App\Http\Controllers\AccountSecurityController

Complexity

Total Complexity

23

Size/Duplication

Total Lines	210
Duplicated Lines	2.86 %

Coupling/Cohesion

Components	0
Dependencies	4

Importance

Changes

0

11 Methods

Rating	Name	Duplication	Size	Complexity
A	featureStatus()	0	10	3
A	disable()	0	6	1
A	reset()	0	6	1
A	saveQuestions()	0	15	2
A	changePassword()	0	7	1
A	changeMail()	0	14	3
A	sendChangeMailConfirmation()	0	13	1
A	getQuestions()	0	15	2
A	verifyQuestions()	0	14	4
A	confirmActivation()	3	18	3
A	confirmChangePassword()	3	10	2

<?php

namespace App\Http\Controllers;

use App\Facades\Mail;
use App\Facades\User as UserFacade;
use App\Models\ChocolateyId;
use App\Models\Question;
use App\Models\TrustedDevice;
use App\Models\User;
use App\Models\UserSecurity;
use Illuminate\Http\JsonResponse;
use Illuminate\Http\Request;
use Illuminate\Http\Response;
use Illuminate\Support\Facades\Config;
use Laravel\Lumen\Routing\Controller as BaseController;

/**
 * Class AccountSecurityController.
 */
class AccountSecurityController extends BaseController
{
    /**
     * Check if Feature Status is Enabled.
     *
     * @return Response
     */
    public function featureStatus(): Response
    {
        if (UserFacade::getUser()->emailVerified == false) {
            return response('identity_verification_required', 200);
        }

        $featureEnabled = UserSecurity::find(UserFacade::getUser()->uniqueId);

        return response($featureEnabled !== null ? 'enabled' : 'disabled', 200);
    }

    /**
     * Save Security Questions.
     *
     * @param Request $request
     *
     * @return JsonResponse
     */
    public function saveQuestions(Request $request): JsonResponse
    {
        if (UserFacade::getUser()->getChocolateyId()->password != hash(Config::get('chocolatey.security.hash'), $request->json()->get('password'))) {
            return response()->json(['error' => 'invalid_password'], 400);

The method json does only exist in Laravel\Lumen\Http\ResponseFactory, but not in Illuminate\Http\Response.

        }

        UserSecurity::updateOrCreate([
            'user_id'        => UserFacade::getUser()->uniqueId,
            'firstQuestion'  => $request->json()->get('questionId1'),
            'secondQuestion' => $request->json()->get('questionId2'),
            'firstAnswer'    => $request->json()->get('answer1'),
            'secondAnswer'   => $request->json()->get('answer2'), ]);

        return response()->json(null, 204);
    }

    /**
     * Disable Safety Lock.
     *
     * @return JsonResponse
     */
    public function disable(): JsonResponse
    {
        UserSecurity::find(UserFacade::getUser()->uniqueId)->delete();

        return response()->json(null, 204);

The method json does only exist in Laravel\Lumen\Http\ResponseFactory, but not in Illuminate\Http\Response.

    }

    /**
     * Reset Trusted Devices.
     *
     * @return JsonResponse
     */
    public function reset(): JsonResponse
    {
        TrustedDevice::find(UserFacade::getUser()->uniqueId)->delete();

        return response()->json(null, 204);

The method json does only exist in Laravel\Lumen\Http\ResponseFactory, but not in Illuminate\Http\Response.

    }

    /**
     * Change User Password.
     *
     * @TODO: Implement Notification E-mail of Password change
     *
     * @param Request $request
     *
     * @return JsonResponse
     */
    public function changePassword(Request $request): JsonResponse
    {
        UserFacade::getUser()->getChocolateyId()->update(['password' => hash(Config::get('chocolatey.security.hash'),
            $request->json()->get('password'))]);

        return response()->json(null, 204);

The method json does only exist in Laravel\Lumen\Http\ResponseFactory, but not in Illuminate\Http\Response.

    }

    /**
     * Confirm E-Mail Activation.
     *
     * @param Request $request
     *
     * @return JsonResponse
     */
    public function confirmActivation(Request $request): JsonResponse
    {
        if (Mail::get($request->json()->get('token')) == null) {

This code seems to be duplicated across your project.

            return response()->json(['error' => 'activation.invalid_token'], 400);

The method json does only exist in Laravel\Lumen\Http\ResponseFactory, but not in Illuminate\Http\Response.

        }

        ChocolateyId::find(Mail::get()->mail)->update(['mail_verified' => '1']);

        if (strpos(Mail::get()->link, 'change-email') !== false) {
            $email = str_replace('change-email/', '', Mail::get()->link);

            User::where('mail', Mail::get()->mail)->update(['mail' => $email]);

            ChocolateyId::find(Mail::get()->mail)->update(['mail' => $email]);
        }

        return response()->json(['email' => Mail::get()->mail, 'emailVerified' => true, 'identityVerified' => true]);
    }

    /**
     * Change User E-mail.
     *
     * @param Request $request
     *
     * @return JsonResponse
     */
    public function changeMail(Request $request): JsonResponse
    {
        if (User::where('password', hash(Config::get('chocolatey.security.hash'), $request->json()->get('currentPassword')))->count() == 0) {
            return response()->json(['error' => 'changeEmail.invalid_password'], 400);

The method json does only exist in Laravel\Lumen\Http\ResponseFactory, but not in Illuminate\Http\Response.

        }

        if (ChocolateyId::where('mail', $request->json()->get('newEmail'))->count() > 0) {
            return response()->json(['error' => 'changeEmail.email_already_in_use'], 400);
        }

        $this->sendChangeMailConfirmation($request);

        return response()->json(['email' => $request->json()->get('newEmail')], 200);
    }

    /**
     * Send the E-Mail confirmation.
     *
     * @param Request $request
     */
    protected function sendChangeMailConfirmation(Request $request)
    {
        Mail::send(['email' => UserFacade::getUser()->email,
            'name'          => UserFacade::getUser()->name, 'subject' => 'Email change alert',
        ], 'habbo-web-mail.mail-change-alert');

        $generatedToken = Mail::store(UserFacade::getUser()->email,
            "change-email/{$request->json()->get('newEmail')}");

        Mail::send(['email' => $request->json()->get('newEmail'), 'name' => UserFacade::getUser()->name,
            'subject'       => 'Email change confirmation', 'url' => "/activate/{$generatedToken}",
        ], 'habbo-web-mail.confirm-mail-change');
    }

    /**
     * Get User Security Questions.
     *
     * @return JsonResponse
     */
    public function getQuestions(): JsonResponse
    {
        if (UserSecurity::find(UserFacade::getUser()->uniqueId) == null) {
            return response()->json('');

The method json does only exist in Laravel\Lumen\Http\ResponseFactory, but not in Illuminate\Http\Response.

        }

        $userSecurity = UserSecurity::find(UserFacade::getUser()->uniqueId);

        return response()->json([
            new Question($userSecurity->firstQuestion,
                "IDENTITY_SAFETYQUESTION_{$userSecurity->firstQuestion}"),
            new Question($userSecurity->secondQuestion,
                "IDENTITY_SAFETYQUESTION_{$userSecurity->secondQuestion}"),
        ]);
    }

    /**
     * Verify User Security Questions.
     *
     * @param Request $request
     *
     * @return JsonResponse
     */
    public function verifyQuestions(Request $request): JsonResponse
    {
        $questions = UserSecurity::find(UserFacade::getUser()->uniqueId);

        if ($questions->firstAnswer == $request->json()->get('answer1') && $questions->secondAnswer == $request->json()->get('answer2')) {
            if ($request->json()->get('trust') == true) {
                (new TrustedDevice())->store(UserFacade::getUser()->uniqueId, $request->ip());
            }

            return response()->json(null, 204);

The method json does only exist in Laravel\Lumen\Http\ResponseFactory, but not in Illuminate\Http\Response.

        }

        return response()->json(null, 409);
    }

    /**
     * Confirm User Change Password.
     *
     * @param Request $request
     *
     * @return mixed
     */
    public function confirmChangePassword(Request $request): JsonResponse
    {
        if (Mail::get($request->json()->get('token')) == null) {

This code seems to be duplicated across your project.

            return response()->json(null, 404);

The method json does only exist in Laravel\Lumen\Http\ResponseFactory, but not in Illuminate\Http\Response.

        }

        ChocolateyId::find(Mail::get()->mail)->update(['password' => hash(Config::get('chocolatey.security.hash'), $request->json()->get('password'))]);

        return response()->json(null);
    }
}