefd763a1042c515b60b3f7d.tar.gz
nextcloud-server-d6a63016ae0e14efeefd763a1042c515b60b3f7d.zip
move lost controller to core/controller
* lostpassword.css is unneeded since #11696 is merged - 1b50d4f7ceb92fffe0d38f823f175cf7e419c69e * js is already in core/js * css is moved to core/css/lostpassword * template is moved to core/templates/lostpassword
Diffstat (limited to 'core/lostpassword/controller/lostcontroller.php')
-rw-r--r--core/lostpassword/controller/lostcontroller.php257
1 files changed, 0 insertions, 257 deletions
diff --git a/core/lostpassword/controller/lostcontroller.php b/core/lostpassword/controller/lostcontroller.php
deleted file mode 100644
index c9ee8ed2ff5..00000000000
--- a/core/lostpassword/controller/lostcontroller.php
+++ /dev/null
@@ -1,257 +0,0 @@
-<?php
-/**
- * @author Bernhard Posselt <dev@bernhard-posselt.com>
- * @author Björn Schießle <schiessle@owncloud.com>
- * @author Lukas Reschke <lukas@owncloud.com>
- * @author Morris Jobke <hey@morrisjobke.de>
- * @author Roeland Jago Douma <rullzer@owncloud.com>
- * @author Thomas Müller <thomas.mueller@tmit.eu>
- * @author Victor Dubiniuk <dubiniuk@owncloud.com>
- *
- * @copyright Copyright (c) 2016, ownCloud, Inc.
- * @license AGPL-3.0
- *
- * This code is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License, version 3,
- * as published by the Free Software Foundation.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License, version 3,
- * along with this program. If not, see <http://www.gnu.org/licenses/>
- *
- */
-
-namespace OC\Core\LostPassword\Controller;
-
-use \OCP\AppFramework\Controller;
-use \OCP\AppFramework\Http\TemplateResponse;
-use OCP\AppFramework\Utility\ITimeFactory;
-use \OCP\IURLGenerator;
-use \OCP\IRequest;
-use \OCP\IL10N;
-use \OCP\IConfig;
-use OCP\IUserManager;
-use OCP\Mail\IMailer;
-use OCP\Security\ISecureRandom;
-use \OC_Defaults;
-use OCP\Security\StringUtils;
-
-/**
- * Class LostController
- *
- * Successfully changing a password will emit the post_passwordReset hook.
- *
- * @package OC\Core\LostPassword\Controller
- */
-class LostController extends Controller {
-
- /** @var IURLGenerator */
- protected $urlGenerator;
- /** @var IUserManager */
- protected $userManager;
- // FIXME: Inject a non-static factory of OC_Defaults for better unit-testing
- /** @var OC_Defaults */
- protected $defaults;
- /** @var IL10N */
- protected $l10n;
- /** @var string */
- protected $from;
- /** @var bool */
- protected $isDataEncrypted;
- /** @var IConfig */
- protected $config;
- /** @var ISecureRandom */
- protected $secureRandom;
- /** @var IMailer */
- protected $mailer;
- /** @var ITimeFactory */
- protected $timeFactory;
-
- /**
- * @param string $appName
- * @param IRequest $request
- * @param IURLGenerator $urlGenerator
- * @param IUserManager $userManager
- * @param OC_Defaults $defaults
- * @param IL10N $l10n
- * @param IConfig $config
- * @param ISecureRandom $secureRandom
- * @param string $from
- * @param string $isDataEncrypted
- * @param IMailer $mailer
- * @param ITimeFactory $timeFactory
- */
- public function __construct($appName,
- IRequest $request,
- IURLGenerator $urlGenerator,
- IUserManager $userManager,
- OC_Defaults $defaults,
- IL10N $l10n,
- IConfig $config,
- ISecureRandom $secureRandom,
- $from,
- $isDataEncrypted,
- IMailer $mailer,
- ITimeFactory $timeFactory) {
- parent::__construct($appName, $request);
- $this->urlGenerator = $urlGenerator;
- $this->userManager = $userManager;
- $this->defaults = $defaults;
- $this->l10n = $l10n;
- $this->secureRandom = $secureRandom;
- $this->from = $from;
- $this->isDataEncrypted = $isDataEncrypted;
- $this->config = $config;
- $this->mailer = $mailer;
- $this->timeFactory = $timeFactory;
- }
-
- /**
- * Someone wants to reset their password:
- *
- * @PublicPage
- * @NoCSRFRequired
- *
- * @param string $token
- * @param string $userId
- * @return TemplateResponse
- */
- public function resetform($token, $userId) {
- return new TemplateResponse(
- 'core/lostpassword',
- 'resetpassword',
- array(
- 'link' => $this->urlGenerator->linkToRouteAbsolute('core.lost.setPassword', array('userId' => $userId, 'token' => $token)),
- ),
- 'guest'
- );
- }
-
- /**
- * @param $message
- * @param array $additional
- * @return array
- */
- private function error($message, array $additional=array()) {
- return array_merge(array('status' => 'error', 'msg' => $message), $additional);
- }
-
- /**
- * @return array
- */
- private function success() {
- return array('status'=>'success');
- }
-
- /**
- * @PublicPage
- *
- * @param string $user
- * @return array
- */
- public function email($user){
- // FIXME: use HTTP error codes
- try {
- $this->sendEmail($user);
- } catch (\Exception $e){
- return $this->error($e->getMessage());
- }
-
- return $this->success();
- }
-
- /**
- * @PublicPage
- * @param string $token
- * @param string $userId
- * @param string $password
- * @param boolean $proceed
- * @return array
- */
- public function setPassword($token, $userId, $password, $proceed) {
- if ($this->isDataEncrypted && !$proceed) {
- return $this->error('', array('encryption' => true));
- }
-
- try {
- $user = $this->userManager->get($userId);
-
- $splittedToken = explode(':', $this->config->getUserValue($userId, 'owncloud', 'lostpassword', null));
- if(count($splittedToken) !== 2) {
- throw new \Exception($this->l10n->t('Couldn\'t reset password because the token is invalid'));
- }
-
- if ($splittedToken[0] < ($this->timeFactory->getTime() - 60*60*12) ||
- $user->getLastLogin() > $splittedToken[0]) {
- throw new \Exception($this->l10n->t('Couldn\'t reset password because the token is expired'));
- }
-
- if (!StringUtils::equals($splittedToken[1], $token)) {
- throw new \Exception($this->l10n->t('Couldn\'t reset password because the token is invalid'));
- }
-
- if (!$user->setPassword($password)) {
- throw new \Exception();
- }
-
- \OC_Hook::emit('\OC\Core\LostPassword\Controller\LostController', 'post_passwordReset', array('uid' => $userId, 'password' => $password));
-
- $this->config->deleteUserValue($userId, 'owncloud', 'lostpassword');
- @\OC_User::unsetMagicInCookie();
-
- } catch (\Exception $e){
- return $this->error($e->getMessage());
- }
-
- return $this->success();
- }
-
- /**
- * @param string $user
- * @throws \Exception
- */
- protected function sendEmail($user) {
- if (!$this->userManager->userExists($user)) {
- throw new \Exception($this->l10n->t('Couldn\'t send reset email. Please make sure your username is correct.'));
- }
-
- $userObject = $this->userManager->get($user);
- $email = $userObject->getEMailAddress();
-
- if (empty($email)) {
- throw new \Exception(
- $this->l10n->t('Could not send reset email because there is no email address for this username. Please contact your administrator.')
- );
- }
-
- $token = $this->secureRandom->generate(21,
- ISecureRandom::CHAR_DIGITS.
- ISecureRandom::CHAR_LOWER.
- ISecureRandom::CHAR_UPPER);
- $this->config->setUserValue($user, 'owncloud', 'lostpassword', $this->timeFactory->getTime() .':'. $token);
-
- $link = $this->urlGenerator->linkToRouteAbsolute('core.lost.resetform', array('userId' => $user, 'token' => $token));
-
- $tmpl = new \OC_Template('core/lostpassword', 'email');
- $tmpl->assign('link', $link);
- $msg = $tmpl->fetchPage();
-
- try {
- $message = $this->mailer->createMessage();
- $message->setTo([$email => $user]);
- $message->setSubject($this->l10n->t('%s password reset', [$this->defaults->getName()]));
- $message->setPlainBody($msg);
- $message->setFrom([$this->from => $this->defaults->getName()]);
- $this->mailer->send($message);
- } catch (\Exception $e) {
- throw new \Exception($this->l10n->t(
- 'Couldn\'t send reset email. Please contact your administrator.'
- ));
- }
- }
-
-}