App\Http\Controllers\PasswordsController

Complexity

Total Complexity

9

Size/Duplication

Total Lines	60
Duplicated Lines	0 %

Importance

Changes	3
Bugs	2	Features	0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	token()	0	19	4
A	__construct()	0	3	1
A	reset()	0	23	4

<?php

namespace App\Http\Controllers;

use App\Http\Requests\PasswordTokenRequest;
use App\Models\PasswordReset;
use App\Models\User;
use App\Notifications\PasswordResetRequest;
use App\Notifications\PasswordResetSuccess;
use App\Services\TenantManager;
use Illuminate\Support\Str;

class PasswordsController extends Controller
{
    protected $tenantManager;

    /**
     * Create a new controller instance.
     *
     * @param TenantManager $tenantManager
     *
     * @return void
     */
    public function __construct(TenantManager $tenantManager)
    {
        $this->tenantManager = $tenantManager;
    }

    public function token(PasswordTokenRequest $request)
    {
        if ($this->tenantManager->loadTenantByUsername($request->email)) {

The property email does not seem to exist on App\Http\Requests\PasswordTokenRequest.

            $user = User::where('email', $request->email)->first();

            if ($user) {
                $passwordReset = PasswordReset::updateOrCreate(
                    ['email' => $user->email],
                    ['email' => $user->email, 'token' => Str::random(60)]

The method random() does not exist on Illuminate\Support\Str.

                );

                if ($passwordReset) {
                    $user->notify(new PasswordResetRequest($passwordReset->token));
                }
            }
        }

        //always empty response regardless of actual result (for security reasons)
        return response()->json();
    }

    public function reset(\App\Http\Requests\PasswordResetRequest $request)
    {
        $passwordReset = PasswordReset::where('token', $request->get('token'))->first();

The method get() does not exist on App\Http\Requests\PasswordResetRequest.

        if (!$passwordReset) {
            return response()->json(['message' => 'This password reset token is invalid.'], 404);
        }

        if ($this->tenantManager->loadTenantByUsername($passwordReset->email)) {
            $user = User::where('email', $passwordReset->email)->first();

            if (!$user) {
                return response()->json(['message' => 'We can\'t find a user with that e-mail address.'], 404);
            }

            $user->password = bcrypt($request->get('password'));
            $user->save();
            $passwordReset->delete();

            $user->notify(new PasswordResetSuccess());
        }

        return response()->json(['message' => 'Password has been changed.']);
    }
}