flexisip-account-manager/flexiapi/app/Http/Controllers/Api/Admin/AccountController.php

<?php
/*
    Flexisip Account Manager is a set of tools to manage SIP accounts.
    Copyright (C) 2020 Belledonne Communications SARL, All rights reserved.

    This program is free software: you can redistribute it and/or modify
    it under the terms of the GNU Affero General Public License as
    published by the Free Software Foundation, either version 3 of the
    License, or (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU Affero General Public License for more details.

    You should have received a copy of the GNU Affero General Public License
    along with this program.  If not, see <http://www.gnu.org/licenses/>.
*/

namespace App\Http\Controllers\Api\Admin;

use App\Http\Controllers\Controller;
use Illuminate\Http\Request;
use Illuminate\Support\Str;
use Illuminate\Support\Facades\Log;
use Illuminate\Support\Facades\Mail;

use App\AccountTombstone;
use App\AccountType;
use App\ContactsList;
use App\ResetPasswordEmailToken;
use App\Http\Requests\Account\Create\Api\AsAdminRequest;
use App\Http\Requests\Account\Update\Api\AsAdminRequest as ApiAsAdminRequest;
use App\Mail\Provisioning;
use App\Mail\ResetPassword;
use App\Services\AccountService;

class AccountController extends Controller
{
    public function index(Request $request)
    {
        return $request->space->accounts()
            ->without(['passwords', 'admin'])
            ->with(['phoneChangeCode', 'emailChangeCode'])
            ->paginate(20);
    }

    public function show(Request $request, $accountId)
    {
        $account = $request->space->accounts()
            ->without(['passwords', 'admin'])
            ->with(['phoneChangeCode', 'emailChangeCode'])
            ->findOrFail($accountId);

        if ($request->user()->admin) {
            if ($account->phoneChangeCode) {
                $account->phoneChangeCode->makeVisible(['code']);
            }

            if ($account->emailChangeCode) {
                $account->emailChangeCode->makeVisible(['code']);
            }
        }

        return $account;
    }

    public function search(Request $request, string $sip)
    {
        $account = $request->space->accounts()->sip($sip)->first();

        if (!$account)
            abort(404, 'SIP address not found');

        return $account;
    }

    public function searchByEmail(Request $request, string $email)
    {
        $account = $request->space->accounts()->where('email', $email)->first();

        if (!$account)
            abort(404, 'Email address not found');

        return $account;
    }

    public function destroy(Request $request, int $accountId)
    {
        $account = $request->space->accounts()->findOrFail($accountId);

        if (!$account->hasTombstone()) {
            $tombstone = new AccountTombstone();
            $tombstone->username = $account->username;
            $tombstone->domain = $account->domain;
            $tombstone->save();
        }

        (new AccountService())->destroy($request, $accountId);

        Log::channel('events')->info('API Admin: Account destroyed', ['id' => $account->identifier]);
    }

    public function activate(Request $request, int $accountId)
    {
        $account = $request->space->accounts()->findOrFail($accountId);
        $account->activated = true;
        $account->save();

        Log::channel('events')->info('API Admin: Account activated', ['id' => $account->identifier]);

        return $account;
    }

    public function deactivate(Request $request, int $accountId)
    {
        $account = $request->space->accounts()->findOrFail($accountId);
        $account->activated = false;
        $account->save();

        Log::channel('events')->info('API Admin: Account deactivated', ['id' => $account->identifier]);

        return $account;
    }

    public function block(Request $request, int $accountId)
    {
        $account = $request->space->accounts()->findOrFail($accountId);
        $account->blocked = true;
        $account->save();

        Log::channel('events')->info('API Admin: Account blocked', ['id' => $account->identifier]);

        return $account;
    }

    public function unblock(Request $request, int $accountId)
    {
        $account = $request->space->accounts()->findOrFail($accountId);
        $account->blocked = false;
        $account->save();

        Log::channel('events')->info('API Admin: Account unblocked', ['id' => $account->identifier]);

        return $account;
    }

    public function provision(Request $request, int $accountId)
    {
        $account = $request->space->accounts()->findOrFail($accountId);
        $account->provision();
        $account->save();

        Log::channel('events')->info('API Admin: Account provisioned', ['id' => $account->identifier]);

        return $account->makeVisible(['provisioning_token']);
    }

    public function store(AsAdminRequest $request)
    {
        return (new AccountService())->store($request)->makeVisible(['confirmation_key', 'provisioning_token']);
    }

    public function update(ApiAsAdminRequest $request, int $accountId)
    {
        $account = (new AccountService())->update($request, $accountId);

        Log::channel('events')->info('API Admin: Account updated', ['id' => $account->identifier]);

        return $account->makeVisible(['provisioning_token']);
    }

    public function typeAdd(Request $request, int $accountId, int $typeId)
    {
        if ($request->space->accounts()->findOrFail($accountId)->types()->pluck('id')->contains($typeId)) {
            abort(403);
        }

        if (AccountType::findOrFail($typeId)) {
            return $request->space->accounts()->findOrFail($accountId)->types()->attach($typeId);
        }
    }

    public function typeRemove(Request $request, int $accountId, int $typeId)
    {
        if (!$request->space->accounts()->findOrFail($accountId)->types()->pluck('id')->contains($typeId)) {
            abort(403);
        }

        return $request->space->accounts()->findOrFail($accountId)->types()->detach($typeId);
    }

    public function contactsListAdd(Request $request, int $accountId, int $contactsListId)
    {
        if ($request->space->accounts()->findOrFail($accountId)->contactsLists()->pluck('id')->contains($contactsListId)) {
            abort(403);
        }

        if (ContactsList::findOrFail($contactsListId)) {
            return $request->space->accounts()->findOrFail($accountId)->contactsLists()->attach($contactsListId);
        }
    }

    public function contactsListRemove(Request $request, int $accountId, int $contactsListId)
    {
        if (!$request->space->accounts()->findOrFail($accountId)->contactsLists()->pluck('id')->contains($contactsListId)) {
            abort(403);
        }

        return $request->space->accounts()->findOrFail($accountId)->contactsLists()->detach($contactsListId);
    }

    /**
     * Emails
     */

    public function sendProvisioningEmail(Request $request, int $accountId)
    {
        $account = $request->space->accounts()->findOrFail($accountId);

        if (!$account->email)
            abort(403, 'No email configured');

        $account->provision();

        Mail::to($account)->send(new Provisioning($account));

        Log::channel('events')->info('API: Sending provisioning email', ['id' => $account->identifier]);
    }

    public function sendResetPasswordEmail(Request $request, int $accountId)
    {
        $account = $request->space->accounts()->findOrFail($accountId);

        if (!$account->email)
            abort(403, 'No email configured');

        $resetPasswordEmail = new ResetPasswordEmailToken;
        $resetPasswordEmail->account_id = $account->id;
        $resetPasswordEmail->token = Str::random(16);
        $resetPasswordEmail->email = $account->email;
        $resetPasswordEmail->save();

        Mail::to($account)->send(new ResetPassword($account));
    }
}