User::resetPassword() - Code Metrics - Inspection of "Additional features" - hmlb/user-bundle - Measure and Improve Code Quality continuously with Scrutinizer

Completed

Push — master ( f021c8...431426 )

by Hugues

created 2016-02-14 13:34 UTC

User::resetPassword() B

↳ Parent: Project

Complexity

Conditions	4
Paths	4

Size

Total Lines	22
Code Lines	12

Duplication

Lines	0
Ratio	0 %

Metric	Value
dl	0
loc	22
rs	8.9197
cc	4
eloc	12
nc	4
nop	3

<?php

namespace HMLB\UserBundle\User;

use DateTime;
use HMLB\DDD\Entity\AggregateRoot;
use HMLB\DDD\Entity\Identity;
use HMLB\DDD\Validation\Assertion;
use HMLB\UserBundle\Event\EmailChanged;
use HMLB\UserBundle\Event\EmailConfirmed;
use HMLB\UserBundle\Event\EmailValidationRequested;
use HMLB\UserBundle\Event\PasswordChanged;
use HMLB\UserBundle\Event\PasswordReset;
use HMLB\UserBundle\Event\PasswordResetRequested;
use HMLB\UserBundle\Event\UserRegistered;
use HMLB\UserBundle\Exception\EmailAlreadyConfirmedException;
use HMLB\UserBundle\Exception\InvalidEmailConfirmationTokenException;
use HMLB\UserBundle\Exception\InvalidPasswordResettingTokenException;
use HMLB\UserBundle\Exception\PasswordResettingNotRequestedException;
use SimpleBus\Message\Recorder\ContainsRecordedMessages;
use SimpleBus\Message\Recorder\PrivateMessageRecorderCapabilities;
use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;
use Symfony\Component\Security\Core\User\AdvancedUserInterface;

class User implements AdvancedUserInterface, AggregateRoot, ContainsRecordedMessages
{
    use PrivateMessageRecorderCapabilities;

    /**
     * @var Identity
     */
    protected $id;

    /**
     * @var Role[]
     */
    protected $roles = [];

    /**
     * @var string
     */
    protected $username;

    /**
     * @var string
     */
    protected $usernameCanonical;

    /**
     * @var string
     */
    protected $email;

    /**
     * @var string
     */
    protected $emailCanonical;

    /**
     * @var bool
     */
    protected $enabled = false;

    /**
     * The salt to use for hashing.
     *
     * @var string
     */
    protected $salt;

    /**
     * Encrypted password. Must be persisted.
     *
     * @var string
     */
    protected $password;

    /**
     * @var DateTime
     */
    protected $lastLogin;

    /**
     * Random string sent to the user email address in order to verify it.
     *
     * @var string
     */
    protected $confirmationToken;

    /**
     * Random string sent to the user email address in order to reset the password.
     *
     * @var string
     */
    protected $resettingToken;

    /**
     * @var DateTime
     */
    protected $passwordRequestedAt;

    /**
     * @var DateTime
     */
    protected $created;

    /**
     * @var DateTime
     */
    protected $updated;

    /**
     * @var bool
     */
    protected $locked = false;

    /**
     * @var bool
     */
    protected $expired = false;

    /**
     * @var DateTime
     */
    protected $expiresAt;

    /**
     * @var bool
     */
    protected $credentialsExpired = false;

    /**
     * @var DateTime
     */
    protected $credentialsExpireAt;

    /**
     * @param string                       $username
     * @param string                       $email
     * @param string                       $plainPassword
     * @param UserPasswordEncoderInterface $encoder
     * @param array                        $roles
     * @param bool                         $enable
     */
    protected function __construct(
        string $username,
        string $email,
        string $plainPassword,
        UserPasswordEncoderInterface $encoder,
        array $roles = [],
        bool $enable = true
    ) {
        Assertion::email($email);
        $this->id = new Identity();
        $this->roles = $roles;
        $this->salt = $this->generateToken();
        $this->confirmationToken = $this->generateToken();
        $this->created = new DateTime();
        $this->username = $username;
        $this->email = $email;
        if ($enable) {
            $this->enable();
        }
        $this->updateCanonicalFields();
        $this->updatePassword($plainPassword, $encoder);
    }

    public static function register(
        $username,
        $email,
        $plainPassword,
        UserPasswordEncoderInterface $encoder,
        array $roles = ['ROLE_USER']
    ): User
    {
        $user = new static($username, $email, $plainPassword, $encoder, $roles);
        $user->recordUserRegistered();
        $user->enabled = true;

        return $user;
    }

    /**
     * Getter de id.
     *
     * @return Identity
     */
    public function getId(): Identity
    {
        return is_string($this->id) ? new Identity($this->id) : $this->id;
    }

    /**
     * {@inheritdoc}
     */
    public function getRoles(): array
    {
        return $this->roles;
    }

    /**
     * {@inheritdoc}
     */
    public function getPassword(): string
    {
        return $this->password;
    }

    /**
     * Returns the salt that was originally used to encode the password.
     *
     * This can return null if the password was not encoded using a salt.
     *
     * @return string|null The salt
     */
    public function getSalt(): string
    {
        return $this->salt;
    }

    /**
     * {@inheritdoc}
     */
    public function getUsername(): string
    {
        return $this->username;
    }

    /**
     * {@inheritdoc}
     */
    public function eraseCredentials()
    {
        //No-op
    }

    /**
     * {@inheritdoc}
     */
    public function isAccountNonExpired(): bool
    {
        if (true === $this->expired) {
            return false;
        }

        if (null !== $this->expiresAt && $this->expiresAt->getTimestamp() < time()) {
            return false;
        }

        return true;
    }

    /**
     * {@inheritdoc}
     */
    public function isAccountNonLocked(): bool
    {
        return !$this->locked;
    }

    /**
     * {@inheritdoc}
     */
    public function isCredentialsNonExpired(): bool
    {
        if (true === $this->credentialsExpired) {
            return false;
        }

        if (null !== $this->credentialsExpireAt && $this->credentialsExpireAt->getTimestamp() < time()) {
            return false;
        }

        return true;
    }

    /**
     * Change the email address of the user.
     *
     * @param string $email
     */
    public function changeEmail(string $email)
    {
        Assertion::email($email);
        $oldEmail = $this->email;
        $this->email = $email;
        $this->emailCanonical = self::canonicalize($this->email);
        $this->updated = new DateTime();
        $this->record(new EmailChanged($this->getId(), $oldEmail, $this->email));
    }

    /**
     * @param string                       $password
     * @param UserPasswordEncoderInterface $encoder
     */
    public function changePassword(string $password, UserPasswordEncoderInterface $encoder)
    {
        $oldPassword = $this->password;
        $this->updatePassword($password, $encoder);
        $this->updated = new DateTime();
        $this->record(new PasswordChanged($this->id, $oldPassword, $password));
    }

    /**
     * {@inheritdoc}
     */
    public function isEnabled(): bool
    {
        return $this->enabled;
    }

    /**
     * Enable
     */
    public function enable()
    {
        $this->enabled = true;
    }

    /**
     * Disable
     */
    public function disable()
    {
        $this->enabled = false;
    }

    /**
     *
     * @return bool
     *
     */
    public function isEmailConfirmed(): bool
    {
        return null === $this->confirmationToken;
    }

    public function requestEmailConfirmation()
    {
        $this->confirmationToken = $this->generateToken();
        $this->updated = new DateTime();
        $this->record(new EmailValidationRequested($this->id, $this->confirmationToken));
    }

    public function confirmEmail(string $confirmationToken)
    {
        if ($this->isEmailConfirmed()) {
            throw new EmailAlreadyConfirmedException();
        }

        if ($confirmationToken !== $this->confirmationToken) {
            throw new InvalidEmailConfirmationTokenException();
        }

        $this->confirmationToken = null;
        $this->updated = new DateTime();
        $this->record(new EmailConfirmed($this->id, $this->email));
    }

    public function isPasswordResetRequested(): bool
    {
        return null !== $this->resettingToken;
    }

    public function requestPasswordReset()
    {
        $this->resettingToken = $this->generateToken();
        $this->passwordRequestedAt = new DateTime();
        $this->updated = new DateTime();
        $this->record(new PasswordResetRequested($this->id, $this->resettingToken));
    }

    public function resetPassword(string $resettingToken, string $password, UserPasswordEncoderInterface $encoder)
    {
        if (!$this->isPasswordResetRequested()) {
            throw new PasswordResettingNotRequestedException();
        }

        if ($resettingToken !== $this->resettingToken) {
            throw new InvalidPasswordResettingTokenException();
        }

        $this->resettingToken = null;

        $oldPassword = $this->password;
        $this->updatePassword($password, $encoder);
        $this->updated = new DateTime();
        $this->record(new PasswordReset($this->id, $oldPassword, $password));

        //We validate email if password has been confirmed because the token has been sent to the email adress.
        if (!$this->isEmailConfirmed()) {
            $this->confirmEmail($this->confirmationToken);
        }
    }

    /**
     * {@inheritdoc}
     */
    private function updateCanonicalFields()
    {
        $this->usernameCanonical = self::canonicalize($this->username);
        $this->emailCanonical = self::canonicalize($this->email);
    }

    /**
     * @param string                       $plainPassword
     * @param UserPasswordEncoderInterface $encoder
     */
    private function updatePassword(string $plainPassword, UserPasswordEncoderInterface $encoder)
    {
        $this->password = $encoder->encodePassword($this, $plainPassword);
    }

    /**
     * Generate token string for salt, email validation or password resetting.
     * @return string
     *
     */
    private function generateToken(): string
    {
        return base_convert(sha1(uniqid(mt_rand(), true)), 16, 36);
    }

    protected function recordUserRegistered()
    {
        $this->record(new UserRegistered($this->getId(), $this->getEmail(), $this->getUsername()));
    }

    /**
     * @param $string
     *
     * @return string
     */
    public static function canonicalize(string $string): string
    {
        $trimmed = trim($string);

        return mb_convert_case($trimmed, MB_CASE_LOWER, mb_detect_encoding($string));
    }

    /**
     * @return string
     */
    public function getEmail(): string
    {
        return $this->email;
    }

    /**
     * Getter de lastLogin
     *
     * @return DateTime
     */
    public function getLastLogin()
    {
        return $this->lastLogin;
    }

    /**
     * Getter de confirmationToken
     *
     * @return string
     */
    public function getConfirmationToken()
    {
        return $this->confirmationToken;
    }

    /**
     * Getter de resettingToken
     *
     * @return string
     */
    public function getResettingToken()
    {
        return $this->resettingToken;
    }

    /**
     * Getter de created
     *
     * @return DateTime
     */
    public function getCreated()
    {
        return $this->created;
    }

    /**
     * Getter de updated
     *
     * @return DateTime
     */
    public function getUpdated()
    {
        return $this->updated;
    }
}


1			<?php
2
3			namespace HMLB\UserBundle\User;
4
5			use DateTime;
6			use HMLB\DDD\Entity\AggregateRoot;
7			use HMLB\DDD\Entity\Identity;
8			use HMLB\DDD\Validation\Assertion;
9			use HMLB\UserBundle\Event\EmailChanged;
10			use HMLB\UserBundle\Event\EmailConfirmed;
11			use HMLB\UserBundle\Event\EmailValidationRequested;
12			use HMLB\UserBundle\Event\PasswordChanged;
13			use HMLB\UserBundle\Event\PasswordReset;
14			use HMLB\UserBundle\Event\PasswordResetRequested;
15			use HMLB\UserBundle\Event\UserRegistered;
16			use HMLB\UserBundle\Exception\EmailAlreadyConfirmedException;
17			use HMLB\UserBundle\Exception\InvalidEmailConfirmationTokenException;
18			use HMLB\UserBundle\Exception\InvalidPasswordResettingTokenException;
19			use HMLB\UserBundle\Exception\PasswordResettingNotRequestedException;
20			use SimpleBus\Message\Recorder\ContainsRecordedMessages;
21			use SimpleBus\Message\Recorder\PrivateMessageRecorderCapabilities;
22			use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;
23			use Symfony\Component\Security\Core\User\AdvancedUserInterface;
24
25			class User implements AdvancedUserInterface, AggregateRoot, ContainsRecordedMessages
26			{
27			use PrivateMessageRecorderCapabilities;
28
29			/**
30			* @var Identity
31			*/
32			protected $id;
33
34			/**
35			* @var Role[]
36			*/
37			protected $roles = [];
38
39			/**
40			* @var string
41			*/
42			protected $username;
43
44			/**
45			* @var string
46			*/
47			protected $usernameCanonical;
48
49			/**
50			* @var string
51			*/
52			protected $email;
53
54			/**
55			* @var string
56			*/
57			protected $emailCanonical;
58
59			/**
60			* @var bool
61			*/
62			protected $enabled = false;
63
64			/**
65			* The salt to use for hashing.
66			*
67			* @var string
68			*/
69			protected $salt;
70
71			/**
72			* Encrypted password. Must be persisted.
73			*
74			* @var string
75			*/
76			protected $password;
77
78			/**
79			* @var DateTime
80			*/
81			protected $lastLogin;
82
83			/**
84			* Random string sent to the user email address in order to verify it.
85			*
86			* @var string
87			*/
88			protected $confirmationToken;
89
90			/**
91			* Random string sent to the user email address in order to reset the password.
92			*
93			* @var string
94			*/
95			protected $resettingToken;
96
97			/**
98			* @var DateTime
99			*/
100			protected $passwordRequestedAt;
101
102			/**
103			* @var DateTime
104			*/
105			protected $created;
106
107			/**
108			* @var DateTime
109			*/
110			protected $updated;
111
112			/**
113			* @var bool
114			*/
115			protected $locked = false;
116
117			/**
118			* @var bool
119			*/
120			protected $expired = false;
121
122			/**
123			* @var DateTime
124			*/
125			protected $expiresAt;
126
127			/**
128			* @var bool
129			*/
130			protected $credentialsExpired = false;
131
132			/**
133			* @var DateTime
134			*/
135			protected $credentialsExpireAt;
136
137			/**
138			* @param string $username
139			* @param string $email
140			* @param string $plainPassword
141			* @param UserPasswordEncoderInterface $encoder
142			* @param array $roles
143			* @param bool $enable
144			*/
145			protected function __construct(
146			string $username,
147			string $email,
148			string $plainPassword,
149			UserPasswordEncoderInterface $encoder,
150			array $roles = [],
151			bool $enable = true
152			) {
153			Assertion::email($email);
154			$this->id = new Identity();
155			$this->roles = $roles;
156			$this->salt = $this->generateToken();
157			$this->confirmationToken = $this->generateToken();
158			$this->created = new DateTime();
159			$this->username = $username;
160			$this->email = $email;
161			if ($enable) {
162			$this->enable();
163			}
164			$this->updateCanonicalFields();
165			$this->updatePassword($plainPassword, $encoder);
166			}
167
168			public static function register(
169			$username,
170			$email,
171			$plainPassword,
172			UserPasswordEncoderInterface $encoder,
173			array $roles = ['ROLE_USER']
174			): User
175			{
176			$user = new static($username, $email, $plainPassword, $encoder, $roles);
177			$user->recordUserRegistered();
178			$user->enabled = true;
179
180			return $user;
181			}
182
183			/**
184			* Getter de id.
185			*
186			* @return Identity
187			*/
188			public function getId(): Identity
189			{
190			return is_string($this->id) ? new Identity($this->id) : $this->id;
191			}
192
193			/**
194			* {@inheritdoc}
195			*/
196			public function getRoles(): array
197			{
198			return $this->roles;
199			}
200
201			/**
202			* {@inheritdoc}
203			*/
204			public function getPassword(): string
205			{
206			return $this->password;
207			}
208
209			/**
210			* Returns the salt that was originally used to encode the password.
211			*
212			* This can return null if the password was not encoded using a salt.
213			*
214			* @return string\|null The salt
215			*/
216			public function getSalt(): string
217			{
218			return $this->salt;
219			}
220
221			/**
222			* {@inheritdoc}
223			*/
224			public function getUsername(): string
225			{
226			return $this->username;
227			}
228
229			/**
230			* {@inheritdoc}
231			*/
232			public function eraseCredentials()
233			{
234			//No-op
235			}
236
237			/**
238			* {@inheritdoc}
239			*/
240			public function isAccountNonExpired(): bool
241			{
242			if (true === $this->expired) {
243			return false;
244			}
245
246			if (null !== $this->expiresAt && $this->expiresAt->getTimestamp() < time()) {
247			return false;
248			}
249
250			return true;
251			}
252
253			/**
254			* {@inheritdoc}
255			*/
256			public function isAccountNonLocked(): bool
257			{
258			return !$this->locked;
259			}
260
261			/**
262			* {@inheritdoc}
263			*/
264			public function isCredentialsNonExpired(): bool
265			{
266			if (true === $this->credentialsExpired) {
267			return false;
268			}
269
270			if (null !== $this->credentialsExpireAt && $this->credentialsExpireAt->getTimestamp() < time()) {
271			return false;
272			}
273
274			return true;
275			}
276
277			/**
278			* Change the email address of the user.
279			*
280			* @param string $email
281			*/
282			public function changeEmail(string $email)
283			{
284			Assertion::email($email);
285			$oldEmail = $this->email;
286			$this->email = $email;
287			$this->emailCanonical = self::canonicalize($this->email);
288			$this->updated = new DateTime();
289			$this->record(new EmailChanged($this->getId(), $oldEmail, $this->email));
290			}
291
292			/**
293			* @param string $password
294			* @param UserPasswordEncoderInterface $encoder
295			*/
296			public function changePassword(string $password, UserPasswordEncoderInterface $encoder)
297			{
298			$oldPassword = $this->password;
299			$this->updatePassword($password, $encoder);
300			$this->updated = new DateTime();
301			$this->record(new PasswordChanged($this->id, $oldPassword, $password));
302			}
303
304			/**
305			* {@inheritdoc}
306			*/
307			public function isEnabled(): bool
308			{
309			return $this->enabled;
310			}
311
312			/**
313			* Enable
314			*/
315			public function enable()
316			{
317			$this->enabled = true;
318			}
319
320			/**
321			* Disable
322			*/
323			public function disable()
324			{
325			$this->enabled = false;
326			}
327
328			/**
329			*
330			* @return bool
331			*
332			*/
333			public function isEmailConfirmed(): bool
334			{
335			return null === $this->confirmationToken;
336			}
337
338			public function requestEmailConfirmation()
339			{
340			$this->confirmationToken = $this->generateToken();
341			$this->updated = new DateTime();
342			$this->record(new EmailValidationRequested($this->id, $this->confirmationToken));
343			}
344
345			public function confirmEmail(string $confirmationToken)
346			{
347			if ($this->isEmailConfirmed()) {
348			throw new EmailAlreadyConfirmedException();
349			}
350
351			if ($confirmationToken !== $this->confirmationToken) {
352			throw new InvalidEmailConfirmationTokenException();
353			}
354
355			$this->confirmationToken = null;
356			$this->updated = new DateTime();
357			$this->record(new EmailConfirmed($this->id, $this->email));
358			}
359
360			public function isPasswordResetRequested(): bool
361			{
362			return null !== $this->resettingToken;
363			}
364
365			public function requestPasswordReset()
366			{
367			$this->resettingToken = $this->generateToken();
368			$this->passwordRequestedAt = new DateTime();
369			$this->updated = new DateTime();
370			$this->record(new PasswordResetRequested($this->id, $this->resettingToken));
371			}
372
373			public function resetPassword(string $resettingToken, string $password, UserPasswordEncoderInterface $encoder)
374			{
375			if (!$this->isPasswordResetRequested()) {
376			throw new PasswordResettingNotRequestedException();
377			}
378
379			if ($resettingToken !== $this->resettingToken) {
380			throw new InvalidPasswordResettingTokenException();
381			}
382
383			$this->resettingToken = null;
384
385			$oldPassword = $this->password;
386			$this->updatePassword($password, $encoder);
387			$this->updated = new DateTime();
388			$this->record(new PasswordReset($this->id, $oldPassword, $password));
389
390			//We validate email if password has been confirmed because the token has been sent to the email adress.
391			if (!$this->isEmailConfirmed()) {
392			$this->confirmEmail($this->confirmationToken);
393			}
394			}
395
396			/**
397			* {@inheritdoc}
398			*/
399			private function updateCanonicalFields()
400			{
401			$this->usernameCanonical = self::canonicalize($this->username);
402			$this->emailCanonical = self::canonicalize($this->email);
403			}
404
405			/**
406			* @param string $plainPassword
407			* @param UserPasswordEncoderInterface $encoder
408			*/
409			private function updatePassword(string $plainPassword, UserPasswordEncoderInterface $encoder)
410			{
411			$this->password = $encoder->encodePassword($this, $plainPassword);
412			}
413
414			/**
415			* Generate token string for salt, email validation or password resetting.
416			* @return string
417			*
418			*/
419			private function generateToken(): string
420			{
421			return base_convert(sha1(uniqid(mt_rand(), true)), 16, 36);
422			}
423
424			protected function recordUserRegistered()
425			{
426			$this->record(new UserRegistered($this->getId(), $this->getEmail(), $this->getUsername()));
427			}
428
429			/**
430			* @param $string
431			*
432			* @return string
433			*/
434			public static function canonicalize(string $string): string
435			{
436			$trimmed = trim($string);
437
438			return mb_convert_case($trimmed, MB_CASE_LOWER, mb_detect_encoding($string));
439			}
440
441			/**
442			* @return string
443			*/
444			public function getEmail(): string
445			{
446			return $this->email;
447			}
448
449			/**
450			* Getter de lastLogin
451			*
452			* @return DateTime
453			*/
454			public function getLastLogin()
455			{
456			return $this->lastLogin;
457			}
458
459			/**
460			* Getter de confirmationToken
461			*
462			* @return string
463			*/
464			public function getConfirmationToken()
465			{
466			return $this->confirmationToken;
467			}
468
469			/**
470			* Getter de resettingToken
471			*
472			* @return string
473			*/
474			public function getResettingToken()
475			{
476			return $this->resettingToken;
477			}
478
479			/**
480			* Getter de created
481			*
482			* @return DateTime
483			*/
484			public function getCreated()
485			{
486			return $this->created;
487			}
488
489			/**
490			* Getter de updated
491			*
492			* @return DateTime
493			*/
494			public function getUpdated()
495			{
496			return $this->updated;
497			}
498			}
499

hmlb / user-bundle

Push — master ( f021c8...431426 )

User::resetPassword() B

Complexity

Size

Duplication

Duplication Side-by-Side

Filter issues like