feat: add recovery codes (#2120)

2018-12-21 22:41:49 +01:00
parent d242e0f29e
commit ee74732a09
32 changed files with 636 additions and 13 deletions
@@ -0,0 +1,95 @@
+<?php
+
+namespace App\Http\Controllers\Settings;
+
+use Illuminate\Http\Request;
+use App\Models\User\RecoveryCode;
+use App\Http\Controllers\Controller;
+use App\Traits\JsonRespondController;
+use PragmaRX\Recovery\Recovery as PragmaRXRecovery;
+
+class RecoveryCodesController extends Controller
+{
+    use JsonRespondController;
+
+    /**
+     * Generate recovery codes.
+     *
+     * @param \Illuminate\Http\Request $request
+     * @return \Illuminate\Http\Response
+     */
+    public function store(Request $request)
+    {
+        // Remove previous codes
+        auth()->user()->recoveryCodes()
+            ->each(function ($code) {
+                $code->delete();
+            });
+
+        // Generate new codes
+        $this->generate();
+
+        $codes = auth()->user()->recoveryCodes()->get();
+
+        return $this->response($codes);
+    }
+
+    /**
+     * Get list of recovery codes.
+     *
+     * @param \Illuminate\Http\Request $request
+     * @return \Illuminate\Http\Response
+     */
+    public function index(Request $request)
+    {
+        $codes = auth()->user()->recoveryCodes()->get();
+
+        if (count($codes) == 0) {
+            $this->generate();
+            $codes = auth()->user()->recoveryCodes()->get();
+        }
+
+        return $this->response($codes);
+    }
+
+    /**
+     * Format codes collection for response.
+     *
+     * @param \Illuminate\Database\Eloquent\Collection  $codes
+     * @return array
+     */
+    private function response($codes)
+    {
+        return $codes->map(function ($code) {
+            return [
+                'id' => $code->id,
+                'recovery' => $code->recovery,
+                'used' => (bool) $code->used,
+            ];
+        });
+    }
+
+    /**
+     * Generate new recovery codes.
+     *
+     * @return void
+     */
+    private function generate()
+    {
+        // Generate new codes
+        $recovery = new PragmaRXRecovery();
+        $codes = $recovery->setCount(config('auth.recovery.count'))
+                 ->setBlocks(config('auth.recovery.blocks'))
+                 ->setChars(config('auth.recovery.chars'))
+                 ->uppercase()
+                 ->toArray();
+
+        foreach ($codes as $code) {
+            RecoveryCode::create([
+                'account_id' => auth()->user()->account_id,
+                'user_id' => auth()->user()->id,
+                'recovery' => $code,
+            ]);
+        }
+    }
+}