nixsolutions / yii2-starter

modules/user/controllers/AuthController.php

<?php

namespace app\modules\user\controllers;

use app\modules\mailTemplate\models\Mail;
use app\modules\mailTemplate\models\MailTemplate;
use app\modules\user\models\forms\ChangePasswordForm;
use app\modules\user\models\forms\LoginForm;
use app\modules\user\models\forms\RecoveryForm;
use app\modules\user\models\Hash;
use app\modules\user\models\User;
use BadMethodCallException;
use Yii;
use yii\authclient\BaseClient;
use yii\base\Exception;
use yii\filters\AccessControl;
use yii\helpers\ArrayHelper;
use yii\helpers\Url;
use yii\web\BadRequestHttpException;
use yii\web\Controller;
use app\modules\user\models\forms\RegistrationForm;
use yii\web\ServerErrorHttpException;

/**
 * AuthController for the `user` module
 */
class AuthController extends Controller
{
    /**
     * @inheritdoc
     */
    public function behaviors()

This method seems to be duplicated in your project.

    {
        return [
            'access' => [
                'class' => AccessControl::className(),
                'only' => ['registration', 'recovery'],
                'rules' => [
                    [
                        'actions' => ['registration', 'recovery'],
                        'allow' => true,
                        'roles' => ['?'],
                    ],
                ],
            ],
        ];
    }

    /**
     * @inheritdoc
     */
    public function actions()
    {
        return [
            'error' => [
                'class' => 'yii\web\ErrorAction',
            ],
            'auth' => [
                'class' => 'yii\authclient\AuthAction',
                'successCallback' => [$this, 'onAuthSuccess'],
            ],
            'upload-avatar' => [
                'class' => 'app\widgets\crop\actions\CropAction',
                'url' => '/uploads/avatars',
                'path' => '@app/web/uploads/avatars',
            ],
        ];
    }

    /**
     * This function will be triggered when user is successfully authenticated using some oAuth client.
     *
     * @param $client
     * @return bool
     * @throws \BadMethodCallException
     */
    public function onAuthSuccess(BaseClient $client)
    {
        $userAttributes = $client->getUserAttributes();
        $user = User::findByEmail(ArrayHelper::getValue($userAttributes, 'email')) ?: new User();
        $isNewUser = $user->isNewRecord;

        if (User::STATUS_BLOCKED === $user->status) {
            Yii::$app->session->setFlash('danger', Yii::t('user', 'Your account is blocked.'));
            return false;
        }

        $userAttributes['authProvider'] = $client->getName();
        if (!$user->saveSocialAccountInfo($userAttributes)) {
            throw new BadMethodCallException('Social data could not be saved.');
        }
        if ($isNewUser) {
            $user->setRole(User::ROLE_USER);
        }
        return $user->login();
    }

    /**
     * @return string|\yii\web\Response
     * @throws Exception
     * @throws ServerErrorHttpException
     */
    public function actionRegistration()
    {
        $registrationForm = new RegistrationForm();

        if ($registrationForm->load(Yii::$app->request->post()) && $registrationForm->validate()) {
            $user = new User();

            if (!$user = $user->create($registrationForm)) {
                throw new Exception('User could not be created.');
            }

            if (!$mailTemplate = MailTemplate::findByKey(MailTemplate::REGISTER_CONFIRM)) {
                throw new ServerErrorHttpException('The server encountered an internal error and could not complete your request.');
            }

            $hash = new Hash();
            $mailTemplate->replacePlaceholders([
                'name' => $user->first_name,
                'link' => Yii::$app->urlManager->createAbsoluteUrl([
                    'user/auth/confirm-registration',
                    'hash' => $hash->generate(Hash::TYPE_REGISTER, $user->id),
                ]),
            ]);

            $mail = new Mail();
            $mail->setTemplate($mailTemplate);
            $mail->sendTo($user->email);

            Yii::$app->session->setFlash(
                'success',
                Yii::t('user', 'Please, check your email to confirm registration.')
            );
            return $this->redirect(Url::home());
        }

        return $this->render('registration', [
            'model' => $registrationForm,
        ]);
    }

    /**
     * @return \yii\web\Response
     * @throws BadRequestHttpException
     * @throws ServerErrorHttpException
     */
    public function actionConfirmRegistration()
    {
        if (!$hash = Yii::$app->request->get('hash')) {
            throw new BadRequestHttpException();
        }

        if (!$user = User::findByHash($hash)) {
            throw new ServerErrorHttpException('The server encountered an internal error and could not complete your request.');
        }
        $user->status = User::STATUS_ACTIVE;
        $user->update();
        Hash::findByUserId($user->id)->delete();
        $user->login();

        return $this->goHome();
    }

    /**
     * @return string|\yii\web\Response
     * @throws Exception
     */
    public function actionLogin()
    {
        if (!Yii::$app->user->isGuest) {
            return $this->goHome();
        }

        $loginForm = new LoginForm();
        if ($loginForm->load(Yii::$app->request->post()) && $loginForm->validate()) {

            $user = User::findByEmail($loginForm->email);

            if (!$user || $user->hasEmptyPassword() || !$user->validatePassword($loginForm->password)) {
                Yii::$app->session->setFlash('danger', Yii::t('user', 'Incorrect email or password.'));
            } elseif (User::STATUS_ACTIVE !== $user->status) {
                Yii::$app->session->setFlash('danger', Yii::t('user', 'Your account is not active.'));
            } else {
                $user->rememberMe = $loginForm->rememberMe;
                $user->login();
                return $this->goBack();
            }
        }

        return $this->render('login', [
            'model' => $loginForm,
        ]);
    }

    /**
     * Sends link for password recovery on user email
     *
     * @return string|\yii\web\Response
     * @throws ServerErrorHttpException
     */
    public function actionRecovery()
    {
        $recoveryForm = new RecoveryForm();

        if ($recoveryForm->load(Yii::$app->request->post()) && $recoveryForm->validate()) {

            if (!$user = User::findByEmail($recoveryForm->email)) {
                Yii::$app->session->setFlash('danger', Yii::t('user', 'User does not exist.'));
            } elseif (User::STATUS_ACTIVE !== $user->status) {
                Yii::$app->session->setFlash('danger', Yii::t('user', 'User is not active.'));
            } else {

                if (!$mailTemplate = MailTemplate::findByKey(MailTemplate::RECOVERY_PASSWORD)) {
                    throw new ServerErrorHttpException('The server encountered an internal error and could not complete your request.');
                }

                $hash = new Hash();
                $mailTemplate->replacePlaceholders([
                    'name' => $user->first_name,
                    'link' => Yii::$app->urlManager->createAbsoluteUrl([
                        'user/auth/forgot-password',
                        'hash' => $hash->generate(Hash::TYPE_RECOVER, $user->id),
                    ]),
                ]);

                $mail = new Mail();
                $mail->setTemplate($mailTemplate);
                $mail->sendTo($user->email);

                Yii::$app->session->setFlash(
                    'success',
                    Yii::t('user', 'Please check your email and follow instructions to recover password.')
                );
                return $this->redirect(Url::home());
            }
        }
        return $this->render('recovery', [
            'model' => $recoveryForm,
        ]);
    }

    /**
     * @return string|\yii\web\Response
     * @throws BadRequestHttpException
     * @throws ServerErrorHttpException
     */
    public function actionForgotPassword()

This method seems to be duplicated in your project.

    {
        if (!$hash = Yii::$app->request->get('hash')) {
            throw new BadRequestHttpException();
        }
        if (!$user = User::findByHash($hash)) {
            throw new ServerErrorHttpException('The server encountered an internal error and could not complete your request.');
        }
        $changePasswordForm = new ChangePasswordForm();
        if ($user->changePassword($changePasswordForm)) {
            $user->login();
            return $this->goHome();
        }
        return $this->render('forgot-password', [
            'model' => $changePasswordForm,
        ]);
    }
}