chore: move controllers to matching namespace

2026-06-23 16:27:08 +02:00
1 parent 69885b939a
commit b1ae968d11
@@ -0,0 +1,113 @@
+<?php
+
+namespace App\Controller\Account;
+
+use App\Service\PasswordResetManager;
+use App\Service\PublicFormRateLimiter;
+use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
+use Symfony\Component\Form\Extension\Core\Type\EmailType;
+use Symfony\Component\Form\Extension\Core\Type\PasswordType;
+use Symfony\Component\Form\Extension\Core\Type\RepeatedType;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Routing\Attribute\Route;
+use Symfony\Component\Security\Http\Attribute\IsGranted;
+use Symfony\Component\Validator\Constraints\Length;
+use Symfony\Component\Validator\Constraints\Email;
+use Symfony\Component\Validator\Constraints\NotBlank;
+
+class ResetPasswordController extends AbstractController
+{
+    public function __construct(
+        private readonly PasswordResetManager $passwordResetManager,
+        private readonly PublicFormRateLimiter $publicFormRateLimiter,
+    ) {
+    }
+
+    #[Route('/reset-password', name: 'app_reset_password')]
+    #[IsGranted('PUBLIC_ACCESS')]
+    public function index(Request $request): Response
+    {
+        $form = $this
+            ->createFormBuilder(null, [
+                'action' => $this->generateUrl('app_reset_password'),
+            ])
+            ->add('email', EmailType::class, [
+                'label' => 'E-Mail',
+                'constraints' => [
+                    new NotBlank([
+                        'message' => 'Bitte angeben',
+                    ]),
+                    new Email([
+                        'mode' => 'strict',
+                        'message' => 'Bitte eine gültige E-Mail Adresse angeben',
+                    ]),
+                ],
+            ])
+            ->getForm()
+        ;
+        $form->handleRequest($request);
+
+        if ($form->isSubmitted() && $form->isValid()) {
+            $email = (string) $form->get('email')->getData();
+            if (false === $this->publicFormRateLimiter->isPasswordResetAllowed($email, $request)) {
+                $this->addFlash('error', PublicFormRateLimiter::THROTTLED_MESSAGE);
+
+                return $this->render('reset_password/index.html.twig', [
+                    'form' => $form,
+                ], new Response('', Response::HTTP_TOO_MANY_REQUESTS));
+            }
+
+            $this->passwordResetManager->requestPasswordReset($email);
+            $this->addFlash('info', 'Du erhältst in Kürze eine E-Mail mit einem Link zum Zurücksetzen deines Passworts, sofern zu deinem Konto eine E-Mail-Adresse hinterlegt ist.');
+
+            return $this->redirectToRoute('app_login');
+        }
+
+        return $this->render('reset_password/index.html.twig', [
+            'form' => $form,
+        ]);
+    }
+
+    #[Route('/reset-password/confirm', name: 'app_reset_password_confirm', methods: ['GET', 'POST'])]
+    #[IsGranted('PUBLIC_ACCESS')]
+    public function confirm(Request $request): Response
+    {
+        $user = $this->passwordResetManager->validateResetRequest($request);
+
+        $form = $this
+            ->createFormBuilder(null, [
+                'action' => $request->getUri(),
+            ])
+            ->add('password', RepeatedType::class, [
+                'type' => PasswordType::class,
+                'first_options' => [
+                    'label' => 'Neues Passwort',
+                    'constraints' => [
+                        new Length(
+                            min: 8,
+                            minMessage: 'Das Passwort muss mindestens {{ limit }} Zeichen lang sein.',
+                        ),
+                    ],
+                ],
+                'second_options' => [
+                    'label' => 'Neues Passwort wiederholen',
+                ],
+                'invalid_message' => 'Die beiden Passwortangaben müssen identisch sein.',
+            ])
+            ->getForm()
+        ;
+        $form->handleRequest($request);
+
+        if ($form->isSubmitted() && $form->isValid()) {
+            $this->passwordResetManager->resetPassword($user, $form->get('password')->getData());
+            $this->addFlash('info', 'Dein Passwort wurde aktualisiert. Du kannst dich jetzt mit dem neuen Passwort anmelden.');
+
+            return $this->redirectToRoute('app_login');
+        }
+
+        return $this->render('reset_password/confirm.html.twig', [
+            'form' => $form,
+        ]);
+    }
+}