Admin\Controller\ZfcuserController::resetpasswordAction()

Complexity

Conditions	15
Paths	30

Size

Total Lines	122
Code Lines	73

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	27
CRAP Score	67.1583

Importance

Changes	1
Bugs	0	Features	0

<?php
    public function resetpasswordAction()
    {
        // if the user is logged in, we don't need to 'reset' the password
        if ($this->zfcUserAuthentication()->hasIdentity()) {
            // redirect to the login redirect route
            return $this->redirect()->toRoute($this->getOptions()->getLoginRedirectRoute());
        }

        //$config     = $this->getServiceLocator()->get('Config');
        //$options    = $this->getServiceLocator()->get('zfcuser_module_options');
        $config     = \Application\Module::getService('Config');
        $options    = \Application\Module::getService('zfcuser_module_options');
        /**
         * @var \Zend\Http\PhpEnvironment\Request|\Zend\Http\Request $request
         */
        $request    = $this->getRequest();
        //$service    = $this->getUserService();
        $service    = \Application\Module::getService('zfcuser_user_service');
        $form        = new ResetPasswordForm(null, $options);

The call to Admin\Form\ResetPasswordForm::__construct() has too many arguments starting with $options.

        $translator    = $this->getTranslator();
        
        // if password reset is disabled
        if (!$config['zfcuser']['enable_passwordreset']) {
            return array('enableRegistration' => false);
        }
        
        if ($options->getUseRedirectParameterIfPresent() && $request->getQuery()->get('redirect')) {
            $redirect = $request->getQuery()->get('redirect');
        } else {
            $redirect = false;
        }

        $redirectUrl = $this->url()->fromRoute(static::ROUTE_LOGIN) . ($redirect ? '?redirect=' . rawurlencode($redirect) : '');
        
        if (!$request->isPost() ) {
            
            $user = false;

The assignment to $user is dead and can be removed.

            $userId = (int) $this->params()->fromRoute('user_id');
            $resetToken = $this->params()->fromRoute('resettoken');
            
            $userTable = \Application\Module::getService('zfcuser_user_mapper');
            $user = $userTable->findById($userId);
            
            if (!$user ) {
                $this->flashMessenger()->addWarningMessage(
                    sprintf($translator->translate("invalid request"), '')
                );
                return $this->redirect()->toUrl($redirectUrl);
            }
            
            if (empty($resetToken) || ($resetToken != $user->getToken()) ) {
                $this->flashMessenger()->addWarningMessage(
                    sprintf($translator->translate("invalid request"), '')
                );
                return $this->redirect()->toUrl($redirectUrl);
            }
            
            return array(
                'user' => $user,
                'userId' => $userId,
                'resetToken' => $resetToken,
                'resetPasswordForm' => $form,
                'enablePasswordReset' => !!$config['zfcuser']['enable_passwordreset'],
                'redirect' => $redirect,
            );
            
        }
            
        $user = false;
        $userId = $this->params()->fromPost('identity');
        $resetToken = $this->params()->fromPost('token');
        
        $oModule = new AdminModule();
        $oModule->setAppConfig($config);
        $user = false;
        
        $userTable = \Application\Module::getService('zfcuser_user_mapper');
        $user = $userTable->findByEmail($userId);
            
        if (!$user ) {
            $this->flashMessenger()->addWarningMessage(
                sprintf($translator->translate("invalid request"), $userId)
            );
            return $this->redirect()->toUrl($redirectUrl);
        }
        
        if (empty($resetToken) || ($resetToken != $user->getToken()) ) {
            $this->flashMessenger()->addWarningMessage(
                sprintf($translator->translate("invalid request"), $resetToken)
            );
            return $this->redirect()->toUrl($redirectUrl);
        }
        
        $form->setData((array)$this->params()->fromPost());
        
        if (!$form->isValid() ) {
            
            return array(
            'user' => $user,
            'userId' => $userId,
            'resetToken' => $resetToken,
            'resetPasswordForm' => $form,
            'enablePasswordReset' => !!$config['zfcuser']['enable_passwordreset'], // $this->getOptions()->getEnablePasswordreset(),
            'redirect' => $redirect,
            );
            
        } else {
        
            $newCredential = $this->params()->fromPost('newCredential');
            
            $bcrypt        = new Bcrypt;
            $bcrypt->setCost($options->getPasswordCost());
            $user->setPassword($bcrypt->create($newCredential));
            $user->setToken('');
            $service->getUserMapper()->update($user);
        
            $this->flashMessenger()->addSuccessMessage(
                sprintf($translator->translate("password has been set"), $resetToken)
            );
            return $this->redirect()->toUrl(
                $this->url()->fromRoute($config["zfcuser_registration_redirect_route"]) 
                . ($redirect ? '?redirect='. rawurlencode($redirect) : '')
            );