ProjetNormandie\UserBundle\Controller\ResetPassword\ConfirmPassword

Complexity

Total Complexity

3

Size/Duplication

Total Lines	36
Duplicated Lines	0 %

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__invoke()	0	23	2
A	__construct()	0	4	1

<?php

namespace ProjetNormandie\UserBundle\Controller\ResetPassword;

use Doctrine\ORM\EntityManagerInterface;
use Exception;
use ProjetNormandie\UserBundle\Entity\User;
use ProjetNormandie\UserBundle\Security\Event\SecurityEventTypeEnum;
use ProjetNormandie\UserBundle\Security\SecurityHistoryManager;
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\HttpFoundation\Exception\BadRequestException;
use Symfony\Component\HttpFoundation\JsonResponse;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpKernel\Attribute\AsController;

#[AsController]
class ConfirmPassword extends AbstractController
{
    public function __construct(
        private readonly EntityManagerInterface $em,
        private readonly SecurityHistoryManager $securityHistoryManager
    ) {
    }


    /**
     * @throws Exception
     */
    public function __invoke(Request $request): JsonResponse
    {
        $data = json_decode($request->getContent(), true);
        $token = $data['token'];
        $plainPassword = $data['plainPassword'];

        $user = $this->em->getRepository(User::class)->findOneBy(['confirmationToken' => $token]);

        if (null === $user) {
            throw new BadRequestException();
        }

        $user->setPlainPassword($plainPassword);
        $user->setConfirmationToken(null);

        $this->em->flush();

        // Log security event
        $this->securityHistoryManager->recordEvent($user, SecurityEventTypeEnum::PASSWORD_RESET_COMPLETE, [
            'email' => $user->getEmail()
        ]);

        return new JsonResponse(['success' => true]);
    }
}