Application\Api\Field\Mutation\RequestPasswordReset

Complexity

Total Complexity

6

Size/Duplication

Total Lines	51
Duplicated Lines	0 %

Test Coverage

Coverage

96.15%

Importance

Changes

0

1 Method

Rating	Name	Duplication	Size	Complexity
B	build()	0	49	6

<?php

declare(strict_types=1);

namespace Application\Api\Field\Mutation;

use Application\Model\Log;
use Application\Model\User;
use Application\Repository\LogRepository;
use Application\Repository\UserRepository;
use Application\Service\MessageQueuer;
use Ecodev\Felix\Api\ExceptionWithoutMailLogging;
use Ecodev\Felix\Api\Field\FieldInterface;
use Ecodev\Felix\Api\Scalar\EmailType;
use Ecodev\Felix\Service\Mailer;
use GraphQL\Type\Definition\Type;
use Mezzio\Session\SessionInterface;

abstract class RequestPasswordReset implements FieldInterface
{
    public static function build(): iterable
    {
        yield 'requestPasswordReset' => fn () => [
            'type' => Type::nonNull(Type::boolean()),
            'description' => 'Request to send an email to reset the password for the given user. It will **always** return a successful response, even if the user is not found.',
            'args' => [
                'email' => Type::nonNull(_types()->get(EmailType::class)),
            ],
            'resolve' => function ($root, array $args, SessionInterface $session): bool {
                global $container;

                _log()->info(LogRepository::REQUEST_PASSWORD_RESET);

                /** @var LogRepository $logRepository */
                $logRepository = _em()->getRepository(Log::class);
                if ($logRepository->requestPasswordResetOften()) {
                    throw new ExceptionWithoutMailLogging('Trop de tentatives de changement de mot de passe. Veuillez réessayer plus tard.');
                }

                /** @var Mailer $mailer */
                $mailer = $container->get(Mailer::class);

                /** @var MessageQueuer $messageQueuer */
                $messageQueuer = $container->get(MessageQueuer::class);

                /** @var UserRepository $repository */
                $repository = _em()->getRepository(User::class);

                /** @var null|User $user */
                $user = $repository->getOneByEmail($args['email']);

                if ($user) {
                    $email = $user->getEmail();

                    // If never had password, it means it was not confirmed yet
                    $message = null;
                    if (!$user->getPassword()) {
                        $message = $messageQueuer->queueRegister($user);
                    } elseif ($email) {
                        $message = $messageQueuer->queueResetPassword($user, $email);
                    }

                    if ($message) {
                        $mailer->sendMessageAsync($message);
                    }
                }

                // Here we lie to client, and always say we are successful, to avoid data leak
                return true;
            },
        ];
    }
}