Add multi user support and subscriptions (#359)

This pull request adds support to multi users in one account. It also introduces the notion of subscriptions.

Accounts can now have multiple users.

Subscriptions are defined by a new env variable called REQUIRES_SUBSCRIPTION, and defaults to false. As promised, all the paid features on .com will be free if you download and host Monica on your own server.

app/Http/Controllers/SettingsController.php

@@ -2,10 +2,18 @@
 
 namespace App\Http\Controllers;
 
+use Auth;
+use App\User;
+use Carbon\Carbon;
+use App\Invitation;
 use Illuminate\Http\Request;
+use App\Helpers\RandomHelper;
+use App\Jobs\SendNewUserAlert;
 use App\Jobs\ExportAccountAsSQL;
+use App\Jobs\SendInvitationEmail;
 use App\Http\Requests\SettingsRequest;
 use Illuminate\Support\Facades\Storage;
+use App\Http\Requests\InvitationRequest;
 
 class SettingsController extends Controller
 {
@@ -62,6 +70,7 @@ class SettingsController extends Controller
             $account->activities->each->forceDelete();
             $account->events->each->forceDelete();
             $account->contacts->each->forceDelete();
+            $account->invitations->each->forceDelete();
             $account->forceDelete();
         }
 
@@ -94,4 +103,176 @@ class SettingsController extends Controller
             ->download(Storage::disk('public')->getDriver()->getAdapter()->getPathPrefix() . $path, 'monica.sql')
             ->deleteFileAfterSend(true);
     }
+
+    /**
+     * Display the users view
+     *
+     * @return \Illuminate\Http\Response
+     */
+    public function users()
+    {
+        $users = auth()->user()->account->users;
+
+        if ($users->count() == 1 && auth()->user()->account->invitations()->count() == 0) {
+            return view('settings.users.blank');
+        }
+
+        return view('settings.users.index', compact('users'));
+    }
+
+    /**
+     * Show the form for creating a new resource.
+     *
+     * @return \Illuminate\Http\Response
+     */
+    public function addUser()
+    {
+        if (config('monica.requires_subscription') && ! auth()->user()->account->isSubscribed()) {
+            return redirect('/settings/subscriptions');
+        }
+
+        return view('settings.users.add');
+    }
+
+    /**
+     * Store a newly created resource in storage.
+     *
+     * @param InvitationRequest $request
+     * @return \Illuminate\Http\Response
+     */
+    public function inviteUser(InvitationRequest $request)
+    {
+        // Make sure the confirmation to invite has not been bypassed
+        if(! $request->get('confirmation')) {
+            return redirect()->back()->withErrors(trans('settings.users_error_please_confirm'))->withInput();
+        }
+
+        // Is the email address already taken?
+        $users = User::where('email', $request->only(['email']))->count();
+        if ($users > 0) {
+            return redirect()->back()->withErrors(trans('settings.users_error_email_already_taken'))->withInput();
+        }
+
+        // Has this user been invited already?
+        $invitations = Invitation::where('email', $request->only(['email']))->count();
+        if ($invitations > 0) {
+            return redirect()->back()->withErrors(trans('settings.users_error_already_invited'))->withInput();
+        }
+
+        $invitation = auth()->user()->account->invitations()->create(
+            $request->only([
+                'email',
+            ])
+            + [
+                'invited_by_user_id' => auth()->user()->id,
+                'account_id' => auth()->user()->account_id,
+                'invitation_key' => RandomHelper::generateString(100),
+            ]
+        );
+
+        dispatch(new SendInvitationEmail($invitation));
+
+        auth()->user()->account->update([
+            'number_of_invitations_sent' => auth()->user()->account->number_of_invitations_sent + 1,
+        ]);
+
+        return redirect('settings/users')
+            ->with('status', trans('settings.settings_success'));
+    }
+
+    /**
+     * Remove the specified resource from storage.
+     *
+     * @param Invitation $invitation
+     * @return \Illuminate\Http\Response
+     */
+    public function destroyInvitation(Invitation $invitation)
+    {
+        $invitation->delete();
+
+        return redirect('/settings/users')
+            ->with('success', trans('settings.users_invitation_deleted_confirmation_message'));
+    }
+
+    /**
+     * Display the specified resource.
+     *
+     * @param String $key
+     * @return \Illuminate\Http\Response
+     */
+    public function acceptInvitation($key)
+    {
+        if (Auth::check()) {
+            return redirect('/');
+        }
+
+        $invitation = Invitation::where('invitation_key', $key)
+                                ->firstOrFail();
+
+        return view('settings.users.accept', compact('key'));
+    }
+
+    /**
+     * Store the specified resource.
+     *
+     * @param Request $request
+     * @param String $key
+     * @return \Illuminate\Http\Response
+     */
+    public function storeAcceptedInvitation(Request $request, $key)
+    {
+        $invitation = Invitation::where('invitation_key', $key)
+                                    ->firstOrFail();
+
+        // as a security measure, make sure that the new user provides the email
+        // of the person who has invited him/her.
+        if ($request->input('email_security') != $invitation->invitedBy->email) {
+            return redirect()->back()->withErrors(trans('settings.users_error_email_not_similar'))->withInput();
+        }
+
+        $user = new User;
+        $user->first_name = $request->input('first_name');
+        $user->last_name = $request->input('last_name');
+        $user->email = $request->input('email');
+        $user->password = bcrypt($request->input('password'));
+        $user->timezone = config('app.timezone');
+        $user->created_at = Carbon::now();
+        $user->account_id = $invitation->account_id;
+        $user->save();
+
+        $invitation->delete();
+
+        // send me an alert
+        dispatch(new SendNewUserAlert($user));
+
+        if (Auth::attempt(['email' => $user->email, 'password' => $request->input('password')])) {
+            return redirect('dashboard');
+        }
+    }
+
+    /**
+     * Delete additional user account
+     *
+     * @param Request $request
+     * @return \Illuminate\Http\Response
+     */
+    public function deleteAdditionalUser(Request $request, $userID)
+    {
+        $user = User::find($userID);
+
+        if ($user->account_id != auth()->user()->account_id) {
+            return redirect('/');
+        }
+
+        // make sure you don't delete yourself from this screen
+        if ($user->id == auth()->user()->id) {
+            return redirect('/');
+        }
+
+        $user = User::find($userID);
+        $user->delete();
+
+        return redirect('/settings/users')
+                ->with('success', trans('settings.users_list_delete_success'));
+    }
 }