@@ -6,307 +6,307 @@ |
||
6 | 6 | |
7 | 7 | class BaseApiController extends Controller |
8 | 8 | { |
9 | - /** |
|
10 | - * The config implementation. |
|
11 | - * |
|
12 | - * @var array |
|
13 | - */ |
|
14 | - protected $config; |
|
9 | + /** |
|
10 | + * The config implementation. |
|
11 | + * |
|
12 | + * @var array |
|
13 | + */ |
|
14 | + protected $config; |
|
15 | 15 | |
16 | - /** |
|
17 | - * The relations implementation. |
|
18 | - * |
|
19 | - * @var array |
|
20 | - */ |
|
21 | - protected $relations; |
|
16 | + /** |
|
17 | + * The relations implementation. |
|
18 | + * |
|
19 | + * @var array |
|
20 | + */ |
|
21 | + protected $relations; |
|
22 | 22 | |
23 | - /** |
|
24 | - * The repo implementation. |
|
25 | - * |
|
26 | - * @var object |
|
27 | - */ |
|
28 | - protected $repo; |
|
23 | + /** |
|
24 | + * The repo implementation. |
|
25 | + * |
|
26 | + * @var object |
|
27 | + */ |
|
28 | + protected $repo; |
|
29 | 29 | |
30 | - public function __construct() |
|
31 | - { |
|
32 | - $this->config = \CoreConfig::getConfig(); |
|
33 | - $this->model = property_exists($this, 'model') ? $this->model : false; |
|
34 | - $this->validationRules = property_exists($this, 'validationRules') ? $this->validationRules : false; |
|
35 | - $this->skipPermissionCheck = property_exists($this, 'skipPermissionCheck') ? $this->skipPermissionCheck : []; |
|
36 | - $this->skipLoginCheck = property_exists($this, 'skipLoginCheck') ? $this->skipLoginCheck : []; |
|
37 | - $this->repo = call_user_func_array("\Core::{$this->model}", []); |
|
38 | - $route = explode('@',\Route::currentRouteAction())[1]; |
|
30 | + public function __construct() |
|
31 | + { |
|
32 | + $this->config = \CoreConfig::getConfig(); |
|
33 | + $this->model = property_exists($this, 'model') ? $this->model : false; |
|
34 | + $this->validationRules = property_exists($this, 'validationRules') ? $this->validationRules : false; |
|
35 | + $this->skipPermissionCheck = property_exists($this, 'skipPermissionCheck') ? $this->skipPermissionCheck : []; |
|
36 | + $this->skipLoginCheck = property_exists($this, 'skipLoginCheck') ? $this->skipLoginCheck : []; |
|
37 | + $this->repo = call_user_func_array("\Core::{$this->model}", []); |
|
38 | + $route = explode('@',\Route::currentRouteAction())[1]; |
|
39 | 39 | |
40 | - $this->checkPermission($route); |
|
41 | - $this->setRelations($route); |
|
42 | - $this->setSessions(); |
|
43 | - } |
|
40 | + $this->checkPermission($route); |
|
41 | + $this->setRelations($route); |
|
42 | + $this->setSessions(); |
|
43 | + } |
|
44 | 44 | |
45 | - /** |
|
46 | - * Fetch all records with relations from storage. |
|
47 | - * |
|
48 | - * @param string $sortBy The name of the column to sort by. |
|
49 | - * @param boolean $desc Sort ascending or descinding (1: desc, 0: asc). |
|
50 | - * @return \Illuminate\Http\Response |
|
51 | - */ |
|
52 | - public function index($sortBy = 'created_at', $desc = 1) |
|
53 | - { |
|
54 | - if ($this->repo) |
|
55 | - { |
|
56 | - return \Response::json($this->repo->all($this->relations, $sortBy, $desc), 200); |
|
57 | - } |
|
58 | - } |
|
45 | + /** |
|
46 | + * Fetch all records with relations from storage. |
|
47 | + * |
|
48 | + * @param string $sortBy The name of the column to sort by. |
|
49 | + * @param boolean $desc Sort ascending or descinding (1: desc, 0: asc). |
|
50 | + * @return \Illuminate\Http\Response |
|
51 | + */ |
|
52 | + public function index($sortBy = 'created_at', $desc = 1) |
|
53 | + { |
|
54 | + if ($this->repo) |
|
55 | + { |
|
56 | + return \Response::json($this->repo->all($this->relations, $sortBy, $desc), 200); |
|
57 | + } |
|
58 | + } |
|
59 | 59 | |
60 | - /** |
|
61 | - * Fetch the single object with relations from storage. |
|
62 | - * |
|
63 | - * @param integer $id Id of the requested model. |
|
64 | - * @return \Illuminate\Http\Response |
|
65 | - */ |
|
66 | - public function find($id) |
|
67 | - { |
|
68 | - if ($this->repo) |
|
69 | - { |
|
70 | - return \Response::json($this->repo->find($id, $this->relations), 200); |
|
71 | - } |
|
72 | - } |
|
60 | + /** |
|
61 | + * Fetch the single object with relations from storage. |
|
62 | + * |
|
63 | + * @param integer $id Id of the requested model. |
|
64 | + * @return \Illuminate\Http\Response |
|
65 | + */ |
|
66 | + public function find($id) |
|
67 | + { |
|
68 | + if ($this->repo) |
|
69 | + { |
|
70 | + return \Response::json($this->repo->find($id, $this->relations), 200); |
|
71 | + } |
|
72 | + } |
|
73 | 73 | |
74 | - /** |
|
75 | - * Paginate all records with relations from storage |
|
76 | - * that matche the given query. |
|
77 | - * |
|
78 | - * @param string $query The search text. |
|
79 | - * @param integer $perPage Number of rows per page default 15. |
|
80 | - * @param string $sortBy The name of the column to sort by. |
|
81 | - * @param boolean $desc Sort ascending or descinding (1: desc, 0: asc). |
|
82 | - * @return \Illuminate\Http\Response |
|
83 | - */ |
|
84 | - public function search($query = '', $perPage = 15, $sortBy = 'created_at', $desc = 1) |
|
85 | - { |
|
86 | - if ($this->repo) |
|
87 | - { |
|
88 | - return \Response::json($this->repo->search($query, $perPage, $this->relations, $sortBy, $desc), 200); |
|
89 | - } |
|
90 | - } |
|
74 | + /** |
|
75 | + * Paginate all records with relations from storage |
|
76 | + * that matche the given query. |
|
77 | + * |
|
78 | + * @param string $query The search text. |
|
79 | + * @param integer $perPage Number of rows per page default 15. |
|
80 | + * @param string $sortBy The name of the column to sort by. |
|
81 | + * @param boolean $desc Sort ascending or descinding (1: desc, 0: asc). |
|
82 | + * @return \Illuminate\Http\Response |
|
83 | + */ |
|
84 | + public function search($query = '', $perPage = 15, $sortBy = 'created_at', $desc = 1) |
|
85 | + { |
|
86 | + if ($this->repo) |
|
87 | + { |
|
88 | + return \Response::json($this->repo->search($query, $perPage, $this->relations, $sortBy, $desc), 200); |
|
89 | + } |
|
90 | + } |
|
91 | 91 | |
92 | - /** |
|
93 | - * Fetch records from the storage based on the given |
|
94 | - * condition. |
|
95 | - * |
|
96 | - * @param \Illuminate\Http\Request $request |
|
97 | - * @param string $sortBy The name of the column to sort by. |
|
98 | - * @param boolean $desc Sort ascending or descinding (1: desc, 0: asc). |
|
99 | - * @return \Illuminate\Http\Response |
|
100 | - */ |
|
101 | - public function findby(Request $request, $sortBy = 'created_at', $desc = 1) |
|
102 | - { |
|
103 | - if ($this->repo) |
|
104 | - { |
|
105 | - return \Response::json($this->repo->findBy($request->all(), $this->relations, $sortBy, $desc), 200); |
|
106 | - } |
|
107 | - } |
|
92 | + /** |
|
93 | + * Fetch records from the storage based on the given |
|
94 | + * condition. |
|
95 | + * |
|
96 | + * @param \Illuminate\Http\Request $request |
|
97 | + * @param string $sortBy The name of the column to sort by. |
|
98 | + * @param boolean $desc Sort ascending or descinding (1: desc, 0: asc). |
|
99 | + * @return \Illuminate\Http\Response |
|
100 | + */ |
|
101 | + public function findby(Request $request, $sortBy = 'created_at', $desc = 1) |
|
102 | + { |
|
103 | + if ($this->repo) |
|
104 | + { |
|
105 | + return \Response::json($this->repo->findBy($request->all(), $this->relations, $sortBy, $desc), 200); |
|
106 | + } |
|
107 | + } |
|
108 | 108 | |
109 | - /** |
|
110 | - * Fetch the first record from the storage based on the given |
|
111 | - * condition. |
|
112 | - * |
|
113 | - * @param \Illuminate\Http\Request $request |
|
114 | - * @return \Illuminate\Http\Response |
|
115 | - */ |
|
116 | - public function first(Request $request) |
|
117 | - { |
|
118 | - if ($this->repo) |
|
119 | - { |
|
120 | - return \Response::json($this->repo->first($request->all(), $this->relations), 200); |
|
121 | - } |
|
122 | - } |
|
109 | + /** |
|
110 | + * Fetch the first record from the storage based on the given |
|
111 | + * condition. |
|
112 | + * |
|
113 | + * @param \Illuminate\Http\Request $request |
|
114 | + * @return \Illuminate\Http\Response |
|
115 | + */ |
|
116 | + public function first(Request $request) |
|
117 | + { |
|
118 | + if ($this->repo) |
|
119 | + { |
|
120 | + return \Response::json($this->repo->first($request->all(), $this->relations), 200); |
|
121 | + } |
|
122 | + } |
|
123 | 123 | |
124 | - /** |
|
125 | - * Paginate all records with relations from storage. |
|
126 | - * |
|
127 | - * @param integer $perPage Number of rows per page default 15. |
|
128 | - * @param string $sortBy The name of the column to sort by. |
|
129 | - * @param boolean $desc Sort ascending or descinding (1: desc, 0: asc). |
|
130 | - * @return \Illuminate\Http\Response |
|
131 | - */ |
|
132 | - public function paginate($perPage = 15, $sortBy = 'created_at', $desc = 1) |
|
133 | - { |
|
134 | - if ($this->repo) |
|
135 | - { |
|
136 | - return \Response::json($this->repo->paginate($perPage, $this->relations, $sortBy, $desc), 200); |
|
137 | - } |
|
138 | - } |
|
124 | + /** |
|
125 | + * Paginate all records with relations from storage. |
|
126 | + * |
|
127 | + * @param integer $perPage Number of rows per page default 15. |
|
128 | + * @param string $sortBy The name of the column to sort by. |
|
129 | + * @param boolean $desc Sort ascending or descinding (1: desc, 0: asc). |
|
130 | + * @return \Illuminate\Http\Response |
|
131 | + */ |
|
132 | + public function paginate($perPage = 15, $sortBy = 'created_at', $desc = 1) |
|
133 | + { |
|
134 | + if ($this->repo) |
|
135 | + { |
|
136 | + return \Response::json($this->repo->paginate($perPage, $this->relations, $sortBy, $desc), 200); |
|
137 | + } |
|
138 | + } |
|
139 | 139 | |
140 | - /** |
|
141 | - * Fetch all records with relations based on |
|
142 | - * the given condition from storage in pages. |
|
143 | - * |
|
144 | - * @param \Illuminate\Http\Request $request |
|
145 | - * @param integer $perPage Number of rows per page default 15. |
|
146 | - * @param string $sortBy The name of the column to sort by. |
|
147 | - * @param boolean $desc Sort ascending or descinding (1: desc, 0: asc). |
|
148 | - * @return \Illuminate\Http\Response |
|
149 | - */ |
|
150 | - public function paginateby(Request $request, $perPage = 15, $sortBy = 'created_at', $desc = 1) |
|
151 | - { |
|
152 | - if ($this->repo) |
|
153 | - { |
|
154 | - return \Response::json($this->repo->paginateBy($request->all(), $perPage, $this->relations, $sortBy, $desc), 200); |
|
155 | - } |
|
156 | - } |
|
140 | + /** |
|
141 | + * Fetch all records with relations based on |
|
142 | + * the given condition from storage in pages. |
|
143 | + * |
|
144 | + * @param \Illuminate\Http\Request $request |
|
145 | + * @param integer $perPage Number of rows per page default 15. |
|
146 | + * @param string $sortBy The name of the column to sort by. |
|
147 | + * @param boolean $desc Sort ascending or descinding (1: desc, 0: asc). |
|
148 | + * @return \Illuminate\Http\Response |
|
149 | + */ |
|
150 | + public function paginateby(Request $request, $perPage = 15, $sortBy = 'created_at', $desc = 1) |
|
151 | + { |
|
152 | + if ($this->repo) |
|
153 | + { |
|
154 | + return \Response::json($this->repo->paginateBy($request->all(), $perPage, $this->relations, $sortBy, $desc), 200); |
|
155 | + } |
|
156 | + } |
|
157 | 157 | |
158 | - /** |
|
159 | - * Save the given model to storage. |
|
160 | - * |
|
161 | - * @param \Illuminate\Http\Request $request |
|
162 | - * @return \Illuminate\Http\Response |
|
163 | - */ |
|
164 | - public function save(Request $request) |
|
165 | - { |
|
166 | - foreach ($this->validationRules as &$rule) |
|
167 | - { |
|
168 | - if (strpos($rule, 'exists') && ! strpos($rule, 'deleted_at,NULL')) |
|
169 | - { |
|
170 | - $rule .= ',deleted_at,NULL'; |
|
171 | - } |
|
158 | + /** |
|
159 | + * Save the given model to storage. |
|
160 | + * |
|
161 | + * @param \Illuminate\Http\Request $request |
|
162 | + * @return \Illuminate\Http\Response |
|
163 | + */ |
|
164 | + public function save(Request $request) |
|
165 | + { |
|
166 | + foreach ($this->validationRules as &$rule) |
|
167 | + { |
|
168 | + if (strpos($rule, 'exists') && ! strpos($rule, 'deleted_at,NULL')) |
|
169 | + { |
|
170 | + $rule .= ',deleted_at,NULL'; |
|
171 | + } |
|
172 | 172 | |
173 | - if ($request->has('id')) |
|
174 | - { |
|
175 | - $rule = str_replace('{id}', $request->get('id'), $rule); |
|
176 | - } |
|
177 | - else |
|
178 | - { |
|
179 | - $rule = str_replace(',{id}', '', $rule); |
|
180 | - } |
|
181 | - } |
|
173 | + if ($request->has('id')) |
|
174 | + { |
|
175 | + $rule = str_replace('{id}', $request->get('id'), $rule); |
|
176 | + } |
|
177 | + else |
|
178 | + { |
|
179 | + $rule = str_replace(',{id}', '', $rule); |
|
180 | + } |
|
181 | + } |
|
182 | 182 | |
183 | - $this->validate($request, $this->validationRules); |
|
183 | + $this->validate($request, $this->validationRules); |
|
184 | 184 | |
185 | - if ($this->repo) |
|
186 | - { |
|
187 | - return \Response::json($this->repo->save($request->all()), 200); |
|
188 | - } |
|
189 | - } |
|
185 | + if ($this->repo) |
|
186 | + { |
|
187 | + return \Response::json($this->repo->save($request->all()), 200); |
|
188 | + } |
|
189 | + } |
|
190 | 190 | |
191 | - /** |
|
192 | - * Delete by the given id from storage. |
|
193 | - * |
|
194 | - * @param integer $id Id of the deleted model. |
|
195 | - * @return \Illuminate\Http\Response |
|
196 | - */ |
|
197 | - public function delete($id) |
|
198 | - { |
|
199 | - if ($this->repo) |
|
200 | - { |
|
201 | - return \Response::json($this->repo->delete($id), 200); |
|
202 | - } |
|
203 | - } |
|
191 | + /** |
|
192 | + * Delete by the given id from storage. |
|
193 | + * |
|
194 | + * @param integer $id Id of the deleted model. |
|
195 | + * @return \Illuminate\Http\Response |
|
196 | + */ |
|
197 | + public function delete($id) |
|
198 | + { |
|
199 | + if ($this->repo) |
|
200 | + { |
|
201 | + return \Response::json($this->repo->delete($id), 200); |
|
202 | + } |
|
203 | + } |
|
204 | 204 | |
205 | - /** |
|
206 | - * Return the deleted models in pages based on the given conditions. |
|
207 | - * |
|
208 | - * @param \Illuminate\Http\Request $request |
|
209 | - * @param integer $perPage Number of rows per page default 15. |
|
210 | - * @param string $sortBy The name of the column to sort by. |
|
211 | - * @param boolean $desc Sort ascending or descinding (1: desc, 0: asc). |
|
212 | - * @return \Illuminate\Http\Response |
|
213 | - */ |
|
214 | - public function deleted(Request $request, $perPage = 15, $sortBy = 'created_at', $desc = 1) |
|
215 | - { |
|
216 | - return \Response::json($this->repo->deleted($request->all(), $perPage, $sortBy, $desc), 200); |
|
217 | - } |
|
205 | + /** |
|
206 | + * Return the deleted models in pages based on the given conditions. |
|
207 | + * |
|
208 | + * @param \Illuminate\Http\Request $request |
|
209 | + * @param integer $perPage Number of rows per page default 15. |
|
210 | + * @param string $sortBy The name of the column to sort by. |
|
211 | + * @param boolean $desc Sort ascending or descinding (1: desc, 0: asc). |
|
212 | + * @return \Illuminate\Http\Response |
|
213 | + */ |
|
214 | + public function deleted(Request $request, $perPage = 15, $sortBy = 'created_at', $desc = 1) |
|
215 | + { |
|
216 | + return \Response::json($this->repo->deleted($request->all(), $perPage, $sortBy, $desc), 200); |
|
217 | + } |
|
218 | 218 | |
219 | - /** |
|
220 | - * Restore the deleted model. |
|
221 | - * |
|
222 | - * @param integer $id Id of the restored model. |
|
223 | - * @return \Illuminate\Http\Response |
|
224 | - */ |
|
225 | - public function restore($id) |
|
226 | - { |
|
227 | - if ($this->repo) |
|
228 | - { |
|
229 | - return \Response::json($this->repo->restore($id), 200); |
|
230 | - } |
|
231 | - } |
|
219 | + /** |
|
220 | + * Restore the deleted model. |
|
221 | + * |
|
222 | + * @param integer $id Id of the restored model. |
|
223 | + * @return \Illuminate\Http\Response |
|
224 | + */ |
|
225 | + public function restore($id) |
|
226 | + { |
|
227 | + if ($this->repo) |
|
228 | + { |
|
229 | + return \Response::json($this->repo->restore($id), 200); |
|
230 | + } |
|
231 | + } |
|
232 | 232 | |
233 | - /** |
|
234 | - * Check if the logged in user can do the given permission. |
|
235 | - * |
|
236 | - * @param string $permission |
|
237 | - * @return void |
|
238 | - */ |
|
239 | - private function checkPermission($permission) |
|
240 | - { |
|
241 | - \Auth::shouldUse('api'); |
|
242 | - $this->middleware('auth:api', ['except' => $this->skipLoginCheck]); |
|
233 | + /** |
|
234 | + * Check if the logged in user can do the given permission. |
|
235 | + * |
|
236 | + * @param string $permission |
|
237 | + * @return void |
|
238 | + */ |
|
239 | + private function checkPermission($permission) |
|
240 | + { |
|
241 | + \Auth::shouldUse('api'); |
|
242 | + $this->middleware('auth:api', ['except' => $this->skipLoginCheck]); |
|
243 | 243 | |
244 | - if ($user = \Auth::user()) |
|
245 | - { |
|
246 | - $permission = $permission !== 'index' ? $permission : 'list'; |
|
247 | - $isPasswordClient = $user->token()->client->password_client; |
|
244 | + if ($user = \Auth::user()) |
|
245 | + { |
|
246 | + $permission = $permission !== 'index' ? $permission : 'list'; |
|
247 | + $isPasswordClient = $user->token()->client->password_client; |
|
248 | 248 | |
249 | - if ($user->blocked) |
|
250 | - { |
|
251 | - \ErrorHandler::userIsBlocked(); |
|
252 | - } |
|
249 | + if ($user->blocked) |
|
250 | + { |
|
251 | + \ErrorHandler::userIsBlocked(); |
|
252 | + } |
|
253 | 253 | |
254 | - if ($isPasswordClient && (in_array($permission, $this->skipPermissionCheck) || \Core::users()->can($permission, $this->model))) |
|
255 | - {} |
|
256 | - elseif ( ! $isPasswordClient && $user->tokenCan($this->model . '-' . $permission)) |
|
257 | - {} |
|
258 | - else |
|
259 | - { |
|
254 | + if ($isPasswordClient && (in_array($permission, $this->skipPermissionCheck) || \Core::users()->can($permission, $this->model))) |
|
255 | + {} |
|
256 | + elseif ( ! $isPasswordClient && $user->tokenCan($this->model . '-' . $permission)) |
|
257 | + {} |
|
258 | + else |
|
259 | + { |
|
260 | 260 | |
261 | - \ErrorHandler::noPermissions(); |
|
262 | - } |
|
263 | - } |
|
264 | - } |
|
261 | + \ErrorHandler::noPermissions(); |
|
262 | + } |
|
263 | + } |
|
264 | + } |
|
265 | 265 | |
266 | - /** |
|
267 | - * Set sessions based on the given headers in the request. |
|
268 | - * |
|
269 | - * @return void |
|
270 | - */ |
|
271 | - private function setSessions() |
|
272 | - { |
|
273 | - \Session::put('timeZoneDiff', \Request::header('time-zone-diff') ?: 0); |
|
266 | + /** |
|
267 | + * Set sessions based on the given headers in the request. |
|
268 | + * |
|
269 | + * @return void |
|
270 | + */ |
|
271 | + private function setSessions() |
|
272 | + { |
|
273 | + \Session::put('timeZoneDiff', \Request::header('time-zone-diff') ?: 0); |
|
274 | 274 | |
275 | - $locale = \Request::header('locale'); |
|
276 | - switch ($locale) |
|
277 | - { |
|
278 | - case 'en': |
|
279 | - \App::setLocale('en'); |
|
280 | - \Session::put('locale', 'en'); |
|
281 | - break; |
|
275 | + $locale = \Request::header('locale'); |
|
276 | + switch ($locale) |
|
277 | + { |
|
278 | + case 'en': |
|
279 | + \App::setLocale('en'); |
|
280 | + \Session::put('locale', 'en'); |
|
281 | + break; |
|
282 | 282 | |
283 | - case 'ar': |
|
284 | - \App::setLocale('ar'); |
|
285 | - \Session::put('locale', 'ar'); |
|
286 | - break; |
|
283 | + case 'ar': |
|
284 | + \App::setLocale('ar'); |
|
285 | + \Session::put('locale', 'ar'); |
|
286 | + break; |
|
287 | 287 | |
288 | - case 'all': |
|
289 | - \App::setLocale('en'); |
|
290 | - \Session::put('locale', 'all'); |
|
291 | - break; |
|
288 | + case 'all': |
|
289 | + \App::setLocale('en'); |
|
290 | + \Session::put('locale', 'all'); |
|
291 | + break; |
|
292 | 292 | |
293 | - default: |
|
294 | - \App::setLocale('en'); |
|
295 | - \Session::put('locale', 'en'); |
|
296 | - break; |
|
297 | - } |
|
298 | - } |
|
293 | + default: |
|
294 | + \App::setLocale('en'); |
|
295 | + \Session::put('locale', 'en'); |
|
296 | + break; |
|
297 | + } |
|
298 | + } |
|
299 | 299 | |
300 | - /** |
|
301 | - * Set relation based on the called api. |
|
302 | - * |
|
303 | - * @param string $route |
|
304 | - * @return void |
|
305 | - */ |
|
306 | - private function setRelations($route) |
|
307 | - { |
|
308 | - $route = $route !== 'index' ? $route : 'list'; |
|
309 | - $relations = array_key_exists($this->model, $this->config['relations']) ? $this->config['relations'][$this->model] : false; |
|
310 | - $this->relations = $relations && isset($relations[$route]) ? $relations[$route] : []; |
|
311 | - } |
|
300 | + /** |
|
301 | + * Set relation based on the called api. |
|
302 | + * |
|
303 | + * @param string $route |
|
304 | + * @return void |
|
305 | + */ |
|
306 | + private function setRelations($route) |
|
307 | + { |
|
308 | + $route = $route !== 'index' ? $route : 'list'; |
|
309 | + $relations = array_key_exists($this->model, $this->config['relations']) ? $this->config['relations'][$this->model] : false; |
|
310 | + $this->relations = $relations && isset($relations[$route]) ? $relations[$route] : []; |
|
311 | + } |
|
312 | 312 | } |
@@ -6,33 +6,33 @@ |
||
6 | 6 | |
7 | 7 | class CreateOauthClientsTable extends Migration |
8 | 8 | { |
9 | - /** |
|
10 | - * Run the migrations. |
|
11 | - * |
|
12 | - * @return void |
|
13 | - */ |
|
14 | - public function up() |
|
15 | - { |
|
16 | - Schema::create('oauth_clients', function (Blueprint $table) { |
|
17 | - $table->increments('id'); |
|
18 | - $table->integer('user_id')->index()->nullable(); |
|
19 | - $table->string('name'); |
|
20 | - $table->string('secret', 100); |
|
21 | - $table->text('redirect'); |
|
22 | - $table->boolean('personal_access_client')->default(0); |
|
23 | - $table->boolean('password_client')->default(0); |
|
24 | - $table->boolean('revoked')->default(0); |
|
25 | - $table->timestamps(); |
|
26 | - }); |
|
27 | - } |
|
9 | + /** |
|
10 | + * Run the migrations. |
|
11 | + * |
|
12 | + * @return void |
|
13 | + */ |
|
14 | + public function up() |
|
15 | + { |
|
16 | + Schema::create('oauth_clients', function (Blueprint $table) { |
|
17 | + $table->increments('id'); |
|
18 | + $table->integer('user_id')->index()->nullable(); |
|
19 | + $table->string('name'); |
|
20 | + $table->string('secret', 100); |
|
21 | + $table->text('redirect'); |
|
22 | + $table->boolean('personal_access_client')->default(0); |
|
23 | + $table->boolean('password_client')->default(0); |
|
24 | + $table->boolean('revoked')->default(0); |
|
25 | + $table->timestamps(); |
|
26 | + }); |
|
27 | + } |
|
28 | 28 | |
29 | - /** |
|
30 | - * Reverse the migrations. |
|
31 | - * |
|
32 | - * @return void |
|
33 | - */ |
|
34 | - public function down() |
|
35 | - { |
|
36 | - Schema::drop('oauth_clients'); |
|
37 | - } |
|
29 | + /** |
|
30 | + * Reverse the migrations. |
|
31 | + * |
|
32 | + * @return void |
|
33 | + */ |
|
34 | + public function down() |
|
35 | + { |
|
36 | + Schema::drop('oauth_clients'); |
|
37 | + } |
|
38 | 38 | } |
@@ -13,28 +13,28 @@ |
||
13 | 13 | public function up() |
14 | 14 | { |
15 | 15 | Schema::create('users', function (Blueprint $table) { |
16 | - $table->increments('id'); |
|
17 | - $table->string('name', 100)->nullable(); |
|
18 | - $table->string('email')->unique(); |
|
19 | - $table->string('password', 60)->nullable(); |
|
20 | - $table->boolean('blocked')->default(0); |
|
21 | - $table->softDeletes(); |
|
22 | - $table->rememberToken(); |
|
23 | - $table->timestamps(); |
|
24 | - }); |
|
16 | + $table->increments('id'); |
|
17 | + $table->string('name', 100)->nullable(); |
|
18 | + $table->string('email')->unique(); |
|
19 | + $table->string('password', 60)->nullable(); |
|
20 | + $table->boolean('blocked')->default(0); |
|
21 | + $table->softDeletes(); |
|
22 | + $table->rememberToken(); |
|
23 | + $table->timestamps(); |
|
24 | + }); |
|
25 | 25 | |
26 | 26 | /** |
27 | 27 | * Create Default users. |
28 | 28 | */ |
29 | 29 | \DB::table('users')->insertGetId( |
30 | - [ |
|
30 | + [ |
|
31 | 31 | 'name' => 'Admin', |
32 | 32 | 'email' => '[email protected]', |
33 | 33 | 'password' => bcrypt('123456'), |
34 | 34 | 'created_at' => \DB::raw('NOW()'), |
35 | 35 | 'updated_at' => \DB::raw('NOW()') |
36 | 36 | ] |
37 | - ); |
|
37 | + ); |
|
38 | 38 | } |
39 | 39 | |
40 | 40 | /** |
@@ -6,82 +6,82 @@ |
||
6 | 6 | |
7 | 7 | class OauthClientsTableSeeder extends Seeder |
8 | 8 | { |
9 | - /** |
|
10 | - * Run the database seeds. |
|
11 | - * |
|
12 | - * @return void |
|
13 | - */ |
|
14 | - public function run() |
|
15 | - { |
|
16 | - /** |
|
17 | - * Insert the permissions related to oauthClients table. |
|
18 | - */ |
|
19 | - \DB::table('permissions')->insert( |
|
20 | - [ |
|
21 | - /** |
|
22 | - * Users model permissions. |
|
23 | - */ |
|
24 | - [ |
|
25 | - 'name' => 'list', |
|
26 | - 'model' => 'oauthClients', |
|
27 | - 'created_at' => \DB::raw('NOW()'), |
|
28 | - 'updated_at' => \DB::raw('NOW()') |
|
29 | - ], |
|
30 | - [ |
|
31 | - 'name' => 'find', |
|
32 | - 'model' => 'oauthClients', |
|
33 | - 'created_at' => \DB::raw('NOW()'), |
|
34 | - 'updated_at' => \DB::raw('NOW()') |
|
35 | - ], |
|
36 | - [ |
|
37 | - 'name' => 'search', |
|
38 | - 'model' => 'oauthClients', |
|
39 | - 'created_at' => \DB::raw('NOW()'), |
|
40 | - 'updated_at' => \DB::raw('NOW()') |
|
41 | - ], |
|
42 | - [ |
|
43 | - 'name' => 'paginate', |
|
44 | - 'model' => 'oauthClients', |
|
45 | - 'created_at' => \DB::raw('NOW()'), |
|
46 | - 'updated_at' => \DB::raw('NOW()') |
|
47 | - ], |
|
48 | - [ |
|
49 | - 'name' => 'revoke', |
|
50 | - 'model' => 'oauthClients', |
|
51 | - 'created_at' => \DB::raw('NOW()'), |
|
52 | - 'updated_at' => \DB::raw('NOW()') |
|
53 | - ], |
|
54 | - [ |
|
55 | - 'name' => 'unRevoke', |
|
56 | - 'model' => 'oauthClients', |
|
57 | - 'created_at' => \DB::raw('NOW()'), |
|
58 | - 'updated_at' => \DB::raw('NOW()') |
|
59 | - ], |
|
60 | - [ |
|
61 | - 'name' => 'first', |
|
62 | - 'model' => 'oauthClients', |
|
63 | - 'created_at' => \DB::raw('NOW()'), |
|
64 | - 'updated_at' => \DB::raw('NOW()') |
|
65 | - ], |
|
66 | - [ |
|
67 | - 'name' => 'findby', |
|
68 | - 'model' => 'oauthClients', |
|
69 | - 'created_at' => \DB::raw('NOW()'), |
|
70 | - 'updated_at' => \DB::raw('NOW()') |
|
71 | - ], |
|
72 | - [ |
|
73 | - 'name' => 'paginateby', |
|
74 | - 'model' => 'oauthClients', |
|
75 | - 'created_at' => \DB::raw('NOW()'), |
|
76 | - 'updated_at' => \DB::raw('NOW()') |
|
77 | - ], |
|
78 | - [ |
|
79 | - 'name' => 'save', |
|
80 | - 'model' => 'oauthClients', |
|
81 | - 'created_at' => \DB::raw('NOW()'), |
|
82 | - 'updated_at' => \DB::raw('NOW()') |
|
83 | - ] |
|
84 | - ] |
|
85 | - ); |
|
86 | - } |
|
9 | + /** |
|
10 | + * Run the database seeds. |
|
11 | + * |
|
12 | + * @return void |
|
13 | + */ |
|
14 | + public function run() |
|
15 | + { |
|
16 | + /** |
|
17 | + * Insert the permissions related to oauthClients table. |
|
18 | + */ |
|
19 | + \DB::table('permissions')->insert( |
|
20 | + [ |
|
21 | + /** |
|
22 | + * Users model permissions. |
|
23 | + */ |
|
24 | + [ |
|
25 | + 'name' => 'list', |
|
26 | + 'model' => 'oauthClients', |
|
27 | + 'created_at' => \DB::raw('NOW()'), |
|
28 | + 'updated_at' => \DB::raw('NOW()') |
|
29 | + ], |
|
30 | + [ |
|
31 | + 'name' => 'find', |
|
32 | + 'model' => 'oauthClients', |
|
33 | + 'created_at' => \DB::raw('NOW()'), |
|
34 | + 'updated_at' => \DB::raw('NOW()') |
|
35 | + ], |
|
36 | + [ |
|
37 | + 'name' => 'search', |
|
38 | + 'model' => 'oauthClients', |
|
39 | + 'created_at' => \DB::raw('NOW()'), |
|
40 | + 'updated_at' => \DB::raw('NOW()') |
|
41 | + ], |
|
42 | + [ |
|
43 | + 'name' => 'paginate', |
|
44 | + 'model' => 'oauthClients', |
|
45 | + 'created_at' => \DB::raw('NOW()'), |
|
46 | + 'updated_at' => \DB::raw('NOW()') |
|
47 | + ], |
|
48 | + [ |
|
49 | + 'name' => 'revoke', |
|
50 | + 'model' => 'oauthClients', |
|
51 | + 'created_at' => \DB::raw('NOW()'), |
|
52 | + 'updated_at' => \DB::raw('NOW()') |
|
53 | + ], |
|
54 | + [ |
|
55 | + 'name' => 'unRevoke', |
|
56 | + 'model' => 'oauthClients', |
|
57 | + 'created_at' => \DB::raw('NOW()'), |
|
58 | + 'updated_at' => \DB::raw('NOW()') |
|
59 | + ], |
|
60 | + [ |
|
61 | + 'name' => 'first', |
|
62 | + 'model' => 'oauthClients', |
|
63 | + 'created_at' => \DB::raw('NOW()'), |
|
64 | + 'updated_at' => \DB::raw('NOW()') |
|
65 | + ], |
|
66 | + [ |
|
67 | + 'name' => 'findby', |
|
68 | + 'model' => 'oauthClients', |
|
69 | + 'created_at' => \DB::raw('NOW()'), |
|
70 | + 'updated_at' => \DB::raw('NOW()') |
|
71 | + ], |
|
72 | + [ |
|
73 | + 'name' => 'paginateby', |
|
74 | + 'model' => 'oauthClients', |
|
75 | + 'created_at' => \DB::raw('NOW()'), |
|
76 | + 'updated_at' => \DB::raw('NOW()') |
|
77 | + ], |
|
78 | + [ |
|
79 | + 'name' => 'save', |
|
80 | + 'model' => 'oauthClients', |
|
81 | + 'created_at' => \DB::raw('NOW()'), |
|
82 | + 'updated_at' => \DB::raw('NOW()') |
|
83 | + ] |
|
84 | + ] |
|
85 | + ); |
|
86 | + } |
|
87 | 87 | } |
@@ -5,350 +5,350 @@ |
||
5 | 5 | |
6 | 6 | class UserRepository extends AbstractRepository |
7 | 7 | { |
8 | - /** |
|
9 | - * Return the model full namespace. |
|
10 | - * |
|
11 | - * @return string |
|
12 | - */ |
|
13 | - protected function getModel() |
|
14 | - { |
|
15 | - return 'App\Modules\V1\Acl\AclUser'; |
|
16 | - } |
|
17 | - |
|
18 | - |
|
19 | - /** |
|
20 | - * Return the logged in user account. |
|
21 | - * |
|
22 | - * @param array $relations |
|
23 | - * @return boolean |
|
24 | - */ |
|
25 | - public function account($relations = []) |
|
26 | - { |
|
27 | - $permissions = []; |
|
28 | - $user = \Core::users()->find(\Auth::id(), $relations); |
|
29 | - foreach ($user->groups()->get() as $group) |
|
30 | - { |
|
31 | - $group->permissions->each(function ($permission) use (&$permissions){ |
|
32 | - $permissions[$permission->model][$permission->id] = $permission->name; |
|
33 | - }); |
|
34 | - } |
|
35 | - $user->permissions = $permissions; |
|
36 | - |
|
37 | - return $user; |
|
38 | - } |
|
39 | - |
|
40 | - /** |
|
41 | - * Check if the logged in user or the given user |
|
42 | - * has the given permissions on the given model. |
|
43 | - * |
|
44 | - * @param string $nameOfPermission |
|
45 | - * @param string $model |
|
46 | - * @param boolean $user |
|
47 | - * @return boolean |
|
48 | - */ |
|
49 | - public function can($nameOfPermission, $model, $user = false) |
|
50 | - { |
|
51 | - $user = $user ?: $this->find(\Auth::id(), ['groups.permissions']); |
|
52 | - $permissions = []; |
|
53 | - |
|
54 | - $user->groups->pluck('permissions')->each(function ($permission) use (&$permissions, $model){ |
|
55 | - $permissions = array_merge($permissions, $permission->where('model', $model)->pluck('name')->toArray()); |
|
56 | - }); |
|
8 | + /** |
|
9 | + * Return the model full namespace. |
|
10 | + * |
|
11 | + * @return string |
|
12 | + */ |
|
13 | + protected function getModel() |
|
14 | + { |
|
15 | + return 'App\Modules\V1\Acl\AclUser'; |
|
16 | + } |
|
17 | + |
|
18 | + |
|
19 | + /** |
|
20 | + * Return the logged in user account. |
|
21 | + * |
|
22 | + * @param array $relations |
|
23 | + * @return boolean |
|
24 | + */ |
|
25 | + public function account($relations = []) |
|
26 | + { |
|
27 | + $permissions = []; |
|
28 | + $user = \Core::users()->find(\Auth::id(), $relations); |
|
29 | + foreach ($user->groups()->get() as $group) |
|
30 | + { |
|
31 | + $group->permissions->each(function ($permission) use (&$permissions){ |
|
32 | + $permissions[$permission->model][$permission->id] = $permission->name; |
|
33 | + }); |
|
34 | + } |
|
35 | + $user->permissions = $permissions; |
|
36 | + |
|
37 | + return $user; |
|
38 | + } |
|
39 | + |
|
40 | + /** |
|
41 | + * Check if the logged in user or the given user |
|
42 | + * has the given permissions on the given model. |
|
43 | + * |
|
44 | + * @param string $nameOfPermission |
|
45 | + * @param string $model |
|
46 | + * @param boolean $user |
|
47 | + * @return boolean |
|
48 | + */ |
|
49 | + public function can($nameOfPermission, $model, $user = false) |
|
50 | + { |
|
51 | + $user = $user ?: $this->find(\Auth::id(), ['groups.permissions']); |
|
52 | + $permissions = []; |
|
53 | + |
|
54 | + $user->groups->pluck('permissions')->each(function ($permission) use (&$permissions, $model){ |
|
55 | + $permissions = array_merge($permissions, $permission->where('model', $model)->pluck('name')->toArray()); |
|
56 | + }); |
|
57 | 57 | |
58 | - return in_array($nameOfPermission, $permissions); |
|
59 | - } |
|
60 | - |
|
61 | - /** |
|
62 | - * Check if the logged in user has the given group. |
|
63 | - * |
|
64 | - * @param string $groupName |
|
65 | - * @param integer $userId |
|
66 | - * @return boolean |
|
67 | - */ |
|
68 | - public function hasGroup($groupName, $userId = false) |
|
69 | - { |
|
70 | - $userId = $userId ?: \Auth::id(); |
|
71 | - $groups = $this->find($userId)->groups; |
|
72 | - return $groups->pluck('name')->search($groupName, true) === false ? false : true; |
|
73 | - } |
|
74 | - |
|
75 | - /** |
|
76 | - * Assign the given group ids to the given user. |
|
77 | - * |
|
78 | - * @param integer $user_id |
|
79 | - * @param array $group_ids |
|
80 | - * @return object |
|
81 | - */ |
|
82 | - public function assignGroups($user_id, $group_ids) |
|
83 | - { |
|
84 | - \DB::transaction(function () use ($user_id, $group_ids) { |
|
85 | - $user = $this->find($user_id); |
|
86 | - $user->groups()->detach(); |
|
87 | - $user->groups()->attach($group_ids); |
|
88 | - }); |
|
89 | - |
|
90 | - return $this->find($user_id); |
|
91 | - } |
|
92 | - |
|
93 | - /** |
|
94 | - * Handle a login request to the application. |
|
95 | - * |
|
96 | - * @param array $credentials |
|
97 | - * @param boolean $adminLogin |
|
98 | - * @return object |
|
99 | - */ |
|
100 | - public function login($credentials, $adminLogin = false) |
|
101 | - { |
|
102 | - if ( ! $user = $this->first(['email' => $credentials['email']])) |
|
103 | - { |
|
104 | - \ErrorHandler::loginFailed(); |
|
105 | - } |
|
106 | - else if ($adminLogin && $user->groups->pluck('name')->search('Admin', true) === false) |
|
107 | - { |
|
108 | - \ErrorHandler::loginFailed(); |
|
109 | - } |
|
110 | - else if ( ! $adminLogin && $user->groups->pluck('name')->search('Admin', true) !== false) |
|
111 | - { |
|
112 | - \ErrorHandler::loginFailed(); |
|
113 | - } |
|
114 | - else if ($user->blocked) |
|
115 | - { |
|
116 | - \ErrorHandler::userIsBlocked(); |
|
117 | - } |
|
118 | - |
|
119 | - return $user; |
|
120 | - } |
|
121 | - |
|
122 | - /** |
|
123 | - * Handle a social login request of the none admin to the application. |
|
124 | - * |
|
125 | - * @param array $credentials |
|
126 | - * @return array |
|
127 | - */ |
|
128 | - public function loginSocial($credentials) |
|
129 | - { |
|
130 | - $access_token = $credentials['auth_code'] ? \Socialite::driver($credentials['type'])->getAccessToken($credentials['auth_code']) : $credentials['access_token']; |
|
131 | - $user = \Socialite::driver($credentials['type'])->userFromToken($access_token); |
|
132 | - |
|
133 | - if ( ! $user->email) |
|
134 | - { |
|
135 | - \ErrorHandler::noSocialEmail(); |
|
136 | - } |
|
137 | - |
|
138 | - if ( ! $registeredUser = $this->model->where('email', $user->email)->first()) |
|
139 | - { |
|
140 | - $data = ['email' => $user->email, 'password' => '']; |
|
141 | - return $this->register($data); |
|
142 | - } |
|
143 | - else |
|
144 | - { |
|
145 | - if ( ! \Auth::attempt(['email' => $registeredUser->email, 'password' => ''])) |
|
146 | - { |
|
147 | - \ErrorHandler::userAlreadyRegistered(); |
|
148 | - } |
|
149 | - |
|
150 | - $loginProxy = \App::make('App\Modules\V1\Acl\Proxy\LoginProxy'); |
|
151 | - return $loginProxy->login(['email' => $registeredUser->email, 'password' => ''], 0); |
|
152 | - } |
|
153 | - } |
|
58 | + return in_array($nameOfPermission, $permissions); |
|
59 | + } |
|
60 | + |
|
61 | + /** |
|
62 | + * Check if the logged in user has the given group. |
|
63 | + * |
|
64 | + * @param string $groupName |
|
65 | + * @param integer $userId |
|
66 | + * @return boolean |
|
67 | + */ |
|
68 | + public function hasGroup($groupName, $userId = false) |
|
69 | + { |
|
70 | + $userId = $userId ?: \Auth::id(); |
|
71 | + $groups = $this->find($userId)->groups; |
|
72 | + return $groups->pluck('name')->search($groupName, true) === false ? false : true; |
|
73 | + } |
|
74 | + |
|
75 | + /** |
|
76 | + * Assign the given group ids to the given user. |
|
77 | + * |
|
78 | + * @param integer $user_id |
|
79 | + * @param array $group_ids |
|
80 | + * @return object |
|
81 | + */ |
|
82 | + public function assignGroups($user_id, $group_ids) |
|
83 | + { |
|
84 | + \DB::transaction(function () use ($user_id, $group_ids) { |
|
85 | + $user = $this->find($user_id); |
|
86 | + $user->groups()->detach(); |
|
87 | + $user->groups()->attach($group_ids); |
|
88 | + }); |
|
89 | + |
|
90 | + return $this->find($user_id); |
|
91 | + } |
|
92 | + |
|
93 | + /** |
|
94 | + * Handle a login request to the application. |
|
95 | + * |
|
96 | + * @param array $credentials |
|
97 | + * @param boolean $adminLogin |
|
98 | + * @return object |
|
99 | + */ |
|
100 | + public function login($credentials, $adminLogin = false) |
|
101 | + { |
|
102 | + if ( ! $user = $this->first(['email' => $credentials['email']])) |
|
103 | + { |
|
104 | + \ErrorHandler::loginFailed(); |
|
105 | + } |
|
106 | + else if ($adminLogin && $user->groups->pluck('name')->search('Admin', true) === false) |
|
107 | + { |
|
108 | + \ErrorHandler::loginFailed(); |
|
109 | + } |
|
110 | + else if ( ! $adminLogin && $user->groups->pluck('name')->search('Admin', true) !== false) |
|
111 | + { |
|
112 | + \ErrorHandler::loginFailed(); |
|
113 | + } |
|
114 | + else if ($user->blocked) |
|
115 | + { |
|
116 | + \ErrorHandler::userIsBlocked(); |
|
117 | + } |
|
118 | + |
|
119 | + return $user; |
|
120 | + } |
|
121 | + |
|
122 | + /** |
|
123 | + * Handle a social login request of the none admin to the application. |
|
124 | + * |
|
125 | + * @param array $credentials |
|
126 | + * @return array |
|
127 | + */ |
|
128 | + public function loginSocial($credentials) |
|
129 | + { |
|
130 | + $access_token = $credentials['auth_code'] ? \Socialite::driver($credentials['type'])->getAccessToken($credentials['auth_code']) : $credentials['access_token']; |
|
131 | + $user = \Socialite::driver($credentials['type'])->userFromToken($access_token); |
|
132 | + |
|
133 | + if ( ! $user->email) |
|
134 | + { |
|
135 | + \ErrorHandler::noSocialEmail(); |
|
136 | + } |
|
137 | + |
|
138 | + if ( ! $registeredUser = $this->model->where('email', $user->email)->first()) |
|
139 | + { |
|
140 | + $data = ['email' => $user->email, 'password' => '']; |
|
141 | + return $this->register($data); |
|
142 | + } |
|
143 | + else |
|
144 | + { |
|
145 | + if ( ! \Auth::attempt(['email' => $registeredUser->email, 'password' => ''])) |
|
146 | + { |
|
147 | + \ErrorHandler::userAlreadyRegistered(); |
|
148 | + } |
|
149 | + |
|
150 | + $loginProxy = \App::make('App\Modules\V1\Acl\Proxy\LoginProxy'); |
|
151 | + return $loginProxy->login(['email' => $registeredUser->email, 'password' => ''], 0); |
|
152 | + } |
|
153 | + } |
|
154 | 154 | |
155 | - /** |
|
156 | - * Handle a registration request. |
|
157 | - * |
|
158 | - * @param array $credentials |
|
159 | - * @return array |
|
160 | - */ |
|
161 | - public function register($credentials) |
|
162 | - { |
|
163 | - $this->model->create($credentials); |
|
164 | - } |
|
165 | - |
|
166 | - /** |
|
167 | - * Block the user. |
|
168 | - * |
|
169 | - * @param integer $user_id |
|
170 | - * @return object |
|
171 | - */ |
|
172 | - public function block($user_id) |
|
173 | - { |
|
174 | - if ( ! $user = $this->find($user_id)) |
|
175 | - { |
|
176 | - \ErrorHandler::notFound('user'); |
|
177 | - } |
|
178 | - if ( ! $this->hasGroup('Admin')) |
|
179 | - { |
|
180 | - \ErrorHandler::noPermissions(); |
|
181 | - } |
|
182 | - else if (\Auth::id() == $user_id) |
|
183 | - { |
|
184 | - \ErrorHandler::noPermissions(); |
|
185 | - } |
|
186 | - else if ($user->groups->pluck('name')->search('Admin', true) !== false) |
|
187 | - { |
|
188 | - \ErrorHandler::noPermissions(); |
|
189 | - } |
|
190 | - |
|
191 | - $user->blocked = 1; |
|
192 | - $user->save(); |
|
155 | + /** |
|
156 | + * Handle a registration request. |
|
157 | + * |
|
158 | + * @param array $credentials |
|
159 | + * @return array |
|
160 | + */ |
|
161 | + public function register($credentials) |
|
162 | + { |
|
163 | + $this->model->create($credentials); |
|
164 | + } |
|
165 | + |
|
166 | + /** |
|
167 | + * Block the user. |
|
168 | + * |
|
169 | + * @param integer $user_id |
|
170 | + * @return object |
|
171 | + */ |
|
172 | + public function block($user_id) |
|
173 | + { |
|
174 | + if ( ! $user = $this->find($user_id)) |
|
175 | + { |
|
176 | + \ErrorHandler::notFound('user'); |
|
177 | + } |
|
178 | + if ( ! $this->hasGroup('Admin')) |
|
179 | + { |
|
180 | + \ErrorHandler::noPermissions(); |
|
181 | + } |
|
182 | + else if (\Auth::id() == $user_id) |
|
183 | + { |
|
184 | + \ErrorHandler::noPermissions(); |
|
185 | + } |
|
186 | + else if ($user->groups->pluck('name')->search('Admin', true) !== false) |
|
187 | + { |
|
188 | + \ErrorHandler::noPermissions(); |
|
189 | + } |
|
190 | + |
|
191 | + $user->blocked = 1; |
|
192 | + $user->save(); |
|
193 | 193 | |
194 | - return $user; |
|
195 | - } |
|
196 | - |
|
197 | - /** |
|
198 | - * Unblock the user. |
|
199 | - * |
|
200 | - * @param integer $user_id |
|
201 | - * @return object |
|
202 | - */ |
|
203 | - public function unblock($user_id) |
|
204 | - { |
|
205 | - if ( ! $this->hasGroup('Admin')) |
|
206 | - { |
|
207 | - \ErrorHandler::noPermissions(); |
|
208 | - } |
|
209 | - |
|
210 | - $user = $this->find($user_id); |
|
211 | - $user->blocked = 0; |
|
212 | - $user->save(); |
|
213 | - |
|
214 | - return $user; |
|
215 | - } |
|
216 | - |
|
217 | - /** |
|
218 | - * Send a reset link to the given user. |
|
219 | - * |
|
220 | - * @param string $email |
|
221 | - * @return void |
|
222 | - */ |
|
223 | - public function sendReset($email) |
|
224 | - { |
|
225 | - if ( ! $user = $this->model->where('email', $email)->first()) |
|
226 | - { |
|
227 | - \ErrorHandler::notFound('email'); |
|
228 | - } |
|
229 | - |
|
230 | - $url = $this->config['resetLink']; |
|
231 | - $token = \Password::getRepository()->create($user); |
|
194 | + return $user; |
|
195 | + } |
|
196 | + |
|
197 | + /** |
|
198 | + * Unblock the user. |
|
199 | + * |
|
200 | + * @param integer $user_id |
|
201 | + * @return object |
|
202 | + */ |
|
203 | + public function unblock($user_id) |
|
204 | + { |
|
205 | + if ( ! $this->hasGroup('Admin')) |
|
206 | + { |
|
207 | + \ErrorHandler::noPermissions(); |
|
208 | + } |
|
209 | + |
|
210 | + $user = $this->find($user_id); |
|
211 | + $user->blocked = 0; |
|
212 | + $user->save(); |
|
213 | + |
|
214 | + return $user; |
|
215 | + } |
|
216 | + |
|
217 | + /** |
|
218 | + * Send a reset link to the given user. |
|
219 | + * |
|
220 | + * @param string $email |
|
221 | + * @return void |
|
222 | + */ |
|
223 | + public function sendReset($email) |
|
224 | + { |
|
225 | + if ( ! $user = $this->model->where('email', $email)->first()) |
|
226 | + { |
|
227 | + \ErrorHandler::notFound('email'); |
|
228 | + } |
|
229 | + |
|
230 | + $url = $this->config['resetLink']; |
|
231 | + $token = \Password::getRepository()->create($user); |
|
232 | 232 | |
233 | - \Mail::send('acl::resetpassword', ['user' => $user, 'url' => $url, 'token' => $token], function ($m) use ($user) { |
|
234 | - $m->to($user->email, $user->name)->subject('Your Password Reset Link'); |
|
235 | - }); |
|
236 | - } |
|
237 | - |
|
238 | - /** |
|
239 | - * Reset the given user's password. |
|
240 | - * |
|
241 | - * @param array $credentials |
|
242 | - * @return array |
|
243 | - */ |
|
244 | - public function resetPassword($credentials) |
|
245 | - { |
|
246 | - $response = \Password::reset($credentials, function ($user, $password) { |
|
247 | - $user->password = $password; |
|
248 | - $user->save(); |
|
249 | - }); |
|
250 | - |
|
251 | - switch ($response) { |
|
252 | - case \Password::PASSWORD_RESET: |
|
253 | - return 'success'; |
|
233 | + \Mail::send('acl::resetpassword', ['user' => $user, 'url' => $url, 'token' => $token], function ($m) use ($user) { |
|
234 | + $m->to($user->email, $user->name)->subject('Your Password Reset Link'); |
|
235 | + }); |
|
236 | + } |
|
237 | + |
|
238 | + /** |
|
239 | + * Reset the given user's password. |
|
240 | + * |
|
241 | + * @param array $credentials |
|
242 | + * @return array |
|
243 | + */ |
|
244 | + public function resetPassword($credentials) |
|
245 | + { |
|
246 | + $response = \Password::reset($credentials, function ($user, $password) { |
|
247 | + $user->password = $password; |
|
248 | + $user->save(); |
|
249 | + }); |
|
250 | + |
|
251 | + switch ($response) { |
|
252 | + case \Password::PASSWORD_RESET: |
|
253 | + return 'success'; |
|
254 | 254 | |
255 | - case \Password::INVALID_TOKEN: |
|
256 | - \ErrorHandler::invalidResetToken('token'); |
|
257 | - |
|
258 | - case \Password::INVALID_PASSWORD: |
|
259 | - \ErrorHandler::invalidResetPassword('email'); |
|
260 | - |
|
261 | - case \Password::INVALID_USER: |
|
262 | - \ErrorHandler::notFound('user'); |
|
263 | - |
|
264 | - default: |
|
265 | - \ErrorHandler::generalError(); |
|
266 | - } |
|
267 | - } |
|
268 | - |
|
269 | - /** |
|
270 | - * Change the logged in user password. |
|
271 | - * |
|
272 | - * @param array $credentials |
|
273 | - * @return void |
|
274 | - */ |
|
275 | - public function changePassword($credentials) |
|
276 | - { |
|
277 | - $user = \Auth::user(); |
|
278 | - if ( ! \Hash::check($credentials['old_password'], $user->password)) |
|
279 | - { |
|
280 | - \ErrorHandler::invalidOldPassword(); |
|
281 | - } |
|
282 | - |
|
283 | - $user->password = $credentials['password']; |
|
284 | - $user->save(); |
|
285 | - } |
|
286 | - |
|
287 | - /** |
|
288 | - * Paginate all users in the given group based on the given conditions. |
|
289 | - * |
|
290 | - * @param string $groupName |
|
291 | - * @param array $relations |
|
292 | - * @param integer $perPage |
|
293 | - * @param string $sortBy |
|
294 | - * @param boolean $desc |
|
295 | - * @return \Illuminate\Http\Response |
|
296 | - */ |
|
297 | - public function group($conditions, $groupName, $relations, $perPage, $sortBy, $desc) |
|
298 | - { |
|
299 | - unset($conditions['page']); |
|
300 | - $conditions = $this->constructConditions($conditions, $this->model); |
|
301 | - $sort = $desc ? 'desc' : 'asc'; |
|
302 | - $model = call_user_func_array("{$this->getModel()}::with", array($relations)); |
|
303 | - |
|
304 | - $model->whereHas('groups', function($q) use ($groupName){ |
|
305 | - $q->where('name', $groupName); |
|
306 | - }); |
|
255 | + case \Password::INVALID_TOKEN: |
|
256 | + \ErrorHandler::invalidResetToken('token'); |
|
257 | + |
|
258 | + case \Password::INVALID_PASSWORD: |
|
259 | + \ErrorHandler::invalidResetPassword('email'); |
|
260 | + |
|
261 | + case \Password::INVALID_USER: |
|
262 | + \ErrorHandler::notFound('user'); |
|
263 | + |
|
264 | + default: |
|
265 | + \ErrorHandler::generalError(); |
|
266 | + } |
|
267 | + } |
|
268 | + |
|
269 | + /** |
|
270 | + * Change the logged in user password. |
|
271 | + * |
|
272 | + * @param array $credentials |
|
273 | + * @return void |
|
274 | + */ |
|
275 | + public function changePassword($credentials) |
|
276 | + { |
|
277 | + $user = \Auth::user(); |
|
278 | + if ( ! \Hash::check($credentials['old_password'], $user->password)) |
|
279 | + { |
|
280 | + \ErrorHandler::invalidOldPassword(); |
|
281 | + } |
|
282 | + |
|
283 | + $user->password = $credentials['password']; |
|
284 | + $user->save(); |
|
285 | + } |
|
286 | + |
|
287 | + /** |
|
288 | + * Paginate all users in the given group based on the given conditions. |
|
289 | + * |
|
290 | + * @param string $groupName |
|
291 | + * @param array $relations |
|
292 | + * @param integer $perPage |
|
293 | + * @param string $sortBy |
|
294 | + * @param boolean $desc |
|
295 | + * @return \Illuminate\Http\Response |
|
296 | + */ |
|
297 | + public function group($conditions, $groupName, $relations, $perPage, $sortBy, $desc) |
|
298 | + { |
|
299 | + unset($conditions['page']); |
|
300 | + $conditions = $this->constructConditions($conditions, $this->model); |
|
301 | + $sort = $desc ? 'desc' : 'asc'; |
|
302 | + $model = call_user_func_array("{$this->getModel()}::with", array($relations)); |
|
303 | + |
|
304 | + $model->whereHas('groups', function($q) use ($groupName){ |
|
305 | + $q->where('name', $groupName); |
|
306 | + }); |
|
307 | 307 | |
308 | 308 | |
309 | - if (count($conditions['conditionValues'])) |
|
310 | - { |
|
311 | - $model->whereRaw($conditions['conditionString'], $conditions['conditionValues']); |
|
312 | - } |
|
313 | - |
|
314 | - if ($perPage) |
|
315 | - { |
|
316 | - return $model->orderBy($sortBy, $sort)->paginate($perPage); |
|
317 | - } |
|
318 | - |
|
319 | - return $model->orderBy($sortBy, $sort)->get(); |
|
320 | - } |
|
321 | - |
|
322 | - /** |
|
323 | - * Save the given data to the logged in user. |
|
324 | - * |
|
325 | - * @param array $credentials |
|
326 | - * @return void |
|
327 | - */ |
|
328 | - public function saveProfile($data) |
|
329 | - { |
|
330 | - $data['id'] = \Auth::id(); |
|
331 | - $this->save($data); |
|
332 | - } |
|
333 | - |
|
334 | - /** |
|
335 | - * Ensure access token hasn't expired or revoked. |
|
336 | - * |
|
337 | - * @param string $accessToken |
|
338 | - * @return boolean |
|
339 | - */ |
|
340 | - public function accessTokenExpiredOrRevoked($accessToken) |
|
341 | - { |
|
342 | - |
|
343 | - $accessTokenRepository = \App::make('League\OAuth2\Server\Repositories\AccessTokenRepositoryInterface'); |
|
344 | - $data = new ValidationData(); |
|
345 | - $data->setCurrentTime(time()); |
|
346 | - |
|
347 | - if ($accessToken->validate($data) === false || $accessTokenRepository->isAccessTokenRevoked($accessToken->getClaim('jti'))) |
|
348 | - { |
|
349 | - return true; |
|
350 | - } |
|
351 | - |
|
352 | - return false; |
|
353 | - } |
|
309 | + if (count($conditions['conditionValues'])) |
|
310 | + { |
|
311 | + $model->whereRaw($conditions['conditionString'], $conditions['conditionValues']); |
|
312 | + } |
|
313 | + |
|
314 | + if ($perPage) |
|
315 | + { |
|
316 | + return $model->orderBy($sortBy, $sort)->paginate($perPage); |
|
317 | + } |
|
318 | + |
|
319 | + return $model->orderBy($sortBy, $sort)->get(); |
|
320 | + } |
|
321 | + |
|
322 | + /** |
|
323 | + * Save the given data to the logged in user. |
|
324 | + * |
|
325 | + * @param array $credentials |
|
326 | + * @return void |
|
327 | + */ |
|
328 | + public function saveProfile($data) |
|
329 | + { |
|
330 | + $data['id'] = \Auth::id(); |
|
331 | + $this->save($data); |
|
332 | + } |
|
333 | + |
|
334 | + /** |
|
335 | + * Ensure access token hasn't expired or revoked. |
|
336 | + * |
|
337 | + * @param string $accessToken |
|
338 | + * @return boolean |
|
339 | + */ |
|
340 | + public function accessTokenExpiredOrRevoked($accessToken) |
|
341 | + { |
|
342 | + |
|
343 | + $accessTokenRepository = \App::make('League\OAuth2\Server\Repositories\AccessTokenRepositoryInterface'); |
|
344 | + $data = new ValidationData(); |
|
345 | + $data->setCurrentTime(time()); |
|
346 | + |
|
347 | + if ($accessToken->validate($data) === false || $accessTokenRepository->isAccessTokenRevoked($accessToken->getClaim('jti'))) |
|
348 | + { |
|
349 | + return true; |
|
350 | + } |
|
351 | + |
|
352 | + return false; |
|
353 | + } |
|
354 | 354 | } |
@@ -4,37 +4,37 @@ |
||
4 | 4 | |
5 | 5 | class OauthClientRepository extends AbstractRepository |
6 | 6 | { |
7 | - /** |
|
8 | - * Return the model full namespace. |
|
9 | - * |
|
10 | - * @return string |
|
11 | - */ |
|
12 | - protected function getModel() |
|
13 | - { |
|
14 | - return 'App\Modules\V1\Acl\OauthClient'; |
|
15 | - } |
|
7 | + /** |
|
8 | + * Return the model full namespace. |
|
9 | + * |
|
10 | + * @return string |
|
11 | + */ |
|
12 | + protected function getModel() |
|
13 | + { |
|
14 | + return 'App\Modules\V1\Acl\OauthClient'; |
|
15 | + } |
|
16 | 16 | |
17 | - /** |
|
18 | - * Revoke the given client. |
|
19 | - * |
|
20 | - * @param integer $clientId |
|
21 | - * @return void |
|
22 | - */ |
|
23 | - public function revoke($clientId) |
|
24 | - { |
|
25 | - $client = $this->find($clientId); |
|
26 | - $client->tokens()->update(['revoked' => true]); |
|
27 | - $this->save(['id'=> $clientId, 'revoked' => true]); |
|
28 | - } |
|
17 | + /** |
|
18 | + * Revoke the given client. |
|
19 | + * |
|
20 | + * @param integer $clientId |
|
21 | + * @return void |
|
22 | + */ |
|
23 | + public function revoke($clientId) |
|
24 | + { |
|
25 | + $client = $this->find($clientId); |
|
26 | + $client->tokens()->update(['revoked' => true]); |
|
27 | + $this->save(['id'=> $clientId, 'revoked' => true]); |
|
28 | + } |
|
29 | 29 | |
30 | - /** |
|
31 | - * Un revoke the given client. |
|
32 | - * |
|
33 | - * @param integer $clientId |
|
34 | - * @return void |
|
35 | - */ |
|
36 | - public function unRevoke($clientId) |
|
37 | - { |
|
38 | - $this->save(['id'=> $clientId, 'revoked' => false]); |
|
39 | - } |
|
30 | + /** |
|
31 | + * Un revoke the given client. |
|
32 | + * |
|
33 | + * @param integer $clientId |
|
34 | + * @return void |
|
35 | + */ |
|
36 | + public function unRevoke($clientId) |
|
37 | + { |
|
38 | + $this->save(['id'=> $clientId, 'revoked' => false]); |
|
39 | + } |
|
40 | 40 | } |
@@ -8,250 +8,250 @@ |
||
8 | 8 | |
9 | 9 | class UsersController extends BaseApiController |
10 | 10 | { |
11 | - /** |
|
12 | - * The name of the model that is used by the base api controller |
|
13 | - * to preform actions like (add, edit ... etc). |
|
14 | - * @var string |
|
15 | - */ |
|
16 | - protected $model = 'users'; |
|
11 | + /** |
|
12 | + * The name of the model that is used by the base api controller |
|
13 | + * to preform actions like (add, edit ... etc). |
|
14 | + * @var string |
|
15 | + */ |
|
16 | + protected $model = 'users'; |
|
17 | 17 | |
18 | - /** |
|
19 | - * List of all route actions that the base api controller |
|
20 | - * will skip permissions check for them. |
|
21 | - * @var array |
|
22 | - */ |
|
23 | - protected $skipPermissionCheck = ['account', 'logout', 'changePassword', 'saveProfile', 'account']; |
|
18 | + /** |
|
19 | + * List of all route actions that the base api controller |
|
20 | + * will skip permissions check for them. |
|
21 | + * @var array |
|
22 | + */ |
|
23 | + protected $skipPermissionCheck = ['account', 'logout', 'changePassword', 'saveProfile', 'account']; |
|
24 | 24 | |
25 | - /** |
|
26 | - * List of all route actions that the base api controller |
|
27 | - * will skip login check for them. |
|
28 | - * @var array |
|
29 | - */ |
|
30 | - protected $skipLoginCheck = ['login', 'loginSocial', 'register', 'sendreset', 'resetpassword', 'refreshtoken']; |
|
25 | + /** |
|
26 | + * List of all route actions that the base api controller |
|
27 | + * will skip login check for them. |
|
28 | + * @var array |
|
29 | + */ |
|
30 | + protected $skipLoginCheck = ['login', 'loginSocial', 'register', 'sendreset', 'resetpassword', 'refreshtoken']; |
|
31 | 31 | |
32 | - /** |
|
33 | - * The validations rules used by the base api controller |
|
34 | - * to check before add. |
|
35 | - * @var array |
|
36 | - */ |
|
37 | - protected $validationRules = [ |
|
38 | - 'name' => 'nullable|string', |
|
39 | - 'email' => 'required|email|unique:users,email,{id}', |
|
40 | - 'password' => 'nullable|min:6' |
|
41 | - ]; |
|
32 | + /** |
|
33 | + * The validations rules used by the base api controller |
|
34 | + * to check before add. |
|
35 | + * @var array |
|
36 | + */ |
|
37 | + protected $validationRules = [ |
|
38 | + 'name' => 'nullable|string', |
|
39 | + 'email' => 'required|email|unique:users,email,{id}', |
|
40 | + 'password' => 'nullable|min:6' |
|
41 | + ]; |
|
42 | 42 | |
43 | - /** |
|
44 | - * The loginProxy implementation. |
|
45 | - * |
|
46 | - * @var \App\Modules\V1\Acl\Proxy\LoginProxy |
|
47 | - */ |
|
48 | - protected $loginProxy; |
|
43 | + /** |
|
44 | + * The loginProxy implementation. |
|
45 | + * |
|
46 | + * @var \App\Modules\V1\Acl\Proxy\LoginProxy |
|
47 | + */ |
|
48 | + protected $loginProxy; |
|
49 | 49 | |
50 | - public function __construct(LoginProxy $loginProxy) |
|
51 | - { |
|
52 | - $this->loginProxy = $loginProxy; |
|
53 | - parent::__construct(); |
|
54 | - } |
|
50 | + public function __construct(LoginProxy $loginProxy) |
|
51 | + { |
|
52 | + $this->loginProxy = $loginProxy; |
|
53 | + parent::__construct(); |
|
54 | + } |
|
55 | 55 | |
56 | - /** |
|
57 | - * Return the logged in user account. |
|
58 | - * |
|
59 | - * @return \Illuminate\Http\Response |
|
60 | - */ |
|
61 | - public function account() |
|
62 | - { |
|
63 | - return \Response::json($this->repo->account($this->relations), 200); |
|
64 | - } |
|
56 | + /** |
|
57 | + * Return the logged in user account. |
|
58 | + * |
|
59 | + * @return \Illuminate\Http\Response |
|
60 | + */ |
|
61 | + public function account() |
|
62 | + { |
|
63 | + return \Response::json($this->repo->account($this->relations), 200); |
|
64 | + } |
|
65 | 65 | |
66 | - /** |
|
67 | - * Block the user. |
|
68 | - * |
|
69 | - * @param integer $id Id of the user. |
|
70 | - * @return \Illuminate\Http\Response |
|
71 | - */ |
|
72 | - public function block($id) |
|
73 | - { |
|
74 | - return \Response::json($this->repo->block($id), 200); |
|
75 | - } |
|
66 | + /** |
|
67 | + * Block the user. |
|
68 | + * |
|
69 | + * @param integer $id Id of the user. |
|
70 | + * @return \Illuminate\Http\Response |
|
71 | + */ |
|
72 | + public function block($id) |
|
73 | + { |
|
74 | + return \Response::json($this->repo->block($id), 200); |
|
75 | + } |
|
76 | 76 | |
77 | - /** |
|
78 | - * Unblock the user. |
|
79 | - * |
|
80 | - * @param integer $id Id of the user. |
|
81 | - * @return \Illuminate\Http\Response |
|
82 | - */ |
|
83 | - public function unblock($id) |
|
84 | - { |
|
85 | - return \Response::json($this->repo->unblock($id), 200); |
|
86 | - } |
|
77 | + /** |
|
78 | + * Unblock the user. |
|
79 | + * |
|
80 | + * @param integer $id Id of the user. |
|
81 | + * @return \Illuminate\Http\Response |
|
82 | + */ |
|
83 | + public function unblock($id) |
|
84 | + { |
|
85 | + return \Response::json($this->repo->unblock($id), 200); |
|
86 | + } |
|
87 | 87 | |
88 | - /** |
|
89 | - * Logout the user. |
|
90 | - * |
|
91 | - * @return \Illuminate\Http\Response |
|
92 | - */ |
|
93 | - public function logout() |
|
94 | - { |
|
95 | - return \Response::json($this->loginProxy->logout(), 200); |
|
96 | - } |
|
88 | + /** |
|
89 | + * Logout the user. |
|
90 | + * |
|
91 | + * @return \Illuminate\Http\Response |
|
92 | + */ |
|
93 | + public function logout() |
|
94 | + { |
|
95 | + return \Response::json($this->loginProxy->logout(), 200); |
|
96 | + } |
|
97 | 97 | |
98 | - /** |
|
99 | - * Handle a registration request. |
|
100 | - * |
|
101 | - * @param \Illuminate\Http\Request $request |
|
102 | - * @return \Illuminate\Http\Response |
|
103 | - */ |
|
104 | - public function register(Request $request) |
|
105 | - { |
|
106 | - $this->validate($request, [ |
|
107 | - 'name' => 'nullable|string', |
|
108 | - 'email' => 'required|email|unique:users,email,{id}', |
|
109 | - 'password' => 'required|min:6' |
|
110 | - ]); |
|
98 | + /** |
|
99 | + * Handle a registration request. |
|
100 | + * |
|
101 | + * @param \Illuminate\Http\Request $request |
|
102 | + * @return \Illuminate\Http\Response |
|
103 | + */ |
|
104 | + public function register(Request $request) |
|
105 | + { |
|
106 | + $this->validate($request, [ |
|
107 | + 'name' => 'nullable|string', |
|
108 | + 'email' => 'required|email|unique:users,email,{id}', |
|
109 | + 'password' => 'required|min:6' |
|
110 | + ]); |
|
111 | 111 | |
112 | - return \Response::json($this->repo->register($request->only('name', 'email', 'password')), 200); |
|
113 | - } |
|
112 | + return \Response::json($this->repo->register($request->only('name', 'email', 'password')), 200); |
|
113 | + } |
|
114 | 114 | |
115 | - /** |
|
116 | - * Handle a login request to the application. |
|
117 | - * |
|
118 | - * @param \Illuminate\Http\Request $request |
|
119 | - * @return \Illuminate\Http\Response |
|
120 | - */ |
|
121 | - public function login(Request $request) |
|
122 | - { |
|
123 | - $this->validate($request, [ |
|
124 | - 'email' => 'required|email', |
|
125 | - 'password' => 'required|min:6' |
|
126 | - ]); |
|
115 | + /** |
|
116 | + * Handle a login request to the application. |
|
117 | + * |
|
118 | + * @param \Illuminate\Http\Request $request |
|
119 | + * @return \Illuminate\Http\Response |
|
120 | + */ |
|
121 | + public function login(Request $request) |
|
122 | + { |
|
123 | + $this->validate($request, [ |
|
124 | + 'email' => 'required|email', |
|
125 | + 'password' => 'required|min:6' |
|
126 | + ]); |
|
127 | 127 | |
128 | - return \Response::json($this->loginProxy->login($request->only('email', 'password')), 200); |
|
129 | - } |
|
128 | + return \Response::json($this->loginProxy->login($request->only('email', 'password')), 200); |
|
129 | + } |
|
130 | 130 | |
131 | - /** |
|
132 | - * Handle a social login request of the none admin to the application. |
|
133 | - * |
|
134 | - * @param \Illuminate\Http\Request $request |
|
135 | - * @return \Illuminate\Http\Response |
|
136 | - */ |
|
137 | - public function loginSocial(Request $request) |
|
138 | - { |
|
139 | - $this->validate($request, [ |
|
140 | - 'auth_code' => 'required_without:access_token', |
|
141 | - 'access_token' => 'required_without:auth_code', |
|
142 | - 'type' => 'required|in:facebook,google' |
|
143 | - ]); |
|
131 | + /** |
|
132 | + * Handle a social login request of the none admin to the application. |
|
133 | + * |
|
134 | + * @param \Illuminate\Http\Request $request |
|
135 | + * @return \Illuminate\Http\Response |
|
136 | + */ |
|
137 | + public function loginSocial(Request $request) |
|
138 | + { |
|
139 | + $this->validate($request, [ |
|
140 | + 'auth_code' => 'required_without:access_token', |
|
141 | + 'access_token' => 'required_without:auth_code', |
|
142 | + 'type' => 'required|in:facebook,google' |
|
143 | + ]); |
|
144 | 144 | |
145 | - return \Response::json($this->repo->loginSocial($request->only('auth_code', 'access_token', 'type')), 200); |
|
146 | - } |
|
145 | + return \Response::json($this->repo->loginSocial($request->only('auth_code', 'access_token', 'type')), 200); |
|
146 | + } |
|
147 | 147 | |
148 | - /** |
|
149 | - * Assign the given groups to the given user. |
|
150 | - * |
|
151 | - * @param \Illuminate\Http\Request $request |
|
152 | - * @return \Illuminate\Http\Response |
|
153 | - */ |
|
154 | - public function assigngroups(Request $request) |
|
155 | - { |
|
156 | - $this->validate($request, [ |
|
157 | - 'group_ids' => 'required|exists:groups,id', |
|
158 | - 'user_id' => 'required|exists:users,id' |
|
159 | - ]); |
|
148 | + /** |
|
149 | + * Assign the given groups to the given user. |
|
150 | + * |
|
151 | + * @param \Illuminate\Http\Request $request |
|
152 | + * @return \Illuminate\Http\Response |
|
153 | + */ |
|
154 | + public function assigngroups(Request $request) |
|
155 | + { |
|
156 | + $this->validate($request, [ |
|
157 | + 'group_ids' => 'required|exists:groups,id', |
|
158 | + 'user_id' => 'required|exists:users,id' |
|
159 | + ]); |
|
160 | 160 | |
161 | - return \Response::json($this->repo->assignGroups($request->get('user_id'), $request->get('group_ids')), 200); |
|
162 | - } |
|
161 | + return \Response::json($this->repo->assignGroups($request->get('user_id'), $request->get('group_ids')), 200); |
|
162 | + } |
|
163 | 163 | |
164 | - /** |
|
165 | - * Send a reset link to the given user. |
|
166 | - * |
|
167 | - * @param \Illuminate\Http\Request $request |
|
168 | - * @return \Illuminate\Http\Response |
|
169 | - */ |
|
170 | - public function sendreset(Request $request) |
|
171 | - { |
|
172 | - $this->validate($request, ['email' => 'required|email']); |
|
164 | + /** |
|
165 | + * Send a reset link to the given user. |
|
166 | + * |
|
167 | + * @param \Illuminate\Http\Request $request |
|
168 | + * @return \Illuminate\Http\Response |
|
169 | + */ |
|
170 | + public function sendreset(Request $request) |
|
171 | + { |
|
172 | + $this->validate($request, ['email' => 'required|email']); |
|
173 | 173 | |
174 | - return \Response::json($this->repo->sendReset($request->only('email')), 200); |
|
175 | - } |
|
174 | + return \Response::json($this->repo->sendReset($request->only('email')), 200); |
|
175 | + } |
|
176 | 176 | |
177 | - /** |
|
178 | - * Reset the given user's password. |
|
179 | - * |
|
180 | - * @param \Illuminate\Http\Request $request |
|
181 | - * @return \Illuminate\Http\Response |
|
182 | - */ |
|
183 | - public function resetpassword(Request $request) |
|
184 | - { |
|
185 | - $this->validate($request, [ |
|
186 | - 'token' => 'required', |
|
187 | - 'email' => 'required|email', |
|
188 | - 'password' => 'required|confirmed|min:6', |
|
189 | - 'password_confirmation' => 'required', |
|
190 | - ]); |
|
177 | + /** |
|
178 | + * Reset the given user's password. |
|
179 | + * |
|
180 | + * @param \Illuminate\Http\Request $request |
|
181 | + * @return \Illuminate\Http\Response |
|
182 | + */ |
|
183 | + public function resetpassword(Request $request) |
|
184 | + { |
|
185 | + $this->validate($request, [ |
|
186 | + 'token' => 'required', |
|
187 | + 'email' => 'required|email', |
|
188 | + 'password' => 'required|confirmed|min:6', |
|
189 | + 'password_confirmation' => 'required', |
|
190 | + ]); |
|
191 | 191 | |
192 | - return \Response::json($this->repo->resetPassword($request->only('email', 'password', 'password_confirmation', 'token')), 200); |
|
193 | - } |
|
192 | + return \Response::json($this->repo->resetPassword($request->only('email', 'password', 'password_confirmation', 'token')), 200); |
|
193 | + } |
|
194 | 194 | |
195 | - /** |
|
196 | - * Change the logged in user password. |
|
197 | - * |
|
198 | - * @param \Illuminate\Http\Request $request |
|
199 | - * @return \Illuminate\Http\Response |
|
200 | - */ |
|
201 | - public function changePassword(Request $request) |
|
202 | - { |
|
203 | - $this->validate($request, [ |
|
204 | - 'old_password' => 'required', |
|
205 | - 'password' => 'required|confirmed|min:6', |
|
206 | - 'password_confirmation' => 'required', |
|
207 | - ]); |
|
195 | + /** |
|
196 | + * Change the logged in user password. |
|
197 | + * |
|
198 | + * @param \Illuminate\Http\Request $request |
|
199 | + * @return \Illuminate\Http\Response |
|
200 | + */ |
|
201 | + public function changePassword(Request $request) |
|
202 | + { |
|
203 | + $this->validate($request, [ |
|
204 | + 'old_password' => 'required', |
|
205 | + 'password' => 'required|confirmed|min:6', |
|
206 | + 'password_confirmation' => 'required', |
|
207 | + ]); |
|
208 | 208 | |
209 | - return \Response::json($this->repo->changePassword($request->only('old_password', 'password', 'password_confirmation')), 200); |
|
210 | - } |
|
209 | + return \Response::json($this->repo->changePassword($request->only('old_password', 'password', 'password_confirmation')), 200); |
|
210 | + } |
|
211 | 211 | |
212 | - /** |
|
213 | - * Refresh the expired login token. |
|
214 | - * |
|
215 | - * @param \Illuminate\Http\Request $request |
|
216 | - * @return \Illuminate\Http\Response |
|
217 | - */ |
|
218 | - public function refreshtoken(Request $request) |
|
219 | - { |
|
220 | - $this->validate($request, [ |
|
221 | - 'refreshtoken' => 'required', |
|
222 | - ]); |
|
212 | + /** |
|
213 | + * Refresh the expired login token. |
|
214 | + * |
|
215 | + * @param \Illuminate\Http\Request $request |
|
216 | + * @return \Illuminate\Http\Response |
|
217 | + */ |
|
218 | + public function refreshtoken(Request $request) |
|
219 | + { |
|
220 | + $this->validate($request, [ |
|
221 | + 'refreshtoken' => 'required', |
|
222 | + ]); |
|
223 | 223 | |
224 | - return \Response::json($this->loginProxy->refreshtoken($request->get('refreshtoken')), 200); |
|
225 | - } |
|
224 | + return \Response::json($this->loginProxy->refreshtoken($request->get('refreshtoken')), 200); |
|
225 | + } |
|
226 | 226 | |
227 | - /** |
|
228 | - * Paginate all users with in the given group. |
|
229 | - * |
|
230 | - * @param \Illuminate\Http\Request $request |
|
231 | - * @param string $groupName The name of the requested group. |
|
232 | - * @param integer $perPage Number of rows per page default 15. |
|
233 | - * @param string $sortBy The name of the column to sort by. |
|
234 | - * @param boolean $desc Sort ascending or descinding (1: desc, 0: asc). |
|
235 | - * @return \Illuminate\Http\Response |
|
236 | - */ |
|
237 | - public function group(Request $request, $groupName, $perPage = false, $sortBy = 'created_at', $desc = 1) |
|
238 | - { |
|
239 | - return \Response::json($this->repo->group($request->all(), $groupName, $this->relations, $perPage, $sortBy, $desc), 200); |
|
240 | - } |
|
227 | + /** |
|
228 | + * Paginate all users with in the given group. |
|
229 | + * |
|
230 | + * @param \Illuminate\Http\Request $request |
|
231 | + * @param string $groupName The name of the requested group. |
|
232 | + * @param integer $perPage Number of rows per page default 15. |
|
233 | + * @param string $sortBy The name of the column to sort by. |
|
234 | + * @param boolean $desc Sort ascending or descinding (1: desc, 0: asc). |
|
235 | + * @return \Illuminate\Http\Response |
|
236 | + */ |
|
237 | + public function group(Request $request, $groupName, $perPage = false, $sortBy = 'created_at', $desc = 1) |
|
238 | + { |
|
239 | + return \Response::json($this->repo->group($request->all(), $groupName, $this->relations, $perPage, $sortBy, $desc), 200); |
|
240 | + } |
|
241 | 241 | |
242 | - /** |
|
243 | - * Save the given data to the logged in user. |
|
244 | - * |
|
245 | - * @param \Illuminate\Http\Request $request |
|
246 | - * @return \Illuminate\Http\Response |
|
247 | - */ |
|
248 | - public function saveProfile(Request $request) |
|
249 | - { |
|
250 | - $this->validate($request, [ |
|
251 | - 'name' => 'nullable|string', |
|
252 | - 'email' => 'required|email|unique:users,email,' . \Auth::id() |
|
253 | - ]); |
|
242 | + /** |
|
243 | + * Save the given data to the logged in user. |
|
244 | + * |
|
245 | + * @param \Illuminate\Http\Request $request |
|
246 | + * @return \Illuminate\Http\Response |
|
247 | + */ |
|
248 | + public function saveProfile(Request $request) |
|
249 | + { |
|
250 | + $this->validate($request, [ |
|
251 | + 'name' => 'nullable|string', |
|
252 | + 'email' => 'required|email|unique:users,email,' . \Auth::id() |
|
253 | + ]); |
|
254 | 254 | |
255 | - return \Response::json($this->repo->saveProfile($request->only('name', 'email')), 200); |
|
256 | - } |
|
255 | + return \Response::json($this->repo->saveProfile($request->only('name', 'email')), 200); |
|
256 | + } |
|
257 | 257 | } |
@@ -8,44 +8,44 @@ |
||
8 | 8 | |
9 | 9 | class OauthClientsController extends BaseApiController |
10 | 10 | { |
11 | - /** |
|
12 | - * The name of the model that is used by the base api controller |
|
13 | - * to preform actions like (add, edit ... etc). |
|
14 | - * @var string |
|
15 | - */ |
|
16 | - protected $model = 'oauthClients'; |
|
11 | + /** |
|
12 | + * The name of the model that is used by the base api controller |
|
13 | + * to preform actions like (add, edit ... etc). |
|
14 | + * @var string |
|
15 | + */ |
|
16 | + protected $model = 'oauthClients'; |
|
17 | 17 | |
18 | - /** |
|
19 | - * The validations rules used by the base api controller |
|
20 | - * to check before add. |
|
21 | - * @var array |
|
22 | - */ |
|
23 | - protected $validationRules = [ |
|
24 | - 'name' => 'required|max:255', |
|
25 | - 'redirect' => 'required|url', |
|
26 | - 'user_id' => 'required|exists:users,id', |
|
27 | - 'revoked' => 'boolean' |
|
28 | - ]; |
|
18 | + /** |
|
19 | + * The validations rules used by the base api controller |
|
20 | + * to check before add. |
|
21 | + * @var array |
|
22 | + */ |
|
23 | + protected $validationRules = [ |
|
24 | + 'name' => 'required|max:255', |
|
25 | + 'redirect' => 'required|url', |
|
26 | + 'user_id' => 'required|exists:users,id', |
|
27 | + 'revoked' => 'boolean' |
|
28 | + ]; |
|
29 | 29 | |
30 | - /** |
|
31 | - * Revoke the given client. |
|
32 | - * |
|
33 | - * @param integer $clientId Id of the client |
|
34 | - * @return \Illuminate\Http\Response |
|
35 | - */ |
|
36 | - public function revoke($clientId) |
|
37 | - { |
|
38 | - return \Response::json($this->repo->revoke($clientId), 200); |
|
39 | - } |
|
30 | + /** |
|
31 | + * Revoke the given client. |
|
32 | + * |
|
33 | + * @param integer $clientId Id of the client |
|
34 | + * @return \Illuminate\Http\Response |
|
35 | + */ |
|
36 | + public function revoke($clientId) |
|
37 | + { |
|
38 | + return \Response::json($this->repo->revoke($clientId), 200); |
|
39 | + } |
|
40 | 40 | |
41 | - /** |
|
42 | - * Un revoke the given client. |
|
43 | - * |
|
44 | - * @param integer $clientId Id of the client |
|
45 | - * @return \Illuminate\Http\Response |
|
46 | - */ |
|
47 | - public function unRevoke($clientId) |
|
48 | - { |
|
49 | - return \Response::json($this->repo->unRevoke($clientId), 200); |
|
50 | - } |
|
41 | + /** |
|
42 | + * Un revoke the given client. |
|
43 | + * |
|
44 | + * @param integer $clientId Id of the client |
|
45 | + * @return \Illuminate\Http\Response |
|
46 | + */ |
|
47 | + public function unRevoke($clientId) |
|
48 | + { |
|
49 | + return \Response::json($this->repo->unRevoke($clientId), 200); |
|
50 | + } |
|
51 | 51 | } |
@@ -5,105 +5,105 @@ |
||
5 | 5 | |
6 | 6 | class LoginProxy |
7 | 7 | { |
8 | - private $apiConsumer; |
|
9 | - |
|
10 | - private $auth; |
|
11 | - |
|
12 | - private $db; |
|
13 | - |
|
14 | - private $request; |
|
15 | - |
|
16 | - private $userRepository; |
|
17 | - |
|
18 | - public function __construct(Application $app) |
|
19 | - { |
|
20 | - |
|
21 | - $this->userRepository = $app->make('App\Modules\V1\Acl\Repositories\UserRepository'); |
|
22 | - $this->apiConsumer = $app->make('apiconsumer'); |
|
23 | - $this->auth = $app->make('auth'); |
|
24 | - $this->db = $app->make('db'); |
|
25 | - $this->request = $app->make('request'); |
|
26 | - } |
|
27 | - |
|
28 | - /** |
|
29 | - * Attempt to create an access token using user credentials. |
|
30 | - * |
|
31 | - * @param array $credentials |
|
32 | - * @param boolean $adminLogin |
|
33 | - * @return array |
|
34 | - */ |
|
35 | - public function login($credentials, $adminLogin = false) |
|
36 | - { |
|
37 | - $this->userRepository->login($credentials, $adminLogin); |
|
38 | - |
|
39 | - return $this->proxy('password', [ |
|
40 | - 'username' => $credentials['email'], |
|
41 | - 'password' => $credentials['password'] |
|
42 | - ]); |
|
43 | - } |
|
44 | - |
|
45 | - /** |
|
46 | - * Attempt to refresh the access token useing the given refresh token. |
|
47 | - * |
|
48 | - * @param string $refreshToken |
|
49 | - * @return array |
|
50 | - */ |
|
51 | - public function refreshtoken($refreshToken) |
|
52 | - { |
|
53 | - return $this->proxy('refresh_token', [ |
|
54 | - 'refresh_token' => $refreshToken |
|
55 | - ]); |
|
56 | - } |
|
57 | - |
|
58 | - /** |
|
59 | - * Proxy a request to the OAuth server. |
|
60 | - * |
|
61 | - * @param string $grantType what type of grant type should be proxied |
|
62 | - * @param array |
|
63 | - */ |
|
64 | - public function proxy($grantType, array $data = []) |
|
65 | - { |
|
66 | - $data = array_merge($data, [ |
|
67 | - 'client_id' => env('PASSWORD_CLIENT_ID'), |
|
68 | - 'client_secret' => env('PASSWORD_CLIENT_SECRET'), |
|
69 | - 'grant_type' => $grantType |
|
70 | - ]); |
|
71 | - |
|
72 | - $response = $this->apiConsumer->post('/oauth/token', $data); |
|
73 | - |
|
74 | - if ( ! $response->isSuccessful()) |
|
75 | - { |
|
76 | - if ($grantType == 'refresh_token') |
|
77 | - { |
|
78 | - \ErrorHandler::invalidRefreshToken(); |
|
79 | - } |
|
80 | - |
|
81 | - \ErrorHandler::loginFailed(); |
|
82 | - } |
|
83 | - |
|
84 | - $data = json_decode($response->getContent()); |
|
85 | - |
|
86 | - return [ |
|
87 | - 'access_token' => $data->access_token, |
|
88 | - 'refresh_token' => $data->refresh_token, |
|
89 | - 'expires_in' => $data->expires_in |
|
90 | - ]; |
|
91 | - } |
|
92 | - |
|
93 | - /** |
|
94 | - * Logs out the user. We revoke access token and refresh token. |
|
95 | - */ |
|
96 | - public function logout() |
|
97 | - { |
|
98 | - $accessToken = $this->auth->user()->token(); |
|
99 | - |
|
100 | - $this->db |
|
101 | - ->table('oauth_refresh_tokens') |
|
102 | - ->where('access_token_id', $accessToken->id) |
|
103 | - ->update([ |
|
104 | - 'revoked' => true |
|
105 | - ]); |
|
106 | - |
|
107 | - $accessToken->revoke(); |
|
108 | - } |
|
8 | + private $apiConsumer; |
|
9 | + |
|
10 | + private $auth; |
|
11 | + |
|
12 | + private $db; |
|
13 | + |
|
14 | + private $request; |
|
15 | + |
|
16 | + private $userRepository; |
|
17 | + |
|
18 | + public function __construct(Application $app) |
|
19 | + { |
|
20 | + |
|
21 | + $this->userRepository = $app->make('App\Modules\V1\Acl\Repositories\UserRepository'); |
|
22 | + $this->apiConsumer = $app->make('apiconsumer'); |
|
23 | + $this->auth = $app->make('auth'); |
|
24 | + $this->db = $app->make('db'); |
|
25 | + $this->request = $app->make('request'); |
|
26 | + } |
|
27 | + |
|
28 | + /** |
|
29 | + * Attempt to create an access token using user credentials. |
|
30 | + * |
|
31 | + * @param array $credentials |
|
32 | + * @param boolean $adminLogin |
|
33 | + * @return array |
|
34 | + */ |
|
35 | + public function login($credentials, $adminLogin = false) |
|
36 | + { |
|
37 | + $this->userRepository->login($credentials, $adminLogin); |
|
38 | + |
|
39 | + return $this->proxy('password', [ |
|
40 | + 'username' => $credentials['email'], |
|
41 | + 'password' => $credentials['password'] |
|
42 | + ]); |
|
43 | + } |
|
44 | + |
|
45 | + /** |
|
46 | + * Attempt to refresh the access token useing the given refresh token. |
|
47 | + * |
|
48 | + * @param string $refreshToken |
|
49 | + * @return array |
|
50 | + */ |
|
51 | + public function refreshtoken($refreshToken) |
|
52 | + { |
|
53 | + return $this->proxy('refresh_token', [ |
|
54 | + 'refresh_token' => $refreshToken |
|
55 | + ]); |
|
56 | + } |
|
57 | + |
|
58 | + /** |
|
59 | + * Proxy a request to the OAuth server. |
|
60 | + * |
|
61 | + * @param string $grantType what type of grant type should be proxied |
|
62 | + * @param array |
|
63 | + */ |
|
64 | + public function proxy($grantType, array $data = []) |
|
65 | + { |
|
66 | + $data = array_merge($data, [ |
|
67 | + 'client_id' => env('PASSWORD_CLIENT_ID'), |
|
68 | + 'client_secret' => env('PASSWORD_CLIENT_SECRET'), |
|
69 | + 'grant_type' => $grantType |
|
70 | + ]); |
|
71 | + |
|
72 | + $response = $this->apiConsumer->post('/oauth/token', $data); |
|
73 | + |
|
74 | + if ( ! $response->isSuccessful()) |
|
75 | + { |
|
76 | + if ($grantType == 'refresh_token') |
|
77 | + { |
|
78 | + \ErrorHandler::invalidRefreshToken(); |
|
79 | + } |
|
80 | + |
|
81 | + \ErrorHandler::loginFailed(); |
|
82 | + } |
|
83 | + |
|
84 | + $data = json_decode($response->getContent()); |
|
85 | + |
|
86 | + return [ |
|
87 | + 'access_token' => $data->access_token, |
|
88 | + 'refresh_token' => $data->refresh_token, |
|
89 | + 'expires_in' => $data->expires_in |
|
90 | + ]; |
|
91 | + } |
|
92 | + |
|
93 | + /** |
|
94 | + * Logs out the user. We revoke access token and refresh token. |
|
95 | + */ |
|
96 | + public function logout() |
|
97 | + { |
|
98 | + $accessToken = $this->auth->user()->token(); |
|
99 | + |
|
100 | + $this->db |
|
101 | + ->table('oauth_refresh_tokens') |
|
102 | + ->where('access_token_id', $accessToken->id) |
|
103 | + ->update([ |
|
104 | + 'revoked' => true |
|
105 | + ]); |
|
106 | + |
|
107 | + $accessToken->revoke(); |
|
108 | + } |
|
109 | 109 | } |
110 | 110 | \ No newline at end of file |