One Hat Cyber Team

View File Name : AuthController.php

<?php

namespace App\Http\Controllers;

use App\Models\User;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Hash;
use Illuminate\Support\Str;
use OTIFSolutions\ACLMenu\Models\UserRole;
use OTIFSolutions\Laravel\Settings\Models\Setting;

class AuthController extends Controller
{
    public function login(Request $request){
        $request->validate([
            'email' => 'required',
            'password' => 'required'
        ]);
        $user = User::where('email',$request['email'])->where('user_role_id',1)->first();
        if(!$user)
            return response()->json(['errors' => ['error' => 'Unauthorized Access']],422);
        if (Auth::attempt(['email' => strtolower($request['email']), 'password' => $request['password']], isset($request['remember_me']))) {
            $user = Auth::user();
            \Session::put('user_route', 'dmckgl');
            return response()->json([
                'location' => '/dmckgl/dashboard',
                'message' => 'Login Success. Redirecting Now',
            ]);
        }else 
            return response()->json(['errors' => ['error' => 'Authentication Failed']],422);
    }
    
    public function adminLogin(Request $request){
        $request->validate([
            'email' => 'required',
            'password' => 'required'
        ]);
        $user = User::where('email',$request['email'])->where('user_role_id',2)->first();
        if(!$user)
            return response()->json(['errors' => ['error' => 'Unauthorized Access']],422);
        /*Auth::loginUsingId($user->id);
        \Session::put('user_route', 'cfxmkw');*/
        if (Auth::attempt(['email' => strtolower($request['email']), 'password' => $request['password']], isset($request['remember_me']))) {
            $user = Auth::user();
            \Session::put('user_route', 'cfxmkw');
            return response()->json([
                'location' =>  '/cfxmkw/dashboard',
                'message' => 'Login Success. Redirecting Now',
            ]);
        }else 
            return response()->json(['errors' => ['error' => 'Authentication Failed']],422);
    }
    
    public function naipLogin(Request $request){
        $request->validate([
            'email' => 'required',
            'password' => 'required'
        ]);
        $user = User::where('email',$request['email'])->where('user_role_id',4)->first();
        if(!$user)
            return response()->json(['errors' => ['error' => 'Unauthorized Access']],422);
        /*Auth::loginUsingId($user->id);
        \Session::put('user_route', 'bnwkpn');*/
        if (Auth::attempt(['email' => strtolower($request['email']), 'password' => $request['password']], isset($request['remember_me']))) {
            $user = Auth::user();
            \Session::put('user_route', 'bnwkpn');
            return response()->json([
                'location' =>  '/bnwkpn/dashboard',
                'message' => 'Login Success. Redirecting Now',
            ]);
        }else 
            return response()->json(['errors' => ['error' => 'Authentication Failed']],422);
    }
    
    public function showSuperLogin(){

        return view('dashboard.login',[
            'prefix' => env('SUPER_ADMIN_ROUTE'),
        ]);
    }
    
    public function showAdminLogin(){

        return view('dashboard.login',[
            'prefix' => env('ADMIN_ROUTE'),
        ]);
    }
    
    public function showNaipLogin(){

        return view('dashboard.login',[
            'prefix' => env('NAIP_MEMBER_ROUTE'),
        ]);
    }

    public function showRegister(){

        return view('dashboard.register');
    }

    /*public function register(Request $request){
        $request->validate([
            'full_name' => 'required',
            'email' => 'required|unique:users',
            'password' => 'required_with:confirm_password|same:confirm_password',
            'accept_terms' => 'required'
        ]);
        $user = new User();
        $user['name'] = $request['full_name'];
        $user['email'] = strtolower($request['email']);
        $user['user_role_id'] = UserRole::where('name','CUSTOMER')->first()['id'];
        $user['password'] = Hash::make($request['password']);
        $user['verification_token'] = md5(time()).md5($user['email']);
        $user->save();

        Auth::login($user);
        //$token = User::find($user['id'])->createToken('Api_Register_Token');

        sendEmail($user['email'],'mails.auth.verify-email', ['subject' => 'Verify your Email | CTOPP', 'username' => $user['name'], 'link' => url('/verify/email/'.$user['verification_token']), 'email' => $user['email'], 'support_email' => Setting::get('support_email')]);

        return response()->json([
            'location' => ($user['team_owner']['user_role']['name'] == 'CUSTOMER')? '/':'/dashboard',
            'message' => 'success',
            //'token' => $token->accessToken,
            'user' => $user,
        ]);
    }*/

    public function logout(){

        if(Auth::user()['team_owner']['user_role']['name'] == 'ADMIN'){
            Auth::logout();
            return redirect('/cfxmkw/login');
        }elseif(Auth::user()['team_owner']['user_role']['name'] == 'SUPER_ADMIN') {
            Auth::logout();
            return redirect('/dmckgl/login');
        }else{
            Auth::logout();
            return redirect('/');
        }
    }

    /*public function forgotPassword(Request $request){
        $request->validate([
            'email' => 'required'
        ]);
        $user = User::where('email',$request['email'])->first();
        if ($user === null)
            return response()->json(['errors' => [ 'error' => 'User not found.']],422);
        else{
            $password = Str::random(40);
            $user['password'] = Hash::make($password);
            $user->save();
            return response()->json([
                'location' => '/login',
                'message' => 'Password Reset. Please check email for updated password.'
            ]);
        }
    }*/

    public function checkUser(Request $request)
    {
        if (Auth::user()){
            return response()->json(['message' => 'success']);
        }else{
            return response()->json(['errors' => ['error' => 'User is not logged In.']]);
        }
    }

    public function getVerifyEmailView(){
        $user = Auth::user();
        if (!$user)
            return redirect('/login')->withErrors(['error' => 'Need to login first.']);

        return view('dashboard.verify-email', [
            'user' => $user
        ]);
    }

    public function adminVerifyEmail($token){
        $user = User::where('verification_token',$token)->first();
        if (!$user)
            return redirect('/cfxmkw/login')->withErrors(['error' => 'Invalid verification token provided.']);

        $user['verification_token'] = NULL;
        $user->save();
        return redirect('/cfxmkw/verified')->withErrors(['error' => 'Email verified successfully.']);
    }
    
    public function superVerifyEmail($token){
        $user = User::where('verification_token',$token)->first();
        if (!$user)
            return redirect('/dmckgl/login')->withErrors(['error' => 'Invalid verification token provided.']);

        $user['verification_token'] = NULL;
        $user->save();
        return redirect('/dmckgl/verified')->withErrors(['error' => 'Email verified successfully.']);
    }
    
    public function naipVerifyEmail($token){
        $user = User::where('verification_token',$token)->first();
        if (!$user)
            return redirect('/bnwkpn/login')->withErrors(['error' => 'Invalid verification token provided.']);

        $user['verification_token'] = NULL;
        $user->save();
        return redirect('/bnwkpn/verified')->withErrors(['error' => 'Email verified successfully.']);
    }

    public function forgotPassword(Request $request){
        $request->validate([
            'email' => 'required'
        ]);
        $user = User::where('email',$request['email'])->first();
        if ($user === null)
            return response()->json(['errors' => [ 'error' => 'User not found.']],422);
        else{
            $user['verification_token'] = md5(time()).md5($user['email']);
            $admin = User::select('email')->find(1);
            sendEmail($user->email,'mails.auth.forgot-password', ['subject' => 'Reset Password | CTOPP', 'username' => $user['name'], 'link' => url('/reset/password/'.$user['verification_token']), 'email' => $user['email'], 'support_email' => Setting::get('support_email')]);

            $user->save();
            return response()->json([
                //'location' => '/login',
                'message' => 'Please check your email. A link has been sent to your email.'
            ]);
        }
    }

    public function superResetPasswordView($token){
        $user = User::where('verification_token',$token)->first();
        if (!$user)
            return redirect('/dmckgl/login')->withErrors(['error' => 'Invalid verification token provided.']);

        return view('dashboard.reset-password', [
            'token' => $token
        ]);
    }
    
    public function adminResetPasswordView($token){
        $user = User::where('verification_token',$token)->first();
        if (!$user)
            return redirect('/cfxmkw/login')->withErrors(['error' => 'Invalid verification token provided.']);

        return view('dashboard.reset-password', [
            'token' => $token
        ]);
    }
    
    public function naipResetPasswordView($token){
        $user = User::where('verification_token',$token)->first();
        if (!$user)
            return redirect('/bnwkpn/login')->withErrors(['error' => 'Invalid verification token provided.']);

        return view('dashboard.reset-password', [
            'token' => $token
        ]);
    }
    
    public function showSuperForgotPassword(){

        return view('dashboard.forgot-password',[
            'prefix' => 'dmckgl',
        ]);
    }
    
    public function showAdminForgotPassword(){

        return view('dashboard.forgot-password',[
            'prefix' => 'cfxmkw',
        ]);
    }
    
    public function showNaipForgotPassword(){

        return view('dashboard.forgot-password',[
            'prefix' => 'bnwkpn',
        ]);
    }

    public function emailVerified(){

        return view('dashboard.email-verified');
    }

    public function superResetPassword(Request $request){
        $request->validate([
            'password' => 'required_with:confirm_password|same:confirm_password'
        ]);
        $user = User::where('verification_token',$request['email_token'])->first();
        if (!$user)
            return redirect('/dmckgl/login')->withErrors(['error' => 'User not found.']);

        $user['verification_token'] = NULL;
        $user['password'] = Hash::make($request['password']);
        $user->save();
        return response()->json([
            'location' => '/dmckgl/login',
            'message' => 'Password Reset. Please login.'
        ]);
    }
    
    
    public function adminResetPassword(Request $request){
        $request->validate([
            'password' => 'required_with:confirm_password|same:confirm_password'
        ]);
        $user = User::where('verification_token',$request['email_token'])->first();
        if (!$user)
            return redirect('/cfxmkw/login')->withErrors(['error' => 'User not found.']);

        $user['verification_token'] = NULL;
        $user['password'] = Hash::make($request['password']);
        $user->save();
        return response()->json([
            'location' => '/cfxmkw/login',
            'message' => 'Password Reset. Please login.'
        ]);
    }
    
    public function naipResetPassword(Request $request){
        $request->validate([
            'password' => 'required_with:confirm_password|same:confirm_password'
        ]);
        $user = User::where('verification_token',$request['email_token'])->first();
        if (!$user)
            return redirect('/bnwkpn/login')->withErrors(['error' => 'User not found.']);

        $user['verification_token'] = NULL;
        $user['password'] = Hash::make($request['password']);
        $user->save();
        return response()->json([
            'location' => '/bnwkpn/login',
            'message' => 'Password Reset. Please login.'
        ]);
    }

}