App\Http\Controllers\ForgotPasswordController

Complexity

Total Complexity

7

Size/Duplication

Total Lines	57
Duplicated Lines	0 %

Importance

Changes	2
Bugs	0	Features	0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	forgot()	0	16	2
A	generateToken()	0	11	2
A	reset()	0	22	3

<?php

namespace App\Http\Controllers;

use App\Http\Requests\ResetPasswordRequest;

The type App\Http\Requests\ResetPasswordRequest was not found. Maybe you did not declare it correctly or list all dependencies?

use App\Models\User;
use Auth;
use Carbon\Carbon;
use DB;
use Hash;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Password;
use Illuminate\Support\Str;
use Spatie\Multitenancy\Models\Concerns\UsesLandlordConnection;

class ForgotPasswordController extends Controller
{
    use UsesLandlordConnection;

    public function forgot(Request $request)
    {
        $credentials = request()->validate(['email' => 'required|email']);

The assignment to $credentials is dead and can be removed.

        $user = User::where('email', $request->email)->first();
        if (! $user) {
            return response()->json(['error' => '404', 'error_msg' => 'Email not exits in record']);
        }
        $token = $this->generateToken();
        DB::connection($this->getConnectionName())->table('password_resets')->insert([
            'email' => $request->email,
            'token' => $token, //change 60 to any length you want
            'created_at' => Carbon::now(),
        ]);
        $user->sendPasswordResetNotification($token);

        return response()->json(['msg' => 'Reset password link sent on your email id.']);
    }

    private function generateToken()
    {
        // This is set in the .env file
        $key = config('app.key');

        // Illuminate\Support\Str;
        if (Str::startsWith($key, 'base64:')) {
            $key = base64_decode(substr($key, 7));
        }

        return hash_hmac('sha256', Str::random(40), $key);
    }

    public function reset(Request $request)
    {
        $credentials = request()->validate([

The assignment to $credentials is dead and can be removed.

            'email' => 'required|email',
            'token' => 'required|string',
            'password' => 'required|string|confirmed',
        ]);
        $tokenData = DB::connection($this->getConnectionName())->table('password_resets')
        ->where('token', $request->token)->where('email', $request->email)->first();
        if ($tokenData) {
            $user = User::where('email', $request->email)->first();
            if ($user) {
                $user->password = bcrypt($request->password);
                $user->save(); //or $user->save();
                DB::connection($this->getConnectionName())->table('password_resets')->where('email', $user->email)->delete();

                return response()->json(['msg' => 'Password has been successfully changed.']);
            } else {
                return response()->json(['error_msg' => 'User Not available.']);
            }
        } else {
            return response()->json(['error_msg' => 'Token not match for this email.']);
        }
    }
}