App\Command\UserDisable2faCommand

Complexity

Total Complexity

5

Size/Duplication

Total Lines	56
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	5	1
A	configure()	0	5	1
A	execute()	0	34	3

<?php
/*
 * Copyright (C) 2020  Jan Böhmer
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as published
 * by the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 */

namespace App\Command;

use App\Entity\User;
use App\Services\TFA\BackupCodeManager;
use Doctrine\ORM\EntityManagerInterface;
use Symfony\Component\Console\Command\Command;
use Symfony\Component\Console\Input\InputArgument;
use Symfony\Component\Console\Input\InputInterface;
use Symfony\Component\Console\Output\OutputInterface;
use Symfony\Component\Console\Style\SymfonyStyle;

class UserDisable2faCommand extends Command
{
    protected static $defaultName = 'app:user-disable-2fa';

    protected $entityManager;
    protected $backupCodeManager;

    public function __construct(EntityManagerInterface $entityManager, BackupCodeManager $backupCodeManager)
    {
        parent::__construct(self::$defaultName);
        $this->entityManager = $entityManager;
        $this->backupCodeManager = $backupCodeManager;
    }

    protected function configure()
    {
        $this
            ->setDescription('Disable all Two-Factor Authentication methods for the given user.')
            ->addArgument('username', InputArgument::REQUIRED, 'The username of the new user.')
        ;
    }

    protected function execute(InputInterface $input, OutputInterface $output): int
    {
        $io = new SymfonyStyle($input, $output);
        $username = $input->getArgument('username');

        $repo = $this->entityManager->getRepository(User::class);
        $user = $repo->findOneBy([
            'username' => $username,
        ]);

        if (!$user) {
            $io->error('User not found!');

            return self::FAILURE;
        }

        $io->warning('You are about to remove all Two-Factor-Authentication methods of following user: '.$user->getUsername());
        $io->warning('Only continue if you are sure about the identity of the person that asked you to do this!');

        $continue = false;
        while (!$continue) {
            $continue = $io->confirm('Continue?', false);
        }

        //Disable google authenticator
        $user->setGoogleAuthenticatorSecret(null);
        //Disable backup codes
        $this->backupCodeManager->disableBackupCodesIfUnused($user);

        $this->entityManager->flush();

        $io->success('Two-Factor-Authentication disabled. The user should now be able to login again.');

        return 0;
    }
}