Ecodev\Felix\Model\Traits\HasPassword

Complexity

Total Complexity

8

Size/Duplication

Total Lines	77
Duplicated Lines	0 %

Test Coverage

Coverage

100%

Importance

Changes	2
Bugs	0	Features	0

5 Methods

Rating	Name	Duplication	Size	Complexity
A	isTokenValid()	0	10	2
A	revokeToken()	0	4	1
A	setPassword()	0	13	2
A	getPassword()	0	4	1
A	createToken()	0	6	2

<?php

declare(strict_types=1);

namespace Ecodev\Felix\Model\Traits;

use Cake\Chronos\Chronos;
use Doctrine\ORM\Mapping as ORM;
use GraphQL\Doctrine\Attribute as API;

/**
 * Trait for a user with a password and password reset capabilities.
 */
trait HasPassword
{
    #[ORM\Column(type: 'string', length: 255, options: ['default' => ''])]
    #[API\Exclude]
    private string $password = '';

    #[ORM\Column(type: 'string', length: 32, nullable: true, unique: true)]
    #[API\Exclude]
    private ?string $token = null;

    /**
     * The time when user asked to reset password.
     */
    #[ORM\Column(type: 'datetime', nullable: true)]
    #[API\Exclude]
    private ?Chronos $tokenCreationDate = null;

    /**
     * Hash and change the user password.
     */
    public function setPassword(string $password): void
    {
        // Ignore empty password that could be sent "by mistake" by the client
        // when agreeing to terms
        if ($password === '') {
            return;
        }

        $this->revokeToken();

        $password = password_hash($password, PASSWORD_DEFAULT);

        $this->password = $password;
    }

    /**
     * Returns the hashed password.
     */
    #[API\Exclude]
    public function getPassword(): string
    {
        return $this->password;
    }

    /**
     * Generate a new random token to reset password.
     */
    public function createToken(bool $mobileToken = false): string
    {
        $this->token = $mobileToken ? str_pad((string) random_int(0, 999999), 6, '0', STR_PAD_LEFT) : bin2hex(random_bytes(16));
        $this->tokenCreationDate = new Chronos();

        return $this->token;
    }

    /**
     * Destroy existing token.
     */
    public function revokeToken(): void
    {
        $this->token = null;
        $this->tokenCreationDate = null;
    }

    /**
     * Check if token is valid.
     */
    #[API\Exclude]
    public function isTokenValid(): bool
    {
        if (!$this->tokenCreationDate) {
            return false;
        }

        $timeLimit = $this->tokenCreationDate->addMinutes(30);

        return $timeLimit->isFuture();
    }
}