validate($request, [ 'identification' => 'required', 'password' => 'required|min:6|max:32' ]); $identification = $request->input('identification'); // Guess type of identification $authType = (validate($identification, 'email')) ? "email" : "username"; event(new Events\UserTryToLogin($identification, $authType)); // Get user instance from repository. // If the given identification is not registered yet, // it will return a null value. $user = $users->get($identification, $authType); if (session('login_fails', 0) > 3) { $this->validate($request, ['captcha' => 'required|captcha']); } if (! $user) { return json(trans('auth.validation.user'), 2); } else { if ($user->verifyPassword($request->input('password'))) { Session::forget('login_fails'); Auth::login($user, $request->input('keep') == 'true'); event(new Events\UserLoggedIn($user)); session()->forget('last_requested_path'); return json(trans('auth.login.success'), 0); } else { Session::put('login_fails', session('login_fails', 0) + 1); return json(trans('auth.validation.password'), 1, [ 'login_fails' => session('login_fails') ]); } } } public function logout() { if (Auth::check()) { Auth::logout(); return json(trans('auth.logout.success'), 0); } else { return json(trans('auth.logout.fail'), 1); } } public function register() { if (option('user_can_register')) { return view('auth.register'); } else { throw new PrettyPageException(trans('auth.register.close'), 7); } } public function handleRegister(Request $request) { $data = $this->validate($request, [ 'email' => 'required|email|unique:users', 'password' => 'required|min:8|max:32', 'nickname' => 'required|no_special_chars|max:255', 'captcha' => 'required'.(app()->environment('testing') ? '' : '|captcha') ]); if (! option('user_can_register')) { return json(trans('auth.register.close'), 7); } // If amount of registered accounts of IP is more than allowed amounts, // reject the registration. if (User::where('ip', Utils::getClientIp())->count() < option('regs_per_ip')) { $user = new User; $user->email = $data['email']; $user->nickname = $data['nickname']; $user->score = option('user_initial_score'); $user->avatar = 0; $user->password = User::getEncryptedPwdFromEvent($data['password'], $user) ?: app('cipher')->hash($data['password'], config('secure.salt')); $user->ip = Utils::getClientIp(); $user->permission = User::NORMAL; $user->register_at = Utils::getTimeFormatted(); $user->last_sign_at = Utils::getTimeFormatted(time() - 86400); $user->save(); event(new Events\UserRegistered($user)); Auth::login($user); return json([ 'errno' => 0, 'msg' => trans('auth.register.success') ]); } else { return json(trans('auth.register.max', ['regs' => option('regs_per_ip')]), 7); } } public function forgot() { if (config('mail.driver') != "") { return view('auth.forgot'); } else { throw new PrettyPageException(trans('auth.forgot.close'), 8); } } public function handleForgot(Request $request, UserRepository $users) { $this->validate($request, [ 'captcha' => 'required'.(app()->environment('testing') ? '' : '|captcha') ]); if (config('mail.driver') == "") return json(trans('auth.forgot.close'), 1); if (Session::has('last_mail_time') && (time() - session('last_mail_time')) < 60) return json(trans('auth.forgot.frequent-mail'), 1); // Get user instance $user = $users->get($request->input('email'), 'email'); if (! $user) return json(trans('auth.forgot.unregistered'), 1); $url = URL::temporarySignedRoute('auth.reset', now()->addHour(), ['uid' => $user->uid]); try { Mail::to($request->input('email'))->send(new ForgotPassword($url)); } catch (\Exception $e) { report($e); return json(trans('auth.mail.failed', ['msg' => $e->getMessage()]), 2); } Session::put('last_mail_time', time()); return json(trans('auth.mail.success'), 0); } public function reset($uid, UserRepository $users) { return view('auth.reset')->with('user', $users->get($uid)); } public function handleReset($uid, Request $request, UserRepository $users) { $validated = $this->validate($request, [ 'password' => 'required|min:8|max:32', ]); $users->get($uid)->changePassword($validated['password']); return json(trans('auth.reset.success'), 0); } protected function checkCaptcha($request) { return (strtolower($request->input('captcha')) == strtolower(session('phrase'))); } }