@@ -5,50 +5,50 @@ |
||
| 5 | 5 | */ |
| 6 | 6 | class AclPermissionObserver { |
| 7 | 7 | |
| 8 | - public function saving($model) |
|
| 9 | - { |
|
| 10 | - // |
|
| 11 | - } |
|
| 12 | - |
|
| 13 | - public function saved($model) |
|
| 14 | - { |
|
| 15 | - // |
|
| 16 | - } |
|
| 17 | - |
|
| 18 | - public function creating($model) |
|
| 19 | - { |
|
| 20 | - // |
|
| 21 | - } |
|
| 22 | - |
|
| 23 | - public function created($model) |
|
| 24 | - { |
|
| 25 | - // |
|
| 26 | - } |
|
| 27 | - |
|
| 28 | - public function updating($model) |
|
| 29 | - { |
|
| 30 | - // |
|
| 31 | - } |
|
| 32 | - |
|
| 33 | - public function updated($model) |
|
| 34 | - { |
|
| 35 | - // |
|
| 36 | - } |
|
| 37 | - |
|
| 38 | - /** |
|
| 39 | - * Soft delete the associated groups to the deleted permission. |
|
| 40 | - * |
|
| 41 | - * @param object $model the delted model. |
|
| 42 | - * @return void |
|
| 43 | - */ |
|
| 44 | - public function deleting($model) |
|
| 45 | - { |
|
| 46 | - \DB::table('groups_permissions')->where('permission_id', $model->id)->update(array('deleted_at' => \DB::raw('NOW()'))); |
|
| 47 | - } |
|
| 48 | - |
|
| 49 | - public function deleted($model) |
|
| 50 | - { |
|
| 51 | - // |
|
| 52 | - } |
|
| 8 | + public function saving($model) |
|
| 9 | + { |
|
| 10 | + // |
|
| 11 | + } |
|
| 12 | + |
|
| 13 | + public function saved($model) |
|
| 14 | + { |
|
| 15 | + // |
|
| 16 | + } |
|
| 17 | + |
|
| 18 | + public function creating($model) |
|
| 19 | + { |
|
| 20 | + // |
|
| 21 | + } |
|
| 22 | + |
|
| 23 | + public function created($model) |
|
| 24 | + { |
|
| 25 | + // |
|
| 26 | + } |
|
| 27 | + |
|
| 28 | + public function updating($model) |
|
| 29 | + { |
|
| 30 | + // |
|
| 31 | + } |
|
| 32 | + |
|
| 33 | + public function updated($model) |
|
| 34 | + { |
|
| 35 | + // |
|
| 36 | + } |
|
| 37 | + |
|
| 38 | + /** |
|
| 39 | + * Soft delete the associated groups to the deleted permission. |
|
| 40 | + * |
|
| 41 | + * @param object $model the delted model. |
|
| 42 | + * @return void |
|
| 43 | + */ |
|
| 44 | + public function deleting($model) |
|
| 45 | + { |
|
| 46 | + \DB::table('groups_permissions')->where('permission_id', $model->id)->update(array('deleted_at' => \DB::raw('NOW()'))); |
|
| 47 | + } |
|
| 48 | + |
|
| 49 | + public function deleted($model) |
|
| 50 | + { |
|
| 51 | + // |
|
| 52 | + } |
|
| 53 | 53 | |
| 54 | 54 | } |
| 55 | 55 | \ No newline at end of file |
@@ -29,6 +29,6 @@ |
||
| 29 | 29 | $group->permissions()->attach($permission_ids); |
| 30 | 30 | }); |
| 31 | 31 | |
| 32 | - return \Core::groups()->find($group_id); |
|
| 32 | + return \Core::groups()->find($group_id); |
|
| 33 | 33 | } |
| 34 | 34 | } |
@@ -23,7 +23,7 @@ |
||
| 23 | 23 | */ |
| 24 | 24 | public function assignPermissions($group_id, $permission_ids) |
| 25 | 25 | { |
| 26 | - \DB::transaction(function () use ($group_id, $permission_ids) { |
|
| 26 | + \DB::transaction(function() use ($group_id, $permission_ids) { |
|
| 27 | 27 | $group = \Core::groups()->find($group_id); |
| 28 | 28 | $group->permissions()->detach(); |
| 29 | 29 | $group->permissions()->attach($permission_ids); |
@@ -5,36 +5,36 @@ |
||
| 5 | 5 | |
| 6 | 6 | class AclPermission extends Model { |
| 7 | 7 | |
| 8 | - use SoftDeletes; |
|
| 9 | - protected $table = 'permissions'; |
|
| 10 | - protected $dates = ['created_at', 'updated_at', 'deleted_at']; |
|
| 11 | - protected $hidden = ['deleted_at']; |
|
| 12 | - protected $guarded = ['id']; |
|
| 13 | - protected $fillable = ['name', 'model']; |
|
| 8 | + use SoftDeletes; |
|
| 9 | + protected $table = 'permissions'; |
|
| 10 | + protected $dates = ['created_at', 'updated_at', 'deleted_at']; |
|
| 11 | + protected $hidden = ['deleted_at']; |
|
| 12 | + protected $guarded = ['id']; |
|
| 13 | + protected $fillable = ['name', 'model']; |
|
| 14 | 14 | |
| 15 | - public function getCreatedAtAttribute($value) |
|
| 16 | - { |
|
| 17 | - return \Carbon\Carbon::parse($value)->addHours(\Session::get('timeZoneDiff'))->toDateTimeString(); |
|
| 18 | - } |
|
| 15 | + public function getCreatedAtAttribute($value) |
|
| 16 | + { |
|
| 17 | + return \Carbon\Carbon::parse($value)->addHours(\Session::get('timeZoneDiff'))->toDateTimeString(); |
|
| 18 | + } |
|
| 19 | 19 | |
| 20 | - public function getUpdatedAtAttribute($value) |
|
| 21 | - { |
|
| 22 | - return \Carbon\Carbon::parse($value)->addHours(\Session::get('timeZoneDiff'))->toDateTimeString(); |
|
| 23 | - } |
|
| 20 | + public function getUpdatedAtAttribute($value) |
|
| 21 | + { |
|
| 22 | + return \Carbon\Carbon::parse($value)->addHours(\Session::get('timeZoneDiff'))->toDateTimeString(); |
|
| 23 | + } |
|
| 24 | 24 | |
| 25 | - public function getDeletedAtAttribute($value) |
|
| 26 | - { |
|
| 27 | - return \Carbon\Carbon::parse($value)->addHours(\Session::get('timeZoneDiff'))->toDateTimeString(); |
|
| 28 | - } |
|
| 25 | + public function getDeletedAtAttribute($value) |
|
| 26 | + { |
|
| 27 | + return \Carbon\Carbon::parse($value)->addHours(\Session::get('timeZoneDiff'))->toDateTimeString(); |
|
| 28 | + } |
|
| 29 | 29 | |
| 30 | - public function groups() |
|
| 31 | - { |
|
| 32 | - return $this->belongsToMany('\App\Modules\V1\Acl\AclGroup','groups_permissions','permission_id','group_id')->whereNull('groups_permissions.deleted_at')->withTimestamps(); |
|
| 33 | - } |
|
| 30 | + public function groups() |
|
| 31 | + { |
|
| 32 | + return $this->belongsToMany('\App\Modules\V1\Acl\AclGroup','groups_permissions','permission_id','group_id')->whereNull('groups_permissions.deleted_at')->withTimestamps(); |
|
| 33 | + } |
|
| 34 | 34 | |
| 35 | - public static function boot() |
|
| 36 | - { |
|
| 37 | - parent::boot(); |
|
| 38 | - parent::observe(\App::make('App\Modules\V1\Acl\ModelObservers\AclPermissionObserver')); |
|
| 39 | - } |
|
| 35 | + public static function boot() |
|
| 36 | + { |
|
| 37 | + parent::boot(); |
|
| 38 | + parent::observe(\App::make('App\Modules\V1\Acl\ModelObservers\AclPermissionObserver')); |
|
| 39 | + } |
|
| 40 | 40 | } |
@@ -29,7 +29,7 @@ |
||
| 29 | 29 | |
| 30 | 30 | public function groups() |
| 31 | 31 | { |
| 32 | - return $this->belongsToMany('\App\Modules\V1\Acl\AclGroup','groups_permissions','permission_id','group_id')->whereNull('groups_permissions.deleted_at')->withTimestamps(); |
|
| 32 | + return $this->belongsToMany('\App\Modules\V1\Acl\AclGroup', 'groups_permissions', 'permission_id', 'group_id')->whereNull('groups_permissions.deleted_at')->withTimestamps(); |
|
| 33 | 33 | } |
| 34 | 34 | |
| 35 | 35 | public static function boot() |
@@ -7,10 +7,10 @@ |
||
| 7 | 7 | |
| 8 | 8 | class PermissionsController extends BaseApiController |
| 9 | 9 | { |
| 10 | - /** |
|
| 11 | - * The name of the model that is used by the base api controller |
|
| 12 | - * to preform actions like (add, edit ... etc). |
|
| 13 | - * @var string |
|
| 14 | - */ |
|
| 15 | - protected $model = 'permissions'; |
|
| 10 | + /** |
|
| 11 | + * The name of the model that is used by the base api controller |
|
| 12 | + * to preform actions like (add, edit ... etc). |
|
| 13 | + * @var string |
|
| 14 | + */ |
|
| 15 | + protected $model = 'permissions'; |
|
| 16 | 16 | } |
@@ -13,14 +13,14 @@ |
||
| 13 | 13 | * to preform actions like (add, edit ... etc). |
| 14 | 14 | * @var string |
| 15 | 15 | */ |
| 16 | - protected $model = 'groups'; |
|
| 16 | + protected $model = 'groups'; |
|
| 17 | 17 | |
| 18 | 18 | /** |
| 19 | 19 | * The validations rules used by the base api controller |
| 20 | 20 | * to check before add. |
| 21 | 21 | * @var array |
| 22 | 22 | */ |
| 23 | - protected $validationRules = [ |
|
| 23 | + protected $validationRules = [ |
|
| 24 | 24 | 'name' => 'required|string|max:100|unique:groups,name,{id}' |
| 25 | 25 | ]; |
| 26 | 26 | |
@@ -8,35 +8,35 @@ |
||
| 8 | 8 | |
| 9 | 9 | class GroupsController extends BaseApiController |
| 10 | 10 | { |
| 11 | - /** |
|
| 12 | - * The name of the model that is used by the base api controller |
|
| 13 | - * to preform actions like (add, edit ... etc). |
|
| 14 | - * @var string |
|
| 15 | - */ |
|
| 16 | - protected $model = 'groups'; |
|
| 11 | + /** |
|
| 12 | + * The name of the model that is used by the base api controller |
|
| 13 | + * to preform actions like (add, edit ... etc). |
|
| 14 | + * @var string |
|
| 15 | + */ |
|
| 16 | + protected $model = 'groups'; |
|
| 17 | 17 | |
| 18 | - /** |
|
| 19 | - * The validations rules used by the base api controller |
|
| 20 | - * to check before add. |
|
| 21 | - * @var array |
|
| 22 | - */ |
|
| 23 | - protected $validationRules = [ |
|
| 24 | - 'name' => 'required|string|max:100|unique:groups,name,{id}' |
|
| 25 | - ]; |
|
| 18 | + /** |
|
| 19 | + * The validations rules used by the base api controller |
|
| 20 | + * to check before add. |
|
| 21 | + * @var array |
|
| 22 | + */ |
|
| 23 | + protected $validationRules = [ |
|
| 24 | + 'name' => 'required|string|max:100|unique:groups,name,{id}' |
|
| 25 | + ]; |
|
| 26 | 26 | |
| 27 | - /** |
|
| 28 | - * Handle an assign permissions to group request. |
|
| 29 | - * |
|
| 30 | - * @param \Illuminate\Http\Request $request |
|
| 31 | - * @return \Illuminate\Http\Response |
|
| 32 | - */ |
|
| 33 | - public function assignpermissions(Request $request) |
|
| 34 | - { |
|
| 35 | - $this->validate($request, [ |
|
| 36 | - 'permission_ids' => 'required|exists:permissions,id', |
|
| 37 | - 'group_id' => 'required|exists:groups,id' |
|
| 38 | - ]); |
|
| 27 | + /** |
|
| 28 | + * Handle an assign permissions to group request. |
|
| 29 | + * |
|
| 30 | + * @param \Illuminate\Http\Request $request |
|
| 31 | + * @return \Illuminate\Http\Response |
|
| 32 | + */ |
|
| 33 | + public function assignpermissions(Request $request) |
|
| 34 | + { |
|
| 35 | + $this->validate($request, [ |
|
| 36 | + 'permission_ids' => 'required|exists:permissions,id', |
|
| 37 | + 'group_id' => 'required|exists:groups,id' |
|
| 38 | + ]); |
|
| 39 | 39 | |
| 40 | - return \Response::json(\Core::groups()->assignPermissions($request->get('group_id'), $request->get('permission_ids')), 200); |
|
| 41 | - } |
|
| 40 | + return \Response::json(\Core::groups()->assignPermissions($request->get('group_id'), $request->get('permission_ids')), 200); |
|
| 41 | + } |
|
| 42 | 42 | } |
@@ -202,7 +202,7 @@ |
||
| 202 | 202 | * Reset the given user's password. |
| 203 | 203 | * |
| 204 | 204 | * @param array $credentials |
| 205 | - * @return integer |
|
| 205 | + * @return false|null |
|
| 206 | 206 | */ |
| 207 | 207 | public function resetPassword($credentials) |
| 208 | 208 | { |
@@ -23,11 +23,11 @@ discard block |
||
| 23 | 23 | * @param boolean $user |
| 24 | 24 | * @return boolean |
| 25 | 25 | */ |
| 26 | - public function can($nameOfPermission, $model, $user = false ) |
|
| 26 | + public function can($nameOfPermission, $model, $user = false) |
|
| 27 | 27 | { |
| 28 | 28 | $user = $user ?: \JWTAuth::parseToken()->authenticate(); |
| 29 | 29 | $permissions = []; |
| 30 | - \Core::users()->find($user->id, ['groups.permissions'])->groups->lists('permissions')->each(function ($permission) use (&$permissions, $model){ |
|
| 30 | + \Core::users()->find($user->id, ['groups.permissions'])->groups->lists('permissions')->each(function($permission) use (&$permissions, $model){ |
|
| 31 | 31 | $permissions = array_merge($permissions, $permission->where('model', $model)->lists('name')->toArray()); |
| 32 | 32 | }); |
| 33 | 33 | |
@@ -55,7 +55,7 @@ discard block |
||
| 55 | 55 | */ |
| 56 | 56 | public function assignGroups($user_id, $group_ids) |
| 57 | 57 | { |
| 58 | - \DB::transaction(function () use ($user_id, $group_ids) { |
|
| 58 | + \DB::transaction(function() use ($user_id, $group_ids) { |
|
| 59 | 59 | $user = \Core::users()->find($user_id); |
| 60 | 60 | $user->groups()->detach(); |
| 61 | 61 | $user->groups()->attach($group_ids); |
@@ -187,7 +187,7 @@ discard block |
||
| 187 | 187 | */ |
| 188 | 188 | public function sendReset($email) |
| 189 | 189 | { |
| 190 | - $response = \Password::sendResetLink($email, function (\Illuminate\Mail\Message $message) { |
|
| 190 | + $response = \Password::sendResetLink($email, function(\Illuminate\Mail\Message $message) { |
|
| 191 | 191 | $message->subject('Your Password Reset Link'); |
| 192 | 192 | }); |
| 193 | 193 | |
@@ -207,7 +207,7 @@ discard block |
||
| 207 | 207 | public function resetPassword($credentials) |
| 208 | 208 | { |
| 209 | 209 | $token = false; |
| 210 | - $response = \Password::reset($credentials, function ($user, $password) use (&$token) { |
|
| 210 | + $response = \Password::reset($credentials, function($user, $password) use (&$token) { |
|
| 211 | 211 | $user->password = $password; |
| 212 | 212 | $user->save(); |
| 213 | 213 | |
@@ -4,244 +4,244 @@ |
||
| 4 | 4 | |
| 5 | 5 | class UserRepository extends AbstractRepository |
| 6 | 6 | { |
| 7 | - /** |
|
| 8 | - * Return the model full namespace. |
|
| 9 | - * |
|
| 10 | - * @return string |
|
| 11 | - */ |
|
| 12 | - protected function getModel() |
|
| 13 | - { |
|
| 14 | - return 'App\Modules\V1\Acl\AclUser'; |
|
| 15 | - } |
|
| 16 | - |
|
| 17 | - /** |
|
| 18 | - * Check if the logged in user or the given user |
|
| 19 | - * has the given permissions on the given model. |
|
| 20 | - * |
|
| 21 | - * @param string $nameOfPermission |
|
| 22 | - * @param string $model |
|
| 23 | - * @param boolean $user |
|
| 24 | - * @return boolean |
|
| 25 | - */ |
|
| 26 | - public function can($nameOfPermission, $model, $user = false ) |
|
| 27 | - { |
|
| 28 | - $user = $user ?: \JWTAuth::parseToken()->authenticate(); |
|
| 29 | - $permissions = []; |
|
| 30 | - \Core::users()->find($user->id, ['groups.permissions'])->groups->lists('permissions')->each(function ($permission) use (&$permissions, $model){ |
|
| 31 | - $permissions = array_merge($permissions, $permission->where('model', $model)->lists('name')->toArray()); |
|
| 32 | - }); |
|
| 7 | + /** |
|
| 8 | + * Return the model full namespace. |
|
| 9 | + * |
|
| 10 | + * @return string |
|
| 11 | + */ |
|
| 12 | + protected function getModel() |
|
| 13 | + { |
|
| 14 | + return 'App\Modules\V1\Acl\AclUser'; |
|
| 15 | + } |
|
| 16 | + |
|
| 17 | + /** |
|
| 18 | + * Check if the logged in user or the given user |
|
| 19 | + * has the given permissions on the given model. |
|
| 20 | + * |
|
| 21 | + * @param string $nameOfPermission |
|
| 22 | + * @param string $model |
|
| 23 | + * @param boolean $user |
|
| 24 | + * @return boolean |
|
| 25 | + */ |
|
| 26 | + public function can($nameOfPermission, $model, $user = false ) |
|
| 27 | + { |
|
| 28 | + $user = $user ?: \JWTAuth::parseToken()->authenticate(); |
|
| 29 | + $permissions = []; |
|
| 30 | + \Core::users()->find($user->id, ['groups.permissions'])->groups->lists('permissions')->each(function ($permission) use (&$permissions, $model){ |
|
| 31 | + $permissions = array_merge($permissions, $permission->where('model', $model)->lists('name')->toArray()); |
|
| 32 | + }); |
|
| 33 | 33 | |
| 34 | - return in_array($nameOfPermission, $permissions); |
|
| 35 | - } |
|
| 36 | - |
|
| 37 | - /** |
|
| 38 | - * Check if the logged in user has the given group. |
|
| 39 | - * |
|
| 40 | - * @param string $groupName |
|
| 41 | - * @return boolean |
|
| 42 | - */ |
|
| 43 | - public function hasGroup($groupName) |
|
| 44 | - { |
|
| 45 | - $groups = \Core::users()->find(\JWTAuth::parseToken()->authenticate()->id)->groups; |
|
| 46 | - return $groups->lists('name')->search($groupName, true) === false ? false : true; |
|
| 47 | - } |
|
| 48 | - |
|
| 49 | - /** |
|
| 50 | - * Assign the given group ids to the given user. |
|
| 51 | - * |
|
| 52 | - * @param integer $user_id |
|
| 53 | - * @param array $group_ids |
|
| 54 | - * @return object |
|
| 55 | - */ |
|
| 56 | - public function assignGroups($user_id, $group_ids) |
|
| 57 | - { |
|
| 58 | - \DB::transaction(function () use ($user_id, $group_ids) { |
|
| 59 | - $user = \Core::users()->find($user_id); |
|
| 60 | - $user->groups()->detach(); |
|
| 61 | - $user->groups()->attach($group_ids); |
|
| 62 | - }); |
|
| 63 | - |
|
| 64 | - return \Core::users()->find($user_id); |
|
| 65 | - } |
|
| 66 | - |
|
| 67 | - /** |
|
| 68 | - * Handle a login request to the application. |
|
| 69 | - * |
|
| 70 | - * @param array $credentials |
|
| 71 | - * @param boolean $adminLogin |
|
| 72 | - * @return string |
|
| 73 | - */ |
|
| 74 | - public function login($credentials, $adminLogin = false) |
|
| 75 | - { |
|
| 76 | - if ( ! $user = \Core::users()->first(['email' => $credentials['email']])) |
|
| 77 | - { |
|
| 78 | - \ErrorHandler::loginFailed(); |
|
| 79 | - } |
|
| 80 | - else if ($adminLogin && $user->groups->lists('name')->search('Admin', true) === false) |
|
| 81 | - { |
|
| 82 | - \ErrorHandler::loginFailed(); |
|
| 83 | - } |
|
| 84 | - else if ( ! $adminLogin && $user->groups->lists('name')->search('Admin', true) !== false) |
|
| 85 | - { |
|
| 86 | - \ErrorHandler::loginFailed(); |
|
| 87 | - } |
|
| 88 | - else if ($user->blocked) |
|
| 89 | - { |
|
| 90 | - \ErrorHandler::userIsBlocked(); |
|
| 91 | - } |
|
| 92 | - else if ($token = \JWTAuth::attempt($credentials)) |
|
| 93 | - { |
|
| 94 | - return $token; |
|
| 95 | - } |
|
| 96 | - else |
|
| 97 | - { |
|
| 98 | - \ErrorHandler::loginFailed(); |
|
| 99 | - } |
|
| 100 | - } |
|
| 101 | - |
|
| 102 | - /** |
|
| 103 | - * Handle a registration request. |
|
| 104 | - * |
|
| 105 | - * @param array $credentials |
|
| 106 | - * @return string |
|
| 107 | - */ |
|
| 108 | - public function register($credentials) |
|
| 109 | - { |
|
| 110 | - return \JWTAuth::fromUser(\Core::users()->model->create($credentials)); |
|
| 111 | - } |
|
| 112 | - |
|
| 113 | - /** |
|
| 114 | - * Logout the user. |
|
| 115 | - * |
|
| 116 | - * @return boolean |
|
| 117 | - */ |
|
| 118 | - public function logout() |
|
| 119 | - { |
|
| 120 | - return \JWTAuth::invalidate(\JWTAuth::getToken()); |
|
| 121 | - } |
|
| 122 | - |
|
| 123 | - /** |
|
| 124 | - * Block the user. |
|
| 125 | - * |
|
| 126 | - * @param integer $user_id |
|
| 127 | - * @return object |
|
| 128 | - */ |
|
| 129 | - public function block($user_id) |
|
| 130 | - { |
|
| 131 | - if ( ! $user = \Core::users()->find($user_id)) |
|
| 132 | - { |
|
| 133 | - \ErrorHandler::notFound('user'); |
|
| 134 | - } |
|
| 135 | - if ( ! $this->hasGroup('Admin')) |
|
| 136 | - { |
|
| 137 | - \ErrorHandler::noPermissions(); |
|
| 138 | - } |
|
| 139 | - else if (\JWTAuth::parseToken()->authenticate()->id == $user_id) |
|
| 140 | - { |
|
| 141 | - \ErrorHandler::noPermissions(); |
|
| 142 | - } |
|
| 143 | - else if ($user->groups->lists('name')->search('Admin', true) !== false) |
|
| 144 | - { |
|
| 145 | - \ErrorHandler::noPermissions(); |
|
| 146 | - } |
|
| 147 | - |
|
| 148 | - $user->blocked = 1; |
|
| 149 | - $user->save(); |
|
| 34 | + return in_array($nameOfPermission, $permissions); |
|
| 35 | + } |
|
| 36 | + |
|
| 37 | + /** |
|
| 38 | + * Check if the logged in user has the given group. |
|
| 39 | + * |
|
| 40 | + * @param string $groupName |
|
| 41 | + * @return boolean |
|
| 42 | + */ |
|
| 43 | + public function hasGroup($groupName) |
|
| 44 | + { |
|
| 45 | + $groups = \Core::users()->find(\JWTAuth::parseToken()->authenticate()->id)->groups; |
|
| 46 | + return $groups->lists('name')->search($groupName, true) === false ? false : true; |
|
| 47 | + } |
|
| 48 | + |
|
| 49 | + /** |
|
| 50 | + * Assign the given group ids to the given user. |
|
| 51 | + * |
|
| 52 | + * @param integer $user_id |
|
| 53 | + * @param array $group_ids |
|
| 54 | + * @return object |
|
| 55 | + */ |
|
| 56 | + public function assignGroups($user_id, $group_ids) |
|
| 57 | + { |
|
| 58 | + \DB::transaction(function () use ($user_id, $group_ids) { |
|
| 59 | + $user = \Core::users()->find($user_id); |
|
| 60 | + $user->groups()->detach(); |
|
| 61 | + $user->groups()->attach($group_ids); |
|
| 62 | + }); |
|
| 63 | + |
|
| 64 | + return \Core::users()->find($user_id); |
|
| 65 | + } |
|
| 66 | + |
|
| 67 | + /** |
|
| 68 | + * Handle a login request to the application. |
|
| 69 | + * |
|
| 70 | + * @param array $credentials |
|
| 71 | + * @param boolean $adminLogin |
|
| 72 | + * @return string |
|
| 73 | + */ |
|
| 74 | + public function login($credentials, $adminLogin = false) |
|
| 75 | + { |
|
| 76 | + if ( ! $user = \Core::users()->first(['email' => $credentials['email']])) |
|
| 77 | + { |
|
| 78 | + \ErrorHandler::loginFailed(); |
|
| 79 | + } |
|
| 80 | + else if ($adminLogin && $user->groups->lists('name')->search('Admin', true) === false) |
|
| 81 | + { |
|
| 82 | + \ErrorHandler::loginFailed(); |
|
| 83 | + } |
|
| 84 | + else if ( ! $adminLogin && $user->groups->lists('name')->search('Admin', true) !== false) |
|
| 85 | + { |
|
| 86 | + \ErrorHandler::loginFailed(); |
|
| 87 | + } |
|
| 88 | + else if ($user->blocked) |
|
| 89 | + { |
|
| 90 | + \ErrorHandler::userIsBlocked(); |
|
| 91 | + } |
|
| 92 | + else if ($token = \JWTAuth::attempt($credentials)) |
|
| 93 | + { |
|
| 94 | + return $token; |
|
| 95 | + } |
|
| 96 | + else |
|
| 97 | + { |
|
| 98 | + \ErrorHandler::loginFailed(); |
|
| 99 | + } |
|
| 100 | + } |
|
| 101 | + |
|
| 102 | + /** |
|
| 103 | + * Handle a registration request. |
|
| 104 | + * |
|
| 105 | + * @param array $credentials |
|
| 106 | + * @return string |
|
| 107 | + */ |
|
| 108 | + public function register($credentials) |
|
| 109 | + { |
|
| 110 | + return \JWTAuth::fromUser(\Core::users()->model->create($credentials)); |
|
| 111 | + } |
|
| 112 | + |
|
| 113 | + /** |
|
| 114 | + * Logout the user. |
|
| 115 | + * |
|
| 116 | + * @return boolean |
|
| 117 | + */ |
|
| 118 | + public function logout() |
|
| 119 | + { |
|
| 120 | + return \JWTAuth::invalidate(\JWTAuth::getToken()); |
|
| 121 | + } |
|
| 122 | + |
|
| 123 | + /** |
|
| 124 | + * Block the user. |
|
| 125 | + * |
|
| 126 | + * @param integer $user_id |
|
| 127 | + * @return object |
|
| 128 | + */ |
|
| 129 | + public function block($user_id) |
|
| 130 | + { |
|
| 131 | + if ( ! $user = \Core::users()->find($user_id)) |
|
| 132 | + { |
|
| 133 | + \ErrorHandler::notFound('user'); |
|
| 134 | + } |
|
| 135 | + if ( ! $this->hasGroup('Admin')) |
|
| 136 | + { |
|
| 137 | + \ErrorHandler::noPermissions(); |
|
| 138 | + } |
|
| 139 | + else if (\JWTAuth::parseToken()->authenticate()->id == $user_id) |
|
| 140 | + { |
|
| 141 | + \ErrorHandler::noPermissions(); |
|
| 142 | + } |
|
| 143 | + else if ($user->groups->lists('name')->search('Admin', true) !== false) |
|
| 144 | + { |
|
| 145 | + \ErrorHandler::noPermissions(); |
|
| 146 | + } |
|
| 147 | + |
|
| 148 | + $user->blocked = 1; |
|
| 149 | + $user->save(); |
|
| 150 | 150 | |
| 151 | - return $user; |
|
| 152 | - } |
|
| 153 | - |
|
| 154 | - /** |
|
| 155 | - * Unblock the user. |
|
| 156 | - * |
|
| 157 | - * @param integer $user_id |
|
| 158 | - * @return object |
|
| 159 | - */ |
|
| 160 | - public function unblock($user_id) |
|
| 161 | - { |
|
| 162 | - if ( ! $this->hasGroup('Admin')) |
|
| 163 | - { |
|
| 164 | - \ErrorHandler::noPermissions(); |
|
| 165 | - } |
|
| 166 | - |
|
| 167 | - $user = \Core::users()->find($user_id); |
|
| 168 | - $user->blocked = 0; |
|
| 169 | - $user->save(); |
|
| 170 | - |
|
| 171 | - return $user; |
|
| 172 | - } |
|
| 173 | - |
|
| 174 | - /** |
|
| 175 | - * Handle the editing of the user profile. |
|
| 176 | - * |
|
| 177 | - * @param array $profile |
|
| 178 | - * @return object |
|
| 179 | - */ |
|
| 180 | - public function editProfile($profile) |
|
| 181 | - { |
|
| 182 | - unset($profile['email']); |
|
| 183 | - unset($profile['password']); |
|
| 184 | - $profile['id'] = \JWTAuth::parseToken()->authenticate()->id; |
|
| 151 | + return $user; |
|
| 152 | + } |
|
| 153 | + |
|
| 154 | + /** |
|
| 155 | + * Unblock the user. |
|
| 156 | + * |
|
| 157 | + * @param integer $user_id |
|
| 158 | + * @return object |
|
| 159 | + */ |
|
| 160 | + public function unblock($user_id) |
|
| 161 | + { |
|
| 162 | + if ( ! $this->hasGroup('Admin')) |
|
| 163 | + { |
|
| 164 | + \ErrorHandler::noPermissions(); |
|
| 165 | + } |
|
| 166 | + |
|
| 167 | + $user = \Core::users()->find($user_id); |
|
| 168 | + $user->blocked = 0; |
|
| 169 | + $user->save(); |
|
| 170 | + |
|
| 171 | + return $user; |
|
| 172 | + } |
|
| 173 | + |
|
| 174 | + /** |
|
| 175 | + * Handle the editing of the user profile. |
|
| 176 | + * |
|
| 177 | + * @param array $profile |
|
| 178 | + * @return object |
|
| 179 | + */ |
|
| 180 | + public function editProfile($profile) |
|
| 181 | + { |
|
| 182 | + unset($profile['email']); |
|
| 183 | + unset($profile['password']); |
|
| 184 | + $profile['id'] = \JWTAuth::parseToken()->authenticate()->id; |
|
| 185 | 185 | |
| 186 | - return $this->save($profile); |
|
| 187 | - } |
|
| 188 | - |
|
| 189 | - /** |
|
| 190 | - * Send a reset link to the given user. |
|
| 191 | - * |
|
| 192 | - * @param string $url |
|
| 193 | - * @param string $email |
|
| 194 | - * @return void |
|
| 195 | - */ |
|
| 196 | - public function sendReset($email, $url) |
|
| 197 | - { |
|
| 198 | - view()->composer('auth.emails.password', function($view) use ($url) { |
|
| 199 | - $view->with(['url' => $url]); |
|
| 200 | - }); |
|
| 201 | - |
|
| 202 | - $response = \Password::sendResetLink($email, function (\Illuminate\Mail\Message $message) { |
|
| 203 | - $message->subject('Your Password Reset Link'); |
|
| 204 | - }); |
|
| 205 | - |
|
| 206 | - switch ($response) |
|
| 207 | - { |
|
| 208 | - case \Password::INVALID_USER: |
|
| 209 | - \ErrorHandler::notFound('email'); |
|
| 210 | - } |
|
| 211 | - } |
|
| 212 | - |
|
| 213 | - /** |
|
| 214 | - * Reset the given user's password. |
|
| 215 | - * |
|
| 216 | - * @param array $credentials |
|
| 217 | - * @return integer |
|
| 218 | - */ |
|
| 219 | - public function resetPassword($credentials) |
|
| 220 | - { |
|
| 221 | - $token = false; |
|
| 222 | - $response = \Password::reset($credentials, function ($user, $password) use (&$token) { |
|
| 223 | - $user->password = bcrypt($password); |
|
| 224 | - $user->save(); |
|
| 225 | - |
|
| 226 | - $token = \JWTAuth::fromUser($user); |
|
| 227 | - }); |
|
| 228 | - |
|
| 229 | - |
|
| 230 | - switch ($response) { |
|
| 231 | - case \Password::PASSWORD_RESET: |
|
| 232 | - return $token; |
|
| 186 | + return $this->save($profile); |
|
| 187 | + } |
|
| 188 | + |
|
| 189 | + /** |
|
| 190 | + * Send a reset link to the given user. |
|
| 191 | + * |
|
| 192 | + * @param string $url |
|
| 193 | + * @param string $email |
|
| 194 | + * @return void |
|
| 195 | + */ |
|
| 196 | + public function sendReset($email, $url) |
|
| 197 | + { |
|
| 198 | + view()->composer('auth.emails.password', function($view) use ($url) { |
|
| 199 | + $view->with(['url' => $url]); |
|
| 200 | + }); |
|
| 201 | + |
|
| 202 | + $response = \Password::sendResetLink($email, function (\Illuminate\Mail\Message $message) { |
|
| 203 | + $message->subject('Your Password Reset Link'); |
|
| 204 | + }); |
|
| 205 | + |
|
| 206 | + switch ($response) |
|
| 207 | + { |
|
| 208 | + case \Password::INVALID_USER: |
|
| 209 | + \ErrorHandler::notFound('email'); |
|
| 210 | + } |
|
| 211 | + } |
|
| 212 | + |
|
| 213 | + /** |
|
| 214 | + * Reset the given user's password. |
|
| 215 | + * |
|
| 216 | + * @param array $credentials |
|
| 217 | + * @return integer |
|
| 218 | + */ |
|
| 219 | + public function resetPassword($credentials) |
|
| 220 | + { |
|
| 221 | + $token = false; |
|
| 222 | + $response = \Password::reset($credentials, function ($user, $password) use (&$token) { |
|
| 223 | + $user->password = bcrypt($password); |
|
| 224 | + $user->save(); |
|
| 225 | + |
|
| 226 | + $token = \JWTAuth::fromUser($user); |
|
| 227 | + }); |
|
| 228 | + |
|
| 229 | + |
|
| 230 | + switch ($response) { |
|
| 231 | + case \Password::PASSWORD_RESET: |
|
| 232 | + return $token; |
|
| 233 | 233 | |
| 234 | - case \Password::INVALID_TOKEN: |
|
| 235 | - \ErrorHandler::invalidResetToken('token'); |
|
| 234 | + case \Password::INVALID_TOKEN: |
|
| 235 | + \ErrorHandler::invalidResetToken('token'); |
|
| 236 | 236 | |
| 237 | - case \Password::INVALID_PASSWORD: |
|
| 238 | - \ErrorHandler::invalidResetPassword('email'); |
|
| 237 | + case \Password::INVALID_PASSWORD: |
|
| 238 | + \ErrorHandler::invalidResetPassword('email'); |
|
| 239 | 239 | |
| 240 | - case \Password::INVALID_USER: |
|
| 241 | - \ErrorHandler::notFound('user'); |
|
| 240 | + case \Password::INVALID_USER: |
|
| 241 | + \ErrorHandler::notFound('user'); |
|
| 242 | 242 | |
| 243 | - default: |
|
| 244 | - \ErrorHandler::generalError(); |
|
| 245 | - } |
|
| 246 | - } |
|
| 243 | + default: |
|
| 244 | + \ErrorHandler::generalError(); |
|
| 245 | + } |
|
| 246 | + } |
|
| 247 | 247 | } |
@@ -76,24 +76,19 @@ discard block |
||
| 76 | 76 | if ( ! $user = \Core::users()->first(['email' => $credentials['email']])) |
| 77 | 77 | { |
| 78 | 78 | \ErrorHandler::loginFailed(); |
| 79 | - } |
|
| 80 | - else if ($adminLogin && $user->groups->lists('name')->search('Admin', true) === false) |
|
| 79 | + } else if ($adminLogin && $user->groups->lists('name')->search('Admin', true) === false) |
|
| 81 | 80 | { |
| 82 | 81 | \ErrorHandler::loginFailed(); |
| 83 | - } |
|
| 84 | - else if ( ! $adminLogin && $user->groups->lists('name')->search('Admin', true) !== false) |
|
| 82 | + } else if ( ! $adminLogin && $user->groups->lists('name')->search('Admin', true) !== false) |
|
| 85 | 83 | { |
| 86 | 84 | \ErrorHandler::loginFailed(); |
| 87 | - } |
|
| 88 | - else if ($user->blocked) |
|
| 85 | + } else if ($user->blocked) |
|
| 89 | 86 | { |
| 90 | 87 | \ErrorHandler::userIsBlocked(); |
| 91 | - } |
|
| 92 | - else if ($token = \JWTAuth::attempt($credentials)) |
|
| 88 | + } else if ($token = \JWTAuth::attempt($credentials)) |
|
| 93 | 89 | { |
| 94 | 90 | return $token; |
| 95 | - } |
|
| 96 | - else |
|
| 91 | + } else |
|
| 97 | 92 | { |
| 98 | 93 | \ErrorHandler::loginFailed(); |
| 99 | 94 | } |
@@ -135,12 +130,10 @@ discard block |
||
| 135 | 130 | if ( ! $this->hasGroup('Admin')) |
| 136 | 131 | { |
| 137 | 132 | \ErrorHandler::noPermissions(); |
| 138 | - } |
|
| 139 | - else if (\JWTAuth::parseToken()->authenticate()->id == $user_id) |
|
| 133 | + } else if (\JWTAuth::parseToken()->authenticate()->id == $user_id) |
|
| 140 | 134 | { |
| 141 | 135 | \ErrorHandler::noPermissions(); |
| 142 | - } |
|
| 143 | - else if ($user->groups->lists('name')->search('Admin', true) !== false) |
|
| 136 | + } else if ($user->groups->lists('name')->search('Admin', true) !== false) |
|
| 144 | 137 | { |
| 145 | 138 | \ErrorHandler::noPermissions(); |
| 146 | 139 | } |
@@ -2,81 +2,81 @@ |
||
| 2 | 2 | |
| 3 | 3 | class ErrorHandler |
| 4 | 4 | { |
| 5 | - public function unAuthorized() |
|
| 6 | - { |
|
| 7 | - $error = ['status' => 401, 'message' => 'Please login before any action']; |
|
| 8 | - abort($error['status'], $error['message']); |
|
| 9 | - } |
|
| 5 | + public function unAuthorized() |
|
| 6 | + { |
|
| 7 | + $error = ['status' => 401, 'message' => 'Please login before any action']; |
|
| 8 | + abort($error['status'], $error['message']); |
|
| 9 | + } |
|
| 10 | 10 | |
| 11 | - public function tokenExpired() |
|
| 12 | - { |
|
| 13 | - $error = ['status' => 403, 'message' => 'Login token expired']; |
|
| 14 | - abort($error['status'], $error['message']); |
|
| 15 | - } |
|
| 11 | + public function tokenExpired() |
|
| 12 | + { |
|
| 13 | + $error = ['status' => 403, 'message' => 'Login token expired']; |
|
| 14 | + abort($error['status'], $error['message']); |
|
| 15 | + } |
|
| 16 | 16 | |
| 17 | - public function noPermissions() |
|
| 18 | - { |
|
| 19 | - $error = ['status' => 403, 'message' => 'No permissions']; |
|
| 20 | - abort($error['status'], $error['message']); |
|
| 21 | - } |
|
| 17 | + public function noPermissions() |
|
| 18 | + { |
|
| 19 | + $error = ['status' => 403, 'message' => 'No permissions']; |
|
| 20 | + abort($error['status'], $error['message']); |
|
| 21 | + } |
|
| 22 | 22 | |
| 23 | - public function loginFailed() |
|
| 24 | - { |
|
| 25 | - $error = ['status' => 400, 'message' => 'Wrong mail or password']; |
|
| 26 | - abort($error['status'], $error['message']); |
|
| 27 | - } |
|
| 23 | + public function loginFailed() |
|
| 24 | + { |
|
| 25 | + $error = ['status' => 400, 'message' => 'Wrong mail or password']; |
|
| 26 | + abort($error['status'], $error['message']); |
|
| 27 | + } |
|
| 28 | 28 | |
| 29 | - public function redisNotRunning() |
|
| 30 | - { |
|
| 31 | - $error = ['status' => 400, 'message' => 'Your redis notification server isn\'t running']; |
|
| 32 | - abort($error['status'], $error['message']); |
|
| 33 | - } |
|
| 29 | + public function redisNotRunning() |
|
| 30 | + { |
|
| 31 | + $error = ['status' => 400, 'message' => 'Your redis notification server isn\'t running']; |
|
| 32 | + abort($error['status'], $error['message']); |
|
| 33 | + } |
|
| 34 | 34 | |
| 35 | - public function dbQueryError() |
|
| 36 | - { |
|
| 37 | - $error = ['status' => 400, 'message' => 'Please check the given inputes']; |
|
| 38 | - abort($error['status'], $error['message']); |
|
| 39 | - } |
|
| 35 | + public function dbQueryError() |
|
| 36 | + { |
|
| 37 | + $error = ['status' => 400, 'message' => 'Please check the given inputes']; |
|
| 38 | + abort($error['status'], $error['message']); |
|
| 39 | + } |
|
| 40 | 40 | |
| 41 | - public function cannotCreateSetting() |
|
| 42 | - { |
|
| 43 | - $error = ['status' => 400, 'message' => 'Can\'t create setting']; |
|
| 44 | - abort($error['status'], $error['message']); |
|
| 45 | - } |
|
| 41 | + public function cannotCreateSetting() |
|
| 42 | + { |
|
| 43 | + $error = ['status' => 400, 'message' => 'Can\'t create setting']; |
|
| 44 | + abort($error['status'], $error['message']); |
|
| 45 | + } |
|
| 46 | 46 | |
| 47 | - public function cannotUpdateSettingKey() |
|
| 48 | - { |
|
| 49 | - $error = ['status' => 400, 'message' => 'Can\'t update setting key']; |
|
| 50 | - abort($error['status'], $error['message']); |
|
| 51 | - } |
|
| 47 | + public function cannotUpdateSettingKey() |
|
| 48 | + { |
|
| 49 | + $error = ['status' => 400, 'message' => 'Can\'t update setting key']; |
|
| 50 | + abort($error['status'], $error['message']); |
|
| 51 | + } |
|
| 52 | 52 | |
| 53 | - public function userIsBlocked() |
|
| 54 | - { |
|
| 55 | - $error = ['status' => 403, 'message' => 'You have been blocked']; |
|
| 56 | - abort($error['status'], $error['message']); |
|
| 57 | - } |
|
| 53 | + public function userIsBlocked() |
|
| 54 | + { |
|
| 55 | + $error = ['status' => 403, 'message' => 'You have been blocked']; |
|
| 56 | + abort($error['status'], $error['message']); |
|
| 57 | + } |
|
| 58 | 58 | |
| 59 | - public function invalidResetToken() |
|
| 60 | - { |
|
| 61 | - $error = ['status' => 400, 'message' => 'Reset password token is invalid']; |
|
| 62 | - abort($error['status'], $error['message']); |
|
| 63 | - } |
|
| 59 | + public function invalidResetToken() |
|
| 60 | + { |
|
| 61 | + $error = ['status' => 400, 'message' => 'Reset password token is invalid']; |
|
| 62 | + abort($error['status'], $error['message']); |
|
| 63 | + } |
|
| 64 | 64 | |
| 65 | - public function invalidResetPassword() |
|
| 66 | - { |
|
| 67 | - $error = ['status' => 400, 'message' => 'Reset password is invalid']; |
|
| 68 | - abort($error['status'], $error['message']); |
|
| 69 | - } |
|
| 65 | + public function invalidResetPassword() |
|
| 66 | + { |
|
| 67 | + $error = ['status' => 400, 'message' => 'Reset password is invalid']; |
|
| 68 | + abort($error['status'], $error['message']); |
|
| 69 | + } |
|
| 70 | 70 | |
| 71 | - public function notFound($text) |
|
| 72 | - { |
|
| 73 | - $error = ['status' => 404, 'message' => 'The requested ' . $text . ' not found']; |
|
| 74 | - abort($error['status'], $error['message']); |
|
| 75 | - } |
|
| 71 | + public function notFound($text) |
|
| 72 | + { |
|
| 73 | + $error = ['status' => 404, 'message' => 'The requested ' . $text . ' not found']; |
|
| 74 | + abort($error['status'], $error['message']); |
|
| 75 | + } |
|
| 76 | 76 | |
| 77 | - public function generalError() |
|
| 78 | - { |
|
| 79 | - $error = ['status' => 404, 'message' => 'Something went wrong']; |
|
| 80 | - abort($error['status'], $error['message']); |
|
| 81 | - } |
|
| 77 | + public function generalError() |
|
| 78 | + { |
|
| 79 | + $error = ['status' => 404, 'message' => 'Something went wrong']; |
|
| 80 | + abort($error['status'], $error['message']); |
|
| 81 | + } |
|
| 82 | 82 | } |
| 83 | 83 | \ No newline at end of file |
@@ -70,7 +70,7 @@ |
||
| 70 | 70 | |
| 71 | 71 | public function notFound($text) |
| 72 | 72 | { |
| 73 | - $error = ['status' => 404, 'message' => 'The requested ' . $text . ' not found']; |
|
| 73 | + $error = ['status' => 404, 'message' => 'The requested '.$text.' not found']; |
|
| 74 | 74 | abort($error['status'], $error['message']); |
| 75 | 75 | } |
| 76 | 76 | |
@@ -12,7 +12,7 @@ discard block |
||
| 12 | 12 | * to preform actions like (add, edit ... etc). |
| 13 | 13 | * @var string |
| 14 | 14 | */ |
| 15 | - protected $model = 'users'; |
|
| 15 | + protected $model = 'users'; |
|
| 16 | 16 | |
| 17 | 17 | /** |
| 18 | 18 | * List of all route actions that the base api controller |
@@ -26,14 +26,14 @@ discard block |
||
| 26 | 26 | * will skip login check for them. |
| 27 | 27 | * @var array |
| 28 | 28 | */ |
| 29 | - protected $skipLoginCheck = ['login', 'register', 'sendreset', 'resetpassword']; |
|
| 29 | + protected $skipLoginCheck = ['login', 'register', 'sendreset', 'resetpassword']; |
|
| 30 | 30 | |
| 31 | 31 | /** |
| 32 | 32 | * The validations rules used by the base api controller |
| 33 | 33 | * to check before add. |
| 34 | 34 | * @var array |
| 35 | 35 | */ |
| 36 | - protected $validationRules = [ |
|
| 36 | + protected $validationRules = [ |
|
| 37 | 37 | 'email' => 'required|email|unique:users,email,{id}', |
| 38 | 38 | 'password' => 'min:6' |
| 39 | 39 | ]; |
@@ -7,168 +7,168 @@ |
||
| 7 | 7 | |
| 8 | 8 | class UsersController extends BaseApiController |
| 9 | 9 | { |
| 10 | - /** |
|
| 11 | - * The name of the model that is used by the base api controller |
|
| 12 | - * to preform actions like (add, edit ... etc). |
|
| 13 | - * @var string |
|
| 14 | - */ |
|
| 15 | - protected $model = 'users'; |
|
| 16 | - |
|
| 17 | - /** |
|
| 18 | - * List of all route actions that the base api controller |
|
| 19 | - * will skip permissions check for them. |
|
| 20 | - * @var array |
|
| 21 | - */ |
|
| 22 | - protected $skipPermissionCheck = ['account', 'logout', 'block', 'unblock', 'editprofile', 'sendreset']; |
|
| 23 | - |
|
| 24 | - /** |
|
| 25 | - * List of all route actions that the base api controller |
|
| 26 | - * will skip login check for them. |
|
| 27 | - * @var array |
|
| 28 | - */ |
|
| 29 | - protected $skipLoginCheck = ['login', 'register', 'sendreset', 'resetpassword']; |
|
| 30 | - |
|
| 31 | - /** |
|
| 32 | - * The validations rules used by the base api controller |
|
| 33 | - * to check before add. |
|
| 34 | - * @var array |
|
| 35 | - */ |
|
| 36 | - protected $validationRules = [ |
|
| 37 | - 'email' => 'required|email|unique:users,email,{id}', |
|
| 38 | - 'password' => 'min:6' |
|
| 39 | - ]; |
|
| 40 | - |
|
| 41 | - /** |
|
| 42 | - * Return the logged in user account. |
|
| 43 | - * |
|
| 44 | - * @return \Illuminate\Http\Response |
|
| 45 | - */ |
|
| 46 | - public function account() |
|
| 47 | - { |
|
| 48 | - $relations = $this->relations && $this->relations['find'] ? $this->relations['find'] : []; |
|
| 49 | - return \Response::json(call_user_func_array("\Core::{$this->model}", [])->find(\JWTAuth::parseToken()->authenticate()->id, $relations), 200); |
|
| 50 | - } |
|
| 51 | - |
|
| 52 | - /** |
|
| 53 | - * Block the user. |
|
| 54 | - * |
|
| 55 | - * @param integer $id |
|
| 56 | - * @return \Illuminate\Http\Response |
|
| 57 | - */ |
|
| 58 | - public function block($id) |
|
| 59 | - { |
|
| 60 | - return \Response::json(\Core::users()->block($id), 200); |
|
| 61 | - } |
|
| 62 | - |
|
| 63 | - /** |
|
| 64 | - * Unblock the user. |
|
| 65 | - * |
|
| 66 | - * @param integer $id |
|
| 67 | - * @return \Illuminate\Http\Response |
|
| 68 | - */ |
|
| 69 | - public function unblock($id) |
|
| 70 | - { |
|
| 71 | - return \Response::json(\Core::users()->unblock($id), 200); |
|
| 72 | - } |
|
| 73 | - |
|
| 74 | - /** |
|
| 75 | - * Logout the user. |
|
| 76 | - * |
|
| 77 | - * @return \Illuminate\Http\Response |
|
| 78 | - */ |
|
| 79 | - public function logout() |
|
| 80 | - { |
|
| 81 | - return \Response::json(\Core::users()->logout(), 200); |
|
| 82 | - } |
|
| 83 | - |
|
| 84 | - /** |
|
| 85 | - * Handle a registration request. |
|
| 86 | - * |
|
| 87 | - * @param \Illuminate\Http\Request $request |
|
| 88 | - * @return \Illuminate\Http\Response |
|
| 89 | - */ |
|
| 90 | - public function register(Request $request) |
|
| 91 | - { |
|
| 92 | - $this->validate($request, [ |
|
| 93 | - 'email' => 'email|unique:users,email,{id}', |
|
| 94 | - 'password' => 'min:6' |
|
| 95 | - ]); |
|
| 96 | - |
|
| 97 | - return \Response::json(\Core::users()->register($request->only('email', 'password')), 200); |
|
| 98 | - } |
|
| 99 | - |
|
| 100 | - /** |
|
| 101 | - * Handle a login request of the none admin to the application. |
|
| 102 | - * |
|
| 103 | - * @param \Illuminate\Http\Request $request |
|
| 104 | - * @return \Illuminate\Http\Response |
|
| 105 | - */ |
|
| 106 | - public function login(Request $request) |
|
| 107 | - { |
|
| 108 | - $this->validate($request, [ |
|
| 109 | - 'email' => 'required|email', |
|
| 110 | - 'password' => 'required|min:6', |
|
| 111 | - 'admin' => 'boolean' |
|
| 112 | - ]); |
|
| 113 | - |
|
| 114 | - return \Response::json(\Core::users()->login($request->only('email', 'password'), $request->get('admin')), 200); |
|
| 115 | - } |
|
| 116 | - |
|
| 117 | - /** |
|
| 118 | - * Handle an assign groups to user request. |
|
| 119 | - * |
|
| 120 | - * @param \Illuminate\Http\Request $request |
|
| 121 | - * @return \Illuminate\Http\Response |
|
| 122 | - */ |
|
| 123 | - public function assigngroups(Request $request) |
|
| 124 | - { |
|
| 125 | - $this->validate($request, [ |
|
| 126 | - 'group_ids' => 'required|exists:groups,id', |
|
| 127 | - 'user_id' => 'required|exists:users,id' |
|
| 128 | - ]); |
|
| 129 | - |
|
| 130 | - return \Response::json(\Core::users()->assignGroups($request->get('user_id'), $request->get('group_ids')), 200); |
|
| 131 | - } |
|
| 132 | - |
|
| 133 | - /** |
|
| 134 | - * Handle the editing of the user profile. |
|
| 135 | - * |
|
| 136 | - * @param \Illuminate\Http\Request $request |
|
| 137 | - * @return \Illuminate\Http\Response |
|
| 138 | - */ |
|
| 139 | - public function editprofile(Request $request) |
|
| 140 | - { |
|
| 141 | - return \Response::json(\Core::users()->editProfile($request->all()), 200); |
|
| 142 | - } |
|
| 143 | - |
|
| 144 | - /** |
|
| 145 | - * Send a reset link to the given user. |
|
| 146 | - * |
|
| 147 | - * @param \Illuminate\Http\Request $request |
|
| 148 | - * @return \Illuminate\Http\Response |
|
| 149 | - */ |
|
| 150 | - public function sendreset(Request $request) |
|
| 151 | - { |
|
| 152 | - $this->validate($request, ['email' => 'required|email', 'url' => 'required|url']); |
|
| 153 | - |
|
| 154 | - return \Response::json(\Core::users()->sendReset($request->only('email'), $request->get('url')), 200); |
|
| 155 | - } |
|
| 156 | - |
|
| 157 | - /** |
|
| 158 | - * Reset the given user's password. |
|
| 159 | - * |
|
| 160 | - * @param \Illuminate\Http\Request $request |
|
| 161 | - * @return \Illuminate\Http\Response |
|
| 162 | - */ |
|
| 163 | - public function resetpassword(Request $request) |
|
| 164 | - { |
|
| 165 | - $this->validate($request, [ |
|
| 166 | - 'token' => 'required', |
|
| 167 | - 'email' => 'required|email', |
|
| 168 | - 'password' => 'required|confirmed|min:6', |
|
| 169 | - 'password_confirmation' => 'required', |
|
| 170 | - ]); |
|
| 171 | - |
|
| 172 | - return \Response::json(\Core::users()->resetPassword($request->only('email', 'password', 'password_confirmation', 'token')), 200); |
|
| 173 | - } |
|
| 10 | + /** |
|
| 11 | + * The name of the model that is used by the base api controller |
|
| 12 | + * to preform actions like (add, edit ... etc). |
|
| 13 | + * @var string |
|
| 14 | + */ |
|
| 15 | + protected $model = 'users'; |
|
| 16 | + |
|
| 17 | + /** |
|
| 18 | + * List of all route actions that the base api controller |
|
| 19 | + * will skip permissions check for them. |
|
| 20 | + * @var array |
|
| 21 | + */ |
|
| 22 | + protected $skipPermissionCheck = ['account', 'logout', 'block', 'unblock', 'editprofile', 'sendreset']; |
|
| 23 | + |
|
| 24 | + /** |
|
| 25 | + * List of all route actions that the base api controller |
|
| 26 | + * will skip login check for them. |
|
| 27 | + * @var array |
|
| 28 | + */ |
|
| 29 | + protected $skipLoginCheck = ['login', 'register', 'sendreset', 'resetpassword']; |
|
| 30 | + |
|
| 31 | + /** |
|
| 32 | + * The validations rules used by the base api controller |
|
| 33 | + * to check before add. |
|
| 34 | + * @var array |
|
| 35 | + */ |
|
| 36 | + protected $validationRules = [ |
|
| 37 | + 'email' => 'required|email|unique:users,email,{id}', |
|
| 38 | + 'password' => 'min:6' |
|
| 39 | + ]; |
|
| 40 | + |
|
| 41 | + /** |
|
| 42 | + * Return the logged in user account. |
|
| 43 | + * |
|
| 44 | + * @return \Illuminate\Http\Response |
|
| 45 | + */ |
|
| 46 | + public function account() |
|
| 47 | + { |
|
| 48 | + $relations = $this->relations && $this->relations['find'] ? $this->relations['find'] : []; |
|
| 49 | + return \Response::json(call_user_func_array("\Core::{$this->model}", [])->find(\JWTAuth::parseToken()->authenticate()->id, $relations), 200); |
|
| 50 | + } |
|
| 51 | + |
|
| 52 | + /** |
|
| 53 | + * Block the user. |
|
| 54 | + * |
|
| 55 | + * @param integer $id |
|
| 56 | + * @return \Illuminate\Http\Response |
|
| 57 | + */ |
|
| 58 | + public function block($id) |
|
| 59 | + { |
|
| 60 | + return \Response::json(\Core::users()->block($id), 200); |
|
| 61 | + } |
|
| 62 | + |
|
| 63 | + /** |
|
| 64 | + * Unblock the user. |
|
| 65 | + * |
|
| 66 | + * @param integer $id |
|
| 67 | + * @return \Illuminate\Http\Response |
|
| 68 | + */ |
|
| 69 | + public function unblock($id) |
|
| 70 | + { |
|
| 71 | + return \Response::json(\Core::users()->unblock($id), 200); |
|
| 72 | + } |
|
| 73 | + |
|
| 74 | + /** |
|
| 75 | + * Logout the user. |
|
| 76 | + * |
|
| 77 | + * @return \Illuminate\Http\Response |
|
| 78 | + */ |
|
| 79 | + public function logout() |
|
| 80 | + { |
|
| 81 | + return \Response::json(\Core::users()->logout(), 200); |
|
| 82 | + } |
|
| 83 | + |
|
| 84 | + /** |
|
| 85 | + * Handle a registration request. |
|
| 86 | + * |
|
| 87 | + * @param \Illuminate\Http\Request $request |
|
| 88 | + * @return \Illuminate\Http\Response |
|
| 89 | + */ |
|
| 90 | + public function register(Request $request) |
|
| 91 | + { |
|
| 92 | + $this->validate($request, [ |
|
| 93 | + 'email' => 'email|unique:users,email,{id}', |
|
| 94 | + 'password' => 'min:6' |
|
| 95 | + ]); |
|
| 96 | + |
|
| 97 | + return \Response::json(\Core::users()->register($request->only('email', 'password')), 200); |
|
| 98 | + } |
|
| 99 | + |
|
| 100 | + /** |
|
| 101 | + * Handle a login request of the none admin to the application. |
|
| 102 | + * |
|
| 103 | + * @param \Illuminate\Http\Request $request |
|
| 104 | + * @return \Illuminate\Http\Response |
|
| 105 | + */ |
|
| 106 | + public function login(Request $request) |
|
| 107 | + { |
|
| 108 | + $this->validate($request, [ |
|
| 109 | + 'email' => 'required|email', |
|
| 110 | + 'password' => 'required|min:6', |
|
| 111 | + 'admin' => 'boolean' |
|
| 112 | + ]); |
|
| 113 | + |
|
| 114 | + return \Response::json(\Core::users()->login($request->only('email', 'password'), $request->get('admin')), 200); |
|
| 115 | + } |
|
| 116 | + |
|
| 117 | + /** |
|
| 118 | + * Handle an assign groups to user request. |
|
| 119 | + * |
|
| 120 | + * @param \Illuminate\Http\Request $request |
|
| 121 | + * @return \Illuminate\Http\Response |
|
| 122 | + */ |
|
| 123 | + public function assigngroups(Request $request) |
|
| 124 | + { |
|
| 125 | + $this->validate($request, [ |
|
| 126 | + 'group_ids' => 'required|exists:groups,id', |
|
| 127 | + 'user_id' => 'required|exists:users,id' |
|
| 128 | + ]); |
|
| 129 | + |
|
| 130 | + return \Response::json(\Core::users()->assignGroups($request->get('user_id'), $request->get('group_ids')), 200); |
|
| 131 | + } |
|
| 132 | + |
|
| 133 | + /** |
|
| 134 | + * Handle the editing of the user profile. |
|
| 135 | + * |
|
| 136 | + * @param \Illuminate\Http\Request $request |
|
| 137 | + * @return \Illuminate\Http\Response |
|
| 138 | + */ |
|
| 139 | + public function editprofile(Request $request) |
|
| 140 | + { |
|
| 141 | + return \Response::json(\Core::users()->editProfile($request->all()), 200); |
|
| 142 | + } |
|
| 143 | + |
|
| 144 | + /** |
|
| 145 | + * Send a reset link to the given user. |
|
| 146 | + * |
|
| 147 | + * @param \Illuminate\Http\Request $request |
|
| 148 | + * @return \Illuminate\Http\Response |
|
| 149 | + */ |
|
| 150 | + public function sendreset(Request $request) |
|
| 151 | + { |
|
| 152 | + $this->validate($request, ['email' => 'required|email', 'url' => 'required|url']); |
|
| 153 | + |
|
| 154 | + return \Response::json(\Core::users()->sendReset($request->only('email'), $request->get('url')), 200); |
|
| 155 | + } |
|
| 156 | + |
|
| 157 | + /** |
|
| 158 | + * Reset the given user's password. |
|
| 159 | + * |
|
| 160 | + * @param \Illuminate\Http\Request $request |
|
| 161 | + * @return \Illuminate\Http\Response |
|
| 162 | + */ |
|
| 163 | + public function resetpassword(Request $request) |
|
| 164 | + { |
|
| 165 | + $this->validate($request, [ |
|
| 166 | + 'token' => 'required', |
|
| 167 | + 'email' => 'required|email', |
|
| 168 | + 'password' => 'required|confirmed|min:6', |
|
| 169 | + 'password_confirmation' => 'required', |
|
| 170 | + ]); |
|
| 171 | + |
|
| 172 | + return \Response::json(\Core::users()->resetPassword($request->only('email', 'password', 'password_confirmation', 'token')), 200); |
|
| 173 | + } |
|
| 174 | 174 | } |
@@ -5,27 +5,27 @@ |
||
| 5 | 5 | |
| 6 | 6 | class PasswordResets extends Migration |
| 7 | 7 | { |
| 8 | - /** |
|
| 9 | - * Run the migrations. |
|
| 10 | - * |
|
| 11 | - * @return void |
|
| 12 | - */ |
|
| 13 | - public function up() |
|
| 14 | - { |
|
| 15 | - Schema::create('password_resets', function (Blueprint $table) { |
|
| 16 | - $table->string('email')->index(); |
|
| 17 | - $table->string('token')->index(); |
|
| 18 | - $table->timestamp('created_at'); |
|
| 19 | - }); |
|
| 20 | - } |
|
| 8 | + /** |
|
| 9 | + * Run the migrations. |
|
| 10 | + * |
|
| 11 | + * @return void |
|
| 12 | + */ |
|
| 13 | + public function up() |
|
| 14 | + { |
|
| 15 | + Schema::create('password_resets', function (Blueprint $table) { |
|
| 16 | + $table->string('email')->index(); |
|
| 17 | + $table->string('token')->index(); |
|
| 18 | + $table->timestamp('created_at'); |
|
| 19 | + }); |
|
| 20 | + } |
|
| 21 | 21 | |
| 22 | - /** |
|
| 23 | - * Reverse the migrations. |
|
| 24 | - * |
|
| 25 | - * @return void |
|
| 26 | - */ |
|
| 27 | - public function down() |
|
| 28 | - { |
|
| 29 | - Schema::drop('password_resets'); |
|
| 30 | - } |
|
| 22 | + /** |
|
| 23 | + * Reverse the migrations. |
|
| 24 | + * |
|
| 25 | + * @return void |
|
| 26 | + */ |
|
| 27 | + public function down() |
|
| 28 | + { |
|
| 29 | + Schema::drop('password_resets'); |
|
| 30 | + } |
|
| 31 | 31 | } |
@@ -12,7 +12,7 @@ |
||
| 12 | 12 | */ |
| 13 | 13 | public function up() |
| 14 | 14 | { |
| 15 | - Schema::create('password_resets', function (Blueprint $table) { |
|
| 15 | + Schema::create('password_resets', function(Blueprint $table) { |
|
| 16 | 16 | $table->string('email')->index(); |
| 17 | 17 | $table->string('token')->index(); |
| 18 | 18 | $table->timestamp('created_at'); |