mirror of
https://gitlab.linphone.org/BC/public/flexisip-account-manager.git
synced 2026-01-17 10:08:05 +00:00
7a17897193
- Consume an ExternalAccount on Account creation - Add a tombstone to an ExternalAccount to ensure non re-usage - Add related tests - Generalize Utils - Stop public registration when there is no ExternalAccounts left - Add GenerateExternalAccounts, ExportToExternalAccounts and ImportExternalAccounts console scripts - Provision the ExternalAccount using the depends_on/idkey pair
69 lines
2.4 KiB
PHP
69 lines
2.4 KiB
PHP
<?php
|
|
/*
|
|
Flexisip Account Manager is a set of tools to manage SIP accounts.
|
|
Copyright (C) 2020 Belledonne Communications SARL, All rights reserved.
|
|
|
|
This program is free software: you can redistribute it and/or modify
|
|
it under the terms of the GNU Affero General Public License as
|
|
published by the Free Software Foundation, either version 3 of the
|
|
License, or (at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU Affero General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Affero General Public License
|
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
namespace App\Http\Controllers\Api;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Mail;
|
|
use Illuminate\Support\Facades\Log;
|
|
|
|
use App\Mail\ConfirmedRegistration;
|
|
|
|
class PasswordController extends Controller
|
|
{
|
|
public function update(Request $request)
|
|
{
|
|
$request->validate([
|
|
'algorithm' => 'required|in:SHA-256,MD5',
|
|
'password' => 'required',
|
|
]);
|
|
|
|
$account = $request->user();
|
|
$account->activated = true;
|
|
$account->save();
|
|
|
|
$algorithm = $request->get('algorithm');
|
|
|
|
if ($account->passwords()->count() > 0) {
|
|
$request->validate(['old_password' => 'required']);
|
|
|
|
foreach ($account->passwords as $password) {
|
|
if (hash_equals(
|
|
$password->password,
|
|
bchash($account->username, $account->resolvedRealm, $request->get('old_password'), $password->algorithm)
|
|
)) {
|
|
$account->updatePassword($request->get('password'), $algorithm);
|
|
|
|
Log::channel('events')->info('API: Account password updated', ['id' => $account->identifier]);
|
|
|
|
return response()->json();
|
|
}
|
|
}
|
|
|
|
return response()->json(['errors' => ['old_password' => 'Incorrect old password']], 422);
|
|
} else {
|
|
$account->updatePassword($request->get('password'), $algorithm);
|
|
|
|
if (!empty($account->email)) {
|
|
Mail::to($account)->send(new ConfirmedRegistration($account));
|
|
}
|
|
}
|
|
}
|
|
}
|