App\Http\Controllers\ProfileSecurityController::disable2fa()

Complexity

Conditions	9
Paths	6

Size

Total Lines	49
Code Lines	28

Duplication

Lines	0
Ratio	0 %

Importance

Changes	2
Bugs	1	Features	0

<?php
    public function disable2fa(Request $request)
    {
        // Simple validation - only password is required
        $validated = $request->validate([
            'current_password' => 'required',
        ]);

        // Check if password is correct
        if (! Hash::check($validated['current_password'], Auth::user()->password)) {

Accessing password on the interface Illuminate\Contracts\Auth\Authenticatable suggest that you code against a concrete implementation. How about adding an instanceof check?

            if ($request->expectsJson() || $request->ajax()) {
                return response()->json([
                    'success' => false,
                    'message' => 'Your password does not match. Please try again.',
                ]);
            }

            return redirect()
                ->to('profileedit#security')
                ->with('error_2fa', 'Your password does not match. Please try again.');
        }

        // Get the user and disable 2FA
        $user = Auth::user();
        if ($user->passwordSecurity) {

Accessing passwordSecurity on the interface Illuminate\Contracts\Auth\Authenticatable suggest that you code against a concrete implementation. How about adding an instanceof check?

            $user->passwordSecurity->google2fa_enable = 0;
            $user->passwordSecurity->save();

            if ($request->expectsJson() || $request->ajax()) {
                return response()->json([
                    'success' => true,
                    'message' => '2FA has been successfully disabled.',
                ]);
            }

            return redirect()
                ->to('profileedit#security')
                ->with('success_2fa', '2FA has been successfully disabled.');
        }

        if ($request->expectsJson() || $request->ajax()) {
            return response()->json([
                'success' => false,
                'message' => 'No 2FA configuration found for this user.',
            ]);
        }

        return redirect()
            ->to('profileedit#security')
            ->with('error_2fa', 'No 2FA configuration found for this user.');
    }