anonaddy/app/Http/Controllers/TwoFactorAuthController.php
2019-06-21 14:39:52 +01:00

66 lines
2 KiB
PHP

<?php
namespace App\Http\Controllers;
use App\Http\Requests\EnableTwoFactorAuthRequest;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Hash;
use PragmaRX\Google2FALaravel\Support\Authenticator;
class TwoFactorAuthController extends Controller
{
protected $twoFactor;
protected $authenticator;
public function __construct(Request $request)
{
$this->twoFactor = app('pragmarx.google2fa');
$this->authenticator = app(Authenticator::class)->boot($request);
}
public function store(EnableTwoFactorAuthRequest $request)
{
if (!$this->twoFactor->verifyKey(user()->two_factor_secret, $request->two_factor_token)) {
return back()->withErrors(['two_factor_token' => 'The token you entered was incorrect']);
}
user()->update(['two_factor_enabled' => true]);
$this->authenticator->login();
return back()->with(['status' => '2FA Enabled Successfully']);
}
public function update()
{
if (user()->two_factor_enabled) {
return back()->withErrors(['regenerate_2fa' => 'You must disable 2FA before you can regenerate your secret key']);
}
user()->update(['two_factor_secret' => $this->twoFactor->generateSecretKey()]);
return back()->with(['status' => '2FA Secret Successfully Regenerated']);
}
public function destroy(Request $request)
{
if (!Hash::check($request->current_password_2fa, user()->password)) {
return back()->withErrors(['current_password_2fa' => 'Current password incorrect']);
}
user()->update(['two_factor_enabled' => false]);
$this->authenticator->logout();
return back()->with(['status' => '2FA Disabled Successfully']);
}
public function authenticateTwoFactor(Request $request)
{
if ($request->session()->has('intended_path')) {
return redirect($request->session()->pull('intended_path'));
}
redirect()->intended($request->redirectPath);
}
}