114 lines
4.3 KiB
PHP
114 lines
4.3 KiB
PHP
<?php
|
|
|
|
namespace App\Controller\Account;
|
|
|
|
use App\Service\PasswordResetManager;
|
|
use App\Service\PublicFormRateLimiter;
|
|
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
|
|
use Symfony\Component\Form\Extension\Core\Type\EmailType;
|
|
use Symfony\Component\Form\Extension\Core\Type\PasswordType;
|
|
use Symfony\Component\Form\Extension\Core\Type\RepeatedType;
|
|
use Symfony\Component\HttpFoundation\Request;
|
|
use Symfony\Component\HttpFoundation\Response;
|
|
use Symfony\Component\Routing\Attribute\Route;
|
|
use Symfony\Component\Security\Http\Attribute\IsGranted;
|
|
use Symfony\Component\Validator\Constraints\Length;
|
|
use Symfony\Component\Validator\Constraints\Email;
|
|
use Symfony\Component\Validator\Constraints\NotBlank;
|
|
|
|
class ResetPasswordController extends AbstractController
|
|
{
|
|
public function __construct(
|
|
private readonly PasswordResetManager $passwordResetManager,
|
|
private readonly PublicFormRateLimiter $publicFormRateLimiter,
|
|
) {
|
|
}
|
|
|
|
#[Route('/reset-password', name: 'app_reset_password')]
|
|
#[IsGranted('PUBLIC_ACCESS')]
|
|
public function index(Request $request): Response
|
|
{
|
|
$form = $this
|
|
->createFormBuilder(null, [
|
|
'action' => $this->generateUrl('app_reset_password'),
|
|
])
|
|
->add('email', EmailType::class, [
|
|
'label' => 'E-Mail',
|
|
'constraints' => [
|
|
new NotBlank([
|
|
'message' => 'Bitte angeben',
|
|
]),
|
|
new Email([
|
|
'mode' => 'strict',
|
|
'message' => 'Bitte eine gültige E-Mail Adresse angeben',
|
|
]),
|
|
],
|
|
])
|
|
->getForm()
|
|
;
|
|
$form->handleRequest($request);
|
|
|
|
if ($form->isSubmitted() && $form->isValid()) {
|
|
$email = (string) $form->get('email')->getData();
|
|
if (false === $this->publicFormRateLimiter->isPasswordResetAllowed($email, $request)) {
|
|
$this->addFlash('error', PublicFormRateLimiter::THROTTLED_MESSAGE);
|
|
|
|
return $this->render('reset_password/index.html.twig', [
|
|
'form' => $form,
|
|
], new Response('', Response::HTTP_TOO_MANY_REQUESTS));
|
|
}
|
|
|
|
$this->passwordResetManager->requestPasswordReset($email);
|
|
$this->addFlash('info', 'Du erhältst in Kürze eine E-Mail mit einem Link zum Zurücksetzen deines Passworts, sofern zu deinem Konto eine E-Mail-Adresse hinterlegt ist.');
|
|
|
|
return $this->redirectToRoute('app_login');
|
|
}
|
|
|
|
return $this->render('reset_password/index.html.twig', [
|
|
'form' => $form,
|
|
]);
|
|
}
|
|
|
|
#[Route('/reset-password/confirm', name: 'app_reset_password_confirm', methods: ['GET', 'POST'])]
|
|
#[IsGranted('PUBLIC_ACCESS')]
|
|
public function confirm(Request $request): Response
|
|
{
|
|
$user = $this->passwordResetManager->validateResetRequest($request);
|
|
|
|
$form = $this
|
|
->createFormBuilder(null, [
|
|
'action' => $request->getUri(),
|
|
])
|
|
->add('password', RepeatedType::class, [
|
|
'type' => PasswordType::class,
|
|
'first_options' => [
|
|
'label' => 'Neues Passwort',
|
|
'constraints' => [
|
|
new Length(
|
|
min: 8,
|
|
minMessage: 'Das Passwort muss mindestens {{ limit }} Zeichen lang sein.',
|
|
),
|
|
],
|
|
],
|
|
'second_options' => [
|
|
'label' => 'Neues Passwort wiederholen',
|
|
],
|
|
'invalid_message' => 'Die beiden Passwortangaben müssen identisch sein.',
|
|
])
|
|
->getForm()
|
|
;
|
|
$form->handleRequest($request);
|
|
|
|
if ($form->isSubmitted() && $form->isValid()) {
|
|
$this->passwordResetManager->resetPassword($user, $form->get('password')->getData());
|
|
$this->addFlash('info', 'Dein Passwort wurde aktualisiert. Du kannst dich jetzt mit dem neuen Passwort anmelden.');
|
|
|
|
return $this->redirectToRoute('app_login');
|
|
}
|
|
|
|
return $this->render('reset_password/confirm.html.twig', [
|
|
'form' => $form,
|
|
]);
|
|
}
|
|
}
|