Proyectos de Subversion LeadersLinked - Antes de SPA

Rev

Rev 6854 | Rev 7330 | Ir a la última revisión | | Comparar con el anterior | Ultima modificación | Ver Log |

Rev Autor Línea Nro. Línea
1 www 1 
<?php
6854 stevensc 2 
 
1 www 3 
declare(strict_types=1);
4 
 
5 
namespace LeadersLinked\Controller;
6 
 
3639 efrain 7 
use Nullix\CryptoJsAes\CryptoJsAes;
6854 stevensc 8 
use GeoIp2\Database\Reader as GeoIp2Reader;
3639 efrain 9 
 
1 www 10 
use Laminas\Authentication\AuthenticationService;
11 
use Laminas\Authentication\Result as AuthResult;
12 
use Laminas\Db\Adapter\AdapterInterface;
13 
use Laminas\Http\Header\SetCookie;
14 
use Laminas\Mvc\Controller\AbstractActionController;
15 
use Laminas\Log\LoggerInterface;
16 
use Laminas\View\Model\ViewModel;
17 
use Laminas\View\Model\JsonModel;
3639 efrain 18 
 
1 www 19 
use LeadersLinked\Form\Auth\SigninForm;
20 
use LeadersLinked\Form\Auth\ResetPasswordForm;
21 
use LeadersLinked\Form\Auth\ForgotPasswordForm;
22 
use LeadersLinked\Form\Auth\SignupForm;
3639 efrain 23 
 
24 
use LeadersLinked\Mapper\ConnectionMapper;
25 
use LeadersLinked\Mapper\EmailTemplateMapper;
26 
use LeadersLinked\Mapper\NetworkMapper;
1 www 27 
use LeadersLinked\Mapper\UserMapper;
3639 efrain 28 
 
1 www 29 
use LeadersLinked\Model\User;
30 
use LeadersLinked\Model\UserType;
31 
use LeadersLinked\Library\QueueEmail;
32 
use LeadersLinked\Library\Functions;
33 
use LeadersLinked\Model\EmailTemplate;
34 
use LeadersLinked\Mapper\UserPasswordMapper;
35 
use LeadersLinked\Model\UserBrowser;
36 
use LeadersLinked\Mapper\UserBrowserMapper;
37 
use LeadersLinked\Mapper\UserIpMapper;
38 
use LeadersLinked\Model\UserIp;
39 
use LeadersLinked\Form\Auth\MoodleForm;
40 
use LeadersLinked\Library\Rsa;
41 
use LeadersLinked\Library\Image;
3639 efrain 42 
 
43 
use LeadersLinked\Authentication\AuthAdapter;
1 www 44 
use LeadersLinked\Authentication\AuthEmailAdapter;
3639 efrain 45 
 
1 www 46 
use LeadersLinked\Model\UserPassword;
3639 efrain 47 
 
3298 efrain 48 
use LeadersLinked\Model\Connection;
3639 efrain 49 
use LeadersLinked\Authentication\AuthImpersonateAdapter;
4776 efrain 50 
use LeadersLinked\Model\Network;
6849 efrain 51 
use LeadersLinked\Cache\CacheInterface;
52 
use LeadersLinked\Cache\CacheImpl;
6866 efrain 53 
use Laminas\Mvc\I18n\Translator;
1 www 54 
 
55 
 
6849 efrain 56 
 
1 www 57 
class AuthController extends AbstractActionController
58 
{
59 
    /**
60 
     *
6866 efrain 61 
     * @var \Laminas\Db\Adapter\AdapterInterface
1 www 62 
     */
63 
    private $adapter;
6866 efrain 64 
 
1 www 65 
    /**
66 
     *
6866 efrain 67 
     * @var \LeadersLinked\Cache\CacheInterface
1 www 68 
     */
6866 efrain 69 
    private $cache;
70 
 
71 
 
72 
    /**
73 
     *
74 
     * @var \Laminas\Log\LoggerInterface
75 
     */
1 www 76 
    private $logger;
6866 efrain 77 
 
1 www 78 
    /**
6866 efrain 79 
     *
1 www 80 
     * @var array
81 
     */
82 
    private $config;
6866 efrain 83 
 
84 
 
6849 efrain 85 
    /**
6866 efrain 86 
     *
87 
     * @var \Laminas\Mvc\I18n\Translator
6849 efrain 88 
     */
6866 efrain 89 
    private $translator;
90 
 
91 
 
1 www 92 
    /**
6866 efrain 93 
     *
94 
     * @param \Laminas\Db\Adapter\AdapterInterface $adapter
95 
     * @param \LeadersLinked\Cache\CacheInterface $cache
96 
     * @param \Laminas\Log\LoggerInterface LoggerInterface $logger
1 www 97 
     * @param array $config
6866 efrain 98 
     * @param \Laminas\Mvc\I18n\Translator $translator
1 www 99 
     */
6866 efrain 100 
    public function __construct($adapter, $cache, $logger, $config, $translator)
1 www 101 
    {
102 
        $this->adapter      = $adapter;
6866 efrain 103 
        $this->cache        = $cache;
1 www 104 
        $this->logger       = $logger;
105 
        $this->config       = $config;
6866 efrain 106 
        $this->translator   = $translator;
1 www 107 
    }
6854 stevensc 108 
 
1 www 109 
    public function signinAction()
110 
    {
4419 efrain 111 
        $currentNetworkPlugin = $this->plugin('currentNetworkPlugin');
112 
        $currentNetwork = $currentNetworkPlugin->getNetwork();
6854 stevensc 113 
 
1 www 114 
        $request = $this->getRequest();
6854 stevensc 115 
 
116 
        if ($request->isPost()) {
3639 efrain 117 
            $currentNetworkPlugin = $this->plugin('currentNetworkPlugin');
118 
            $currentNetwork = $currentNetworkPlugin->getNetwork();
1 www 119 
 
6854 stevensc 120 
 
1 www 121 
            $form = new  SigninForm($this->config);
122 
            $dataPost = $request->getPost()->toArray();
6854 stevensc 123 
 
124 
            if (empty($_SESSION['aes'])) {
1 www 125 
                return new JsonModel([
126 
                    'success'   => false,
127 
                    'data'      => 'ERROR_WEBSERVICE_ENCRYPTION_KEYS_NOT_FOUND'
128 
                ]);
129 
            }
6854 stevensc 130 
 
131 
            if (!empty($dataPost['email'])) {
132 
                $dataPost['email'] = CryptoJsAes::decrypt($dataPost['email'], $_SESSION['aes']);
1 www 133 
            }
6854 stevensc 134 
 
135 
 
136 
            if (!empty($dataPost['password'])) {
137 
                $dataPost['password'] = CryptoJsAes::decrypt($dataPost['password'], $_SESSION['aes']);
1 www 138 
            }
6854 stevensc 139 
 
1 www 140 
            $form->setData($dataPost);
6854 stevensc 141 
 
142 
            if ($form->isValid()) {
1 www 143 
                $dataPost = (array) $form->getData();
6854 stevensc 144 
 
1 www 145 
                $email      = $dataPost['email'];
146 
                $password   = $dataPost['password'];
147 
                $remember   = $dataPost['remember'];
6854 stevensc 148 
 
1 www 149 
                $authAdapter = new AuthAdapter($this->adapter, $this->logger);
3639 efrain 150 
                $authAdapter->setData($email, $password, $currentNetwork->id);
1 www 151 
                $authService = new AuthenticationService();
6854 stevensc 152 
 
1 www 153 
                $result = $authService->authenticate($authAdapter);
6854 stevensc 154 
 
155 
                if ($result->getCode() == AuthResult::SUCCESS) {
156 
 
157 
 
1 www 158 
                    $userMapper = UserMapper::getInstance($this->adapter);
159 
                    $user = $userMapper->fetchOneByEmail($email);
6854 stevensc 160 
 
1 www 161 
                    $navigator = get_browser(null, true);
210 efrain 162 
                    $device_type    =  isset($navigator['device_type']) ? $navigator['device_type'] : '';
163 
                    $platform       =  isset($navigator['platform']) ? $navigator['platform'] : '';
164 
                    $browser        =  isset($navigator['browser']) ? $navigator['browser'] : '';
6854 stevensc 165 
 
166 
 
167 
                    $istablet = isset($navigator['istablet']) ?  intval($navigator['istablet']) : 0;
168 
                    $ismobiledevice = isset($navigator['ismobiledevice']) ? intval($navigator['ismobiledevice']) : 0;
210 efrain 169 
                    $version = isset($navigator['version']) ? $navigator['version'] : '';
6854 stevensc 170 
 
171 
 
1 www 172 
                    $userBrowserMapper = UserBrowserMapper::getInstance($this->adapter);
173 
                    $userBrowser = $userBrowserMapper->fetch($user->id, $device_type, $platform, $browser);
6854 stevensc 174 
                    if ($userBrowser) {
1 www 175 
                        $userBrowserMapper->update($userBrowser);
176 
                    } else {
177 
                        $userBrowser = new UserBrowser();
178 
                        $userBrowser->user_id           = $user->id;
179 
                        $userBrowser->browser           = $browser;
180 
                        $userBrowser->platform          = $platform;
181 
                        $userBrowser->device_type       = $device_type;
210 efrain 182 
                        $userBrowser->is_tablet         = $istablet;
183 
                        $userBrowser->is_mobile_device  = $ismobiledevice;
184 
                        $userBrowser->version           = $version;
6854 stevensc 185 
 
1 www 186 
                        $userBrowserMapper->insert($userBrowser);
187 
                    }
188 
                    //
6854 stevensc 189 
 
1 www 190 
                    $ip = Functions::getUserIP();
191 
                    $ip = $ip == '127.0.0.1' ? '148.240.211.148' : $ip;
6854 stevensc 192 
 
1 www 193 
                    $userIpMapper = UserIpMapper::getInstance($this->adapter);
194 
                    $userIp = $userIpMapper->fetch($user->id, $ip);
6854 stevensc 195 
                    if (empty($userIp)) {
196 
 
197 
                        if ($this->config['leaderslinked.runmode.sandbox']) {
1 www 198 
                            $filename = $this->config['leaderslinked.geoip2.production_database'];
199 
                        } else {
200 
                            $filename = $this->config['leaderslinked.geoip2.sandbox_database'];
201 
                        }
6854 stevensc 202 
 
1 www 203 
                        $reader = new GeoIp2Reader($filename); //GeoIP2-City.mmdb');
204 
                        $record = $reader->city($ip);
6854 stevensc 205 
                        if ($record) {
1 www 206 
                            $userIp = new UserIp();
207 
                            $userIp->user_id = $user->id;
6849 efrain 208 
                            $userIp->city = !empty($record->city->name) ? Functions::utf8_decode($record->city->name) : '';
209 
                            $userIp->state_code = !empty($record->mostSpecificSubdivision->isoCode) ? Functions::utf8_decode($record->mostSpecificSubdivision->isoCode) : '';
210 
                            $userIp->state_name = !empty($record->mostSpecificSubdivision->name) ? Functions::utf8_decode($record->mostSpecificSubdivision->name) : '';
211 
                            $userIp->country_code = !empty($record->country->isoCode) ? Functions::utf8_decode($record->country->isoCode) : '';
212 
                            $userIp->country_name = !empty($record->country->name) ? Functions::utf8_decode($record->country->name) : '';
1 www 213 
                            $userIp->ip = $ip;
234 efrain 214 
                            $userIp->latitude = !empty($record->location->latitude) ? $record->location->latitude : 0;
215 
                            $userIp->longitude = !empty($record->location->longitude) ? $record->location->longitude : 0;
216 
                            $userIp->postal_code = !empty($record->postal->code) ? $record->postal->code : '';
6854 stevensc 217 
 
1 www 218 
                            $userIpMapper->insert($userIp);
219 
                        }
220 
                    } else {
221 
                        $userIpMapper->update($userIp);
222 
                    }
223 
 
6854 stevensc 224 
                    if ($remember) {
1 www 225 
                        $expired = time() + 365 * 24 * 60 * 60;
6854 stevensc 226 
 
1 www 227 
                        $cookieEmail = new SetCookie('email', $email, $expired);
228 
                    } else {
229 
                        $expired = time() - 7200;
230 
                        $cookieEmail = new SetCookie('email', '', $expired);
231 
                    }
6854 stevensc 232 
 
233 
 
1 www 234 
                    $response = $this->getResponse();
235 
                    $response->getHeaders()->addHeader($cookieEmail);
6854 stevensc 236 
 
237 
 
238 
 
239 
 
240 
 
241 
 
242 
 
1 www 243 
                    $this->logger->info('Ingreso a LeadersLiked', ['user_id' => $user->id, 'ip' => Functions::getUserIP()]);
6854 stevensc 244 
 
6849 efrain 245 
                    $user_share_invitation = $this->cache->getItem('user_share_invitation');
6854 stevensc 246 
 
247 
                    if ($user_share_invitation) {
3364 efrain 248 
                        $userRedirect = $userMapper->fetchOneByUuid($user_share_invitation);
6854 stevensc 249 
                        if ($userRedirect && $userRedirect->status == User::STATUS_ACTIVE && $user->id != $userRedirect->id) {
3298 efrain 250 
                            $connectionMapper = ConnectionMapper::getInstance($this->adapter);
251 
                            $connection = $connectionMapper->fetchOneByUserId1AndUserId2($user->id, $userRedirect->id);
6854 stevensc 252 
 
253 
                            if ($connection) {
254 
 
255 
                                if ($connection->status != Connection::STATUS_ACCEPTED) {
3298 efrain 256 
                                    $connectionMapper->approve($connection);
257 
                                }
258 
                            } else {
259 
                                $connection = new Connection();
260 
                                $connection->request_from = $user->id;
261 
                                $connection->request_to = $userRedirect->id;
262 
                                $connection->status = Connection::STATUS_ACCEPTED;
6854 stevensc 263 
 
3298 efrain 264 
                                $connectionMapper->insert($connection);
265 
                            }
266 
                        }
267 
                    }
6854 stevensc 268 
 
269 
 
270 
 
3364 efrain 271 
                    $data = [
272 
                        'success'   => true,
273 
                        'data'      => $this->url()->fromRoute('dashboard'),
274 
                    ];
6854 stevensc 275 
 
6849 efrain 276 
                    $this->cache->removeItem('user_share_invitation');
1 www 277 
                } else {
6854 stevensc 278 
 
1 www 279 
                    $message = $result->getMessages()[0];
6854 stevensc 280 
                    if (!in_array($message, [
281 
                        'ERROR_USER_NOT_FOUND', 'ERROR_USER_EMAIL_HASNT_BEEN_VARIFIED', 'ERROR_USER_IS_BLOCKED',
1 www 282 
                        'ERROR_USER_IS_INACTIVE', 'ERROR_ENTERED_PASS_INCORRECT_USER_IS_BLOCKED', 'ERROR_ENTERED_PASS_INCORRECT_2',
6854 stevensc 283 
                        'ERROR_ENTERED_PASS_INCORRECT_1', 'ERROR_USER_REQUEST_ACCESS_IS_PENDING', 'ERROR_USER_REQUEST_ACCESS_IS_REJECTED'
284 
 
285 
 
4776 efrain 286 
                    ])) {
1 www 287 
                    }
6854 stevensc 288 
 
289 
                    switch ($message) {
290 
                        case 'ERROR_USER_NOT_FOUND':
1 www 291 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Email no existe', ['ip' => Functions::getUserIP()]);
292 
                            break;
6854 stevensc 293 
 
294 
                        case 'ERROR_USER_EMAIL_HASNT_BEEN_VARIFIED':
1 www 295 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Email no verificado', ['ip' => Functions::getUserIP()]);
296 
                            break;
6854 stevensc 297 
 
298 
                        case 'ERROR_USER_IS_BLOCKED':
1 www 299 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Usuario bloqueado', ['ip' => Functions::getUserIP()]);
300 
                            break;
6854 stevensc 301 
 
302 
                        case 'ERROR_USER_IS_INACTIVE':
1 www 303 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Usuario inactivo', ['ip' => Functions::getUserIP()]);
304 
                            break;
6854 stevensc 305 
 
306 
 
307 
                        case 'ERROR_ENTERED_PASS_INCORRECT_USER_IS_BLOCKED':
1 www 308 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - 3er Intento Usuario bloqueado', ['ip' => Functions::getUserIP()]);
309 
                            break;
6854 stevensc 310 
 
311 
 
312 
                        case 'ERROR_ENTERED_PASS_INCORRECT_2':
1 www 313 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - 1er Intento', ['ip' => Functions::getUserIP()]);
314 
                            break;
6854 stevensc 315 
 
316 
 
317 
                        case 'ERROR_ENTERED_PASS_INCORRECT_1':
1 www 318 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - 2do Intento', ['ip' => Functions::getUserIP()]);
319 
                            break;
6854 stevensc 320 
 
321 
 
322 
                        case 'ERROR_USER_REQUEST_ACCESS_IS_PENDING':
4776 efrain 323 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Falta verificar que pertence a la Red Privada', ['ip' => Functions::getUserIP()]);
324 
                            break;
6854 stevensc 325 
 
326 
                        case  'ERROR_USER_REQUEST_ACCESS_IS_REJECTED':
4776 efrain 327 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Rechazado por no pertence a la Red Privada', ['ip' => Functions::getUserIP()]);
328 
                            break;
6854 stevensc 329 
 
330 
 
331 
                        default:
1 www 332 
                            $message = 'ERROR_UNKNOWN';
333 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Error desconocido', ['ip' => Functions::getUserIP()]);
334 
                            break;
6854 stevensc 335 
                    }
6826 stevensc 336 
 
6854 stevensc 337 
 
338 
 
339 
 
1 www 340 
                    $data = [
341 
                        'success'   => false,
342 
                        'data'   => $message
343 
                    ];
344 
                }
6854 stevensc 345 
 
1 www 346 
                return new JsonModel($data);
347 
            } else {
348 
                $messages = [];
6854 stevensc 349 
 
350 
 
351 
 
1 www 352 
                $form_messages = (array) $form->getMessages();
6854 stevensc 353 
                foreach ($form_messages  as $fieldname => $field_messages) {
354 
 
1 www 355 
                    $messages[$fieldname] = array_values($field_messages);
356 
                }
6854 stevensc 357 
 
1 www 358 
                return new JsonModel([
359 
                    'success'   => false,
360 
                    'data'   => $messages
361 
                ]);
362 
            }
6854 stevensc 363 
        } else if ($request->isGet()) {
364 
 
365 
            if (empty($_SESSION['aes'])) {
1 www 366 
                $_SESSION['aes'] = Functions::generatePassword(16);
367 
            }
6854 stevensc 368 
 
369 
            if ($this->config['leaderslinked.runmode.sandbox']) {
1 www 370 
                $site_key      = $this->config['leaderslinked.google_captcha.sandbox_site_key'];
371 
            } else {
372 
                $site_key      = $this->config['leaderslinked.google_captcha.production_site_key'];
373 
            }
6854 stevensc 374 
 
5751 efrain 375 
            $headers  = $request->getHeaders();
376 
            $isJson = false;
6854 stevensc 377 
            if ($headers->has('Accept')) {
5751 efrain 378 
                $accept = $headers->get('Accept');
6854 stevensc 379 
 
5751 efrain 380 
                $prioritized = $accept->getPrioritized();
6854 stevensc 381 
 
382 
                foreach ($prioritized as $key => $value) {
5751 efrain 383 
                    $raw = trim($value->getRaw());
6854 stevensc 384 
 
385 
                    if (!$isJson) {
5751 efrain 386 
                        $isJson = strpos($raw, 'json');
387 
                    }
388 
                }
389 
            }
6854 stevensc 390 
 
1 www 391 
            $email      = isset($_COOKIE['email']) ? $_COOKIE['email'] : '';
392 
            $remember   = $email ? true : false;
5752 efrain 393 
            $access_usign_social_networks = $this->config['leaderslinked.runmode.access_usign_social_networks'];
6854 stevensc 394 
 
395 
            if ($isJson) {
6839 efrain 396 
                $sandbox = $this->config['leaderslinked.runmode.sandbox'];
397 
                if ($sandbox) {
398 
                    $google_map_key  = $this->config['leaderslinked.google_map.sandbox_api_key'];
399 
                } else {
400 
                    $google_map_key  = $this->config['leaderslinked.google_map.production_api_key'];
401 
                }
6854 stevensc 402 
 
403 
 
5751 efrain 404 
                $data = [
6839 efrain 405 
                    'google_map_key' => $google_map_key,
5751 efrain 406 
                    'email'     => $email,
407 
                    'remember'  => $remember,
408 
                    'site_key'  => $site_key,
6733 efrain 409 
                    'theme_id'  => $currentNetwork->theme_id,
5751 efrain 410 
                    'aes'       => $_SESSION['aes'],
411 
                    'defaultNetwork' => $currentNetwork->default,
5752 efrain 412 
                    'access_usign_social_networks' => $access_usign_social_networks && $currentNetwork->default == Network::DEFAULT_YES ? 'y' : 'n',
5767 efrain 413 
                    'logo_url' => $this->url()->fromRoute('storage-network', ['type' => 'logo']),
414 
                    'navbar_url' => $this->url()->fromRoute('storage-network', ['type' => 'navbar']),
415 
                    'favico_url' => $this->url()->fromRoute('storage-network', ['type' => 'favico']),
5766 efrain 416 
                    'intro' => $currentNetwork->intro
6854 stevensc 417 
 
5751 efrain 418 
                ];
419 
            } else {
6849 efrain 420 
                $sandbox = $this->config['leaderslinked.runmode.sandbox'];
421 
                if ($sandbox) {
422 
                    $google_map_key  = $this->config['leaderslinked.google_map.sandbox_api_key'];
423 
                } else {
424 
                    $google_map_key  = $this->config['leaderslinked.google_map.production_api_key'];
425 
                }
6854 stevensc 426 
 
5751 efrain 427 
                $form = new SigninForm($this->config);
428 
                $form->setData([
429 
                    'email'     => $email,
430 
                    'remember'  => $remember,
431 
                ]);
432 
                $this->layout()->setTemplate('layout/auth.phtml');
433 
                $viewModel = new ViewModel();
434 
                $viewModel->setTemplate('leaders-linked/auth/signin.phtml');
435 
                $viewModel->setVariables([
436 
                    'form'      =>  $form,
437 
                    'site_key'  => $site_key,
6849 efrain 438 
                    'google_map_key' => $google_map_key,
5751 efrain 439 
                    'aes'       => $_SESSION['aes'],
440 
                    'defaultNetwork' => $currentNetwork->default,
5752 efrain 441 
                    'access_usign_social_networks' => $access_usign_social_networks && $currentNetwork->default == Network::DEFAULT_YES ? 'y' : 'n',
5751 efrain 442 
                ]);
6854 stevensc 443 
 
444 
                return $viewModel;
6826 stevensc 445 
            }
1 www 446 
        } else {
447 
            $data = [
448 
                'success' => false,
449 
                'data' => 'ERROR_METHOD_NOT_ALLOWED'
450 
            ];
6854 stevensc 451 
 
1 www 452 
            return new JsonModel($data);
453 
        }
454 
 
455 
        return new JsonModel($data);
456 
    }
6854 stevensc 457 
 
1 www 458 
    public function facebookAction()
459 
    {
6803 efrain 460 
 
1 www 461 
        $request = $this->getRequest();
6854 stevensc 462 
        if ($request->isGet()) {
463 
            /*
6803 efrain 464 
          //  try {
1 www 465 
                $app_id = $this->config['leaderslinked.facebook.app_id'];
466 
                $app_password = $this->config['leaderslinked.facebook.app_password'];
467 
                $app_graph_version = $this->config['leaderslinked.facebook.app_graph_version'];
468 
                //$app_url_auth = $this->config['leaderslinked.facebook.app_url_auth'];
469 
                //$redirect_url = $this->config['leaderslinked.facebook.app_redirect_url'];
470 
 
6803 efrain 471 
                [facebook]
472 
                app_id=343770226993130
473 
                app_password=028ee729090fd591e50a17a786666c12
474 
                app_graph_version=v17
475 
                app_redirect_url=https://leaderslinked.com/oauth/facebook
1 www 476 
 
6803 efrain 477 
                https://www.facebook.com/v17.0/dialog/oauth?client_id=343770226993130&redirect_uri= https://dev.leaderslinked.com/oauth/facebook&state=AE12345678
478 
 
1 www 479 
 
6803 efrain 480 
                $s = 'https://www.facebook.com/v17.0/dialog/oauth' .
481 
                    '?client_id='
482 
                    '&redirect_uri={"https://www.domain.com/login"}
483 
                    '&state={"{st=state123abc,ds=123456789}"}
484 
 
1 www 485 
                $fb = new \Facebook\Facebook([
486 
                    'app_id' => $app_id,
487 
                    'app_secret' => $app_password,
488 
                    'default_graph_version' => $app_graph_version,
489 
                ]);
490 
 
491 
                $app_url_auth =  $this->url()->fromRoute('oauth/facebook', [], ['force_canonical' => true]);
492 
                $helper = $fb->getRedirectLoginHelper();
493 
                $permissions = ['email', 'public_profile']; // Optional permissions
494 
                $facebookUrl = $helper->getLoginUrl($app_url_auth, $permissions);
495 
 
4458 efrain 496 
 
497 
 
1 www 498 
                return new JsonModel([
4458 efrain 499 
                    'success' => false,
1 www 500 
                    'data' => $facebookUrl
501 
                ]);
502 
            } catch (\Throwable $e) {
503 
                return new JsonModel([
504 
                    'success' => false,
505 
                    'data' =>  'ERROR_WE_COULD_NOT_CONNECT_TO_FACEBOOK'
506 
                ]);
6803 efrain 507 
            }*/
1 www 508 
        } else {
509 
            return new JsonModel([
510 
                'success' => false,
511 
                'data' => 'ERROR_METHOD_NOT_ALLOWED'
512 
            ]);
6803 efrain 513 
        }
1 www 514 
    }
6854 stevensc 515 
 
1 www 516 
    public function twitterAction()
517 
    {
518 
        $request = $this->getRequest();
6854 stevensc 519 
        if ($request->isGet()) {
520 
 
1 www 521 
            try {
6854 stevensc 522 
                if ($this->config['leaderslinked.runmode.sandbox']) {
523 
 
1 www 524 
                    $twitter_api_key = $this->config['leaderslinked.twitter.sandbox_api_key'];
525 
                    $twitter_api_secret = $this->config['leaderslinked.twitter.sandbox_api_secret'];
526 
                } else {
527 
                    $twitter_api_key = $this->config['leaderslinked.twitter.production_api_key'];
528 
                    $twitter_api_secret = $this->config['leaderslinked.twitter.production_api_secret'];
529 
                }
6854 stevensc 530 
 
1 www 531 
                /*
532 
                 echo '$twitter_api_key = ' . $twitter_api_key . PHP_EOL;
533 
                 echo '$twitter_api_secret = ' . $twitter_api_secret . PHP_EOL;
534 
                 exit;
535 
                 */
6854 stevensc 536 
 
1 www 537 
                //Twitter
538 
                //$redirect_url =  $this->url()->fromRoute('oauth/twitter', [], ['force_canonical' => true]);
539 
                $redirect_url = $this->config['leaderslinked.twitter.app_redirect_url'];
540 
                $twitter = new \Abraham\TwitterOAuth\TwitterOAuth($twitter_api_key, $twitter_api_secret);
6854 stevensc 541 
                $request_token =  $twitter->oauth('oauth/request_token', ['oauth_callback' => $redirect_url]);
542 
                $twitterUrl = $twitter->url('oauth/authorize', ['oauth_token' => $request_token['oauth_token']]);
543 
 
1 www 544 
                $twitterSession = new \Laminas\Session\Container('twitter');
545 
                $twitterSession->oauth_token = $request_token['oauth_token'];
546 
                $twitterSession->oauth_token_secret = $request_token['oauth_token_secret'];
6854 stevensc 547 
 
1 www 548 
                return new JsonModel([
549 
                    'success' => true,
550 
                    'data' =>  $twitterUrl
551 
                ]);
552 
            } catch (\Throwable $e) {
553 
                return new JsonModel([
554 
                    'success' => false,
555 
                    'data' =>  'ERROR_WE_COULD_NOT_CONNECT_TO_TWITTER'
556 
                ]);
557 
            }
558 
        } else {
559 
            return new JsonModel([
560 
                'success' => false,
561 
                'data' => 'ERROR_METHOD_NOT_ALLOWED'
562 
            ]);
563 
        }
564 
    }
6854 stevensc 565 
 
1 www 566 
    public function googleAction()
567 
    {
568 
        $request = $this->getRequest();
6854 stevensc 569 
        if ($request->isGet()) {
570 
 
1 www 571 
            try {
6854 stevensc 572 
 
573 
 
1 www 574 
                //Google
575 
                $google = new \Google_Client();
576 
                $google->setAuthConfig('data/google/auth-leaderslinked/apps.google.com_secreto_cliente.json');
577 
                $google->setAccessType("offline");        // offline access
6854 stevensc 578 
 
1 www 579 
                $google->setIncludeGrantedScopes(true);   // incremental auth
6854 stevensc 580 
 
1 www 581 
                $google->addScope('profile');
582 
                $google->addScope('email');
6854 stevensc 583 
 
1 www 584 
                // $redirect_url =  $this->url()->fromRoute('oauth/google', [], ['force_canonical' => true]);
585 
                $redirect_url = $this->config['leaderslinked.google_auth.app_redirect_url'];
6854 stevensc 586 
 
1 www 587 
                $google->setRedirectUri($redirect_url);
588 
                $googleUrl = $google->createAuthUrl();
6854 stevensc 589 
 
1 www 590 
                return new JsonModel([
591 
                    'success' => true,
592 
                    'data' =>  $googleUrl
593 
                ]);
594 
            } catch (\Throwable $e) {
595 
                return new JsonModel([
596 
                    'success' => false,
597 
                    'data' =>  'ERROR_WE_COULD_NOT_CONNECT_TO_GOOGLE'
598 
                ]);
599 
            }
600 
        } else {
601 
            return new JsonModel([
602 
                'success' => false,
603 
                'data' => 'ERROR_METHOD_NOT_ALLOWED'
604 
            ]);
605 
        }
606 
    }
6854 stevensc 607 
 
1 www 608 
    public function signoutAction()
609 
    {
3639 efrain 610 
        $currentUserPlugin = $this->plugin('currentUserPlugin');
611 
        $currentUser = $currentUserPlugin->getRawUser();
6854 stevensc 612 
        if ($currentUserPlugin->hasImpersonate()) {
613 
 
614 
 
3639 efrain 615 
            $userMapper = UserMapper::getInstance($this->adapter);
616 
            $userMapper->leaveImpersonate($currentUser->id);
6854 stevensc 617 
 
3639 efrain 618 
            $networkMapper = NetworkMapper::getInstance($this->adapter);
619 
            $network = $networkMapper->fetchOne($currentUser->network_id);
6854 stevensc 620 
 
621 
 
622 
            if (!$currentUser->one_time_password) {
3639 efrain 623 
                $one_time_password = Functions::generatePassword(25);
6854 stevensc 624 
 
3639 efrain 625 
                $currentUser->one_time_password = $one_time_password;
6854 stevensc 626 
 
3639 efrain 627 
                $userMapper = UserMapper::getInstance($this->adapter);
628 
                $userMapper->updateOneTimePassword($currentUser, $one_time_password);
629 
            }
6854 stevensc 630 
 
631 
 
3639 efrain 632 
            $sandbox = $this->config['leaderslinked.runmode.sandbox'];
6854 stevensc 633 
            if ($sandbox) {
3639 efrain 634 
                $salt = $this->config['leaderslinked.backend.sandbox_salt'];
635 
            } else {
636 
                $salt = $this->config['leaderslinked.backend.production_salt'];
637 
            }
6854 stevensc 638 
 
639 
 
640 
 
641 
 
3639 efrain 642 
            $rand = 1000 + mt_rand(1, 999);
643 
            $timestamp = time();
644 
            $password = md5($currentUser->one_time_password . '-' . $rand . '-' . $timestamp . '-' . $salt);
6854 stevensc 645 
 
3639 efrain 646 
            $params = [
647 
                'user_uuid' => $currentUser->uuid,
648 
                'password' => $password,
649 
                'rand' => $rand,
650 
                'time' => $timestamp,
651 
            ];
6854 stevensc 652 
 
3639 efrain 653 
            $currentUserPlugin->clearIdentity();
6854 stevensc 654 
            $url = 'https://' . $network->main_hostname . '/signin/impersonate' . '?' . http_build_query($params);
3639 efrain 655 
            return $this->redirect()->toUrl($url);
656 
        } else {
6854 stevensc 657 
 
658 
 
659 
            if ($currentUserPlugin->hasIdentity()) {
660 
 
3639 efrain 661 
                $this->logger->info('Desconexión de LeadersLinked', ['user_id' => $currentUserPlugin->getUserId(), 'ip' => Functions::getUserIP()]);
662 
            }
6854 stevensc 663 
 
3671 efrain 664 
            $currentUserPlugin->clearIdentity();
6854 stevensc 665 
 
3639 efrain 666 
            return $this->redirect()->toRoute('home');
1 www 667 
        }
668 
    }
6854 stevensc 669 
 
670 
 
1 www 671 
    public function resetPasswordAction()
672 
    {
3650 efrain 673 
        $currentNetworkPlugin = $this->plugin('currentNetworkPlugin');
3649 efrain 674 
        $currentNetwork  = $currentNetworkPlugin->getNetwork();
6854 stevensc 675 
 
676 
 
1 www 677 
        $flashMessenger = $this->plugin('FlashMessenger');
6749 efrain 678 
        $code =  Functions::sanitizeFilterString($this->params()->fromRoute('code', ''));
6854 stevensc 679 
 
1 www 680 
        $userMapper = UserMapper::getInstance($this->adapter);
3649 efrain 681 
        $user = $userMapper->fetchOneByPasswordResetKeyAndNetworkId($code, $currentNetwork->id);
6854 stevensc 682 
        if (!$user) {
1 www 683 
            $this->logger->err('Restablecer contraseña - Error código no existe', ['ip' => Functions::getUserIP()]);
6854 stevensc 684 
 
1 www 685 
            $flashMessenger->addErrorMessage('ERROR_PASSWORD_RECOVER_CODE_IS_INVALID');
686 
            return $this->redirect()->toRoute('forgot-password');
687 
        }
6854 stevensc 688 
 
689 
 
690 
 
1 www 691 
        $password_generated_on = strtotime($user->password_generated_on);
692 
        $expiry_time = $password_generated_on + $this->config['leaderslinked.security.reset_password_expired'];
693 
        if (time() > $expiry_time) {
694 
            $this->logger->err('Restablecer contraseña - Error código expirado', ['ip' => Functions::getUserIP()]);
6854 stevensc 695 
 
1 www 696 
            $flashMessenger->addErrorMessage('ERROR_PASSWORD_RECOVER_CODE_HAS_EXPIRED');
697 
            return $this->redirect()->toRoute('forgot-password');
698 
        }
6854 stevensc 699 
 
1 www 700 
        $request = $this->getRequest();
6854 stevensc 701 
        if ($request->isPost()) {
1 www 702 
            $dataPost = $request->getPost()->toArray();
6854 stevensc 703 
            if (empty($_SESSION['aes'])) {
1 www 704 
                return new JsonModel([
705 
                    'success'   => false,
706 
                    'data'      => 'ERROR_WEBSERVICE_ENCRYPTION_KEYS_NOT_FOUND'
707 
                ]);
708 
            }
709 
 
6854 stevensc 710 
            if (!empty($dataPost['password'])) {
711 
                $dataPost['password'] = CryptoJsAes::decrypt($dataPost['password'], $_SESSION['aes']);
1 www 712 
            }
6854 stevensc 713 
            if (!empty($dataPost['confirmation'])) {
714 
                $dataPost['confirmation'] = CryptoJsAes::decrypt($dataPost['confirmation'], $_SESSION['aes']);
1 www 715 
            }
6854 stevensc 716 
 
717 
 
718 
 
1 www 719 
            $form = new ResetPasswordForm($this->config);
720 
            $form->setData($dataPost);
6854 stevensc 721 
 
722 
            if ($form->isValid()) {
1 www 723 
                $data = (array) $form->getData();
724 
                $password = $data['password'];
725 
 
6854 stevensc 726 
 
1 www 727 
                $userPasswordMapper = UserPasswordMapper::getInstance($this->adapter);
728 
                $userPasswords = $userPasswordMapper->fetchAllByUserId($user->id);
729 
 
730 
                $oldPassword = false;
6854 stevensc 731 
                foreach ($userPasswords as $userPassword) {
732 
                    if (password_verify($password, $userPassword->password) || (md5($password) == $userPassword->password)) {
1 www 733 
                        $oldPassword = true;
734 
                        break;
735 
                    }
736 
                }
6854 stevensc 737 
 
738 
                if ($oldPassword) {
1 www 739 
                    $this->logger->err('Restablecer contraseña - Error contraseña ya utilizada anteriormente', ['user_id' => $user->id, 'ip' => Functions::getUserIP()]);
6854 stevensc 740 
 
1 www 741 
                    return new JsonModel([
742 
                        'success'   => false,
743 
                        'data'      => 'ERROR_PASSWORD_HAS_ALREADY_BEEN_USED'
6854 stevensc 744 
 
1 www 745 
                    ]);
746 
                } else {
747 
                    $password_hash = password_hash($password, PASSWORD_DEFAULT);
6854 stevensc 748 
 
749 
 
1 www 750 
                    $result = $userMapper->updatePassword($user, $password_hash);
6854 stevensc 751 
                    if ($result) {
752 
 
1 www 753 
                        $userPassword = new UserPassword();
754 
                        $userPassword->user_id = $user->id;
755 
                        $userPassword->password = $password_hash;
756 
                        $userPasswordMapper->insert($userPassword);
6854 stevensc 757 
 
758 
 
1 www 759 
                        $this->logger->info('Restablecer contraseña realizado', ['user_id' => $user->id, 'ip' => Functions::getUserIP()]);
6854 stevensc 760 
 
761 
 
1 www 762 
                        $flashMessenger->addSuccessMessage('LABEL_YOUR_PASSWORD_HAS_BEEN_UPDATED');
6854 stevensc 763 
 
1 www 764 
                        return new JsonModel([
765 
                            'success'   => true,
766 
                            'data'      => $this->url()->fromRoute('home')
6854 stevensc 767 
 
1 www 768 
                        ]);
769 
                    } else {
770 
                        $this->logger->err('Restablecer contraseña - Error desconocido', ['user_id' => $user->id, 'ip' => Functions::getUserIP()]);
6854 stevensc 771 
 
1 www 772 
                        return new JsonModel([
773 
                            'success'   => true,
774 
                            'data'      => 'ERROR_THERE_WAS_AN_ERROR'
6854 stevensc 775 
 
1 www 776 
                        ]);
777 
                    }
778 
                }
779 
            } else {
780 
                $form_messages =  $form->getMessages('captcha');
6854 stevensc 781 
                if (!empty($form_messages)) {
1 www 782 
                    return new JsonModel([
783 
                        'success'   => false,
784 
                        'data'      => 'ERROR_RECAPTCHA_EMPTY'
785 
                    ]);
786 
                }
6854 stevensc 787 
 
1 www 788 
                $messages = [];
6854 stevensc 789 
 
1 www 790 
                $form_messages = (array) $form->getMessages();
6854 stevensc 791 
                foreach ($form_messages  as $fieldname => $field_messages) {
1 www 792 
                    $messages[$fieldname] = array_values($field_messages);
793 
                }
6854 stevensc 794 
 
1 www 795 
                return new JsonModel([
796 
                    'success'   => false,
797 
                    'data'   => $messages
798 
                ]);
799 
            }
6854 stevensc 800 
        }
1 www 801 
 
6854 stevensc 802 
        if ($request->isGet()) {
803 
 
804 
            if (empty($_SESSION['aes'])) {
1 www 805 
                $_SESSION['aes'] = Functions::generatePassword(16);
806 
            }
6854 stevensc 807 
 
808 
            if ($this->config['leaderslinked.runmode.sandbox']) {
1 www 809 
                $site_key      = $this->config['leaderslinked.google_captcha.sandbox_site_key'];
810 
            } else {
811 
                $site_key      = $this->config['leaderslinked.google_captcha.production_site_key'];
812 
            }
6854 stevensc 813 
 
814 
 
1 www 815 
            $form = new ResetPasswordForm($this->config);
6854 stevensc 816 
 
1 www 817 
            $this->layout()->setTemplate('layout/auth.phtml');
818 
            $viewModel = new ViewModel();
819 
            $viewModel->setTemplate('leaders-linked/auth/reset-password.phtml');
820 
            $viewModel->setVariables([
821 
                'code' => $code,
822 
                'form' => $form,
823 
                'site_key' => $site_key,
824 
                'aes'       => $_SESSION['aes'],
4422 efrain 825 
                'defaultNetwork' => $currentNetwork->default,
1 www 826 
            ]);
6854 stevensc 827 
 
1 www 828 
            return $viewModel;
6854 stevensc 829 
        }
1 www 830 
 
6854 stevensc 831 
 
832 
 
1 www 833 
        return new JsonModel([
834 
            'success' => false,
835 
            'data' => 'ERROR_METHOD_NOT_ALLOWED'
836 
        ]);
837 
    }
6854 stevensc 838 
 
1 www 839 
    public function forgotPasswordAction()
840 
    {
3650 efrain 841 
        $currentNetworkPlugin = $this->plugin('currentNetworkPlugin');
3649 efrain 842 
        $currentNetwork  = $currentNetworkPlugin->getNetwork();
6854 stevensc 843 
 
844 
 
845 
 
1 www 846 
        $request = $this->getRequest();
6854 stevensc 847 
        if ($request->isPost()) {
1 www 848 
            $dataPost = $request->getPost()->toArray();
6854 stevensc 849 
            if (empty($_SESSION['aes'])) {
1 www 850 
                return new JsonModel([
851 
                    'success'   => false,
852 
                    'data'      => 'ERROR_WEBSERVICE_ENCRYPTION_KEYS_NOT_FOUND'
853 
                ]);
854 
            }
6854 stevensc 855 
 
856 
            if (!empty($dataPost['email'])) {
857 
                $dataPost['email'] = CryptoJsAes::decrypt($dataPost['email'], $_SESSION['aes']);
1 www 858 
            }
6854 stevensc 859 
 
1 www 860 
            $form = new ForgotPasswordForm($this->config);
861 
            $form->setData($dataPost);
6854 stevensc 862 
 
863 
            if ($form->isValid()) {
1 www 864 
                $dataPost = (array) $form->getData();
865 
                $email      = $dataPost['email'];
6854 stevensc 866 
 
1 www 867 
                $userMapper = UserMapper::getInstance($this->adapter);
3649 efrain 868 
                $user = $userMapper->fetchOneByEmailAndNetworkId($email, $currentNetwork->id);
6854 stevensc 869 
                if (!$user) {
1 www 870 
                    $this->logger->err('Olvidó contraseña ' . $email . '- Email no existe ', ['ip' => Functions::getUserIP()]);
6854 stevensc 871 
 
1 www 872 
                    return new JsonModel([
873 
                        'success' => false,
874 
                        'data' =>  'ERROR_EMAIL_IS_NOT_REGISTERED'
875 
                    ]);
876 
                } else {
6854 stevensc 877 
                    if ($user->status == User::STATUS_INACTIVE) {
1 www 878 
                        return new JsonModel([
879 
                            'success' => false,
880 
                            'data' =>  'ERROR_USER_IS_INACTIVE'
881 
                        ]);
882 
                    } else if ($user->email_verified == User::EMAIL_VERIFIED_NO) {
883 
                        $this->logger->err('Olvidó contraseña - Email no verificado ', ['user_id' => $user->id, 'ip' => Functions::getUserIP()]);
6854 stevensc 884 
 
1 www 885 
                        return new JsonModel([
886 
                            'success' => false,
887 
                            'data' => 'ERROR_EMAIL_HAS_NOT_BEEN_VERIFIED'
888 
                        ]);
889 
                    } else {
6854 stevensc 890 
                        $password_reset_key = md5($user->email . time());
1 www 891 
                        $userMapper->updatePasswordResetKey((int) $user->id, $password_reset_key);
6854 stevensc 892 
 
1 www 893 
                        $emailTemplateMapper = EmailTemplateMapper::getInstance($this->adapter);
3649 efrain 894 
                        $emailTemplate = $emailTemplateMapper->fetchOneByCodeAndNetworkId(EmailTemplate::CODE_RESET_PASSWORD, $currentNetwork->id);
6854 stevensc 895 
                        if ($emailTemplate) {
1 www 896 
                            $arrayCont = [
897 
                                'firstname'             => $user->first_name,
898 
                                'lastname'              => $user->last_name,
899 
                                'other_user_firstname'  => '',
900 
                                'other_user_lastname'   => '',
901 
                                'company_name'          => '',
902 
                                'group_name'            => '',
903 
                                'content'               => '',
904 
                                'code'                  => '',
905 
                                'link'                  => $this->url()->fromRoute('reset-password', ['code' => $password_reset_key], ['force_canonical' => true])
906 
                            ];
6854 stevensc 907 
 
1 www 908 
                            $email = new QueueEmail($this->adapter);
909 
                            $email->processEmailTemplate($emailTemplate, $arrayCont, $user->email, trim($user->first_name . ' ' . $user->last_name));
910 
                        }
911 
                        $flashMessenger = $this->plugin('FlashMessenger');
912 
                        $flashMessenger->addSuccessMessage('LABEL_RECOVERY_LINK_WAS_SENT_TO_YOUR_EMAIL');
6854 stevensc 913 
 
1 www 914 
                        $this->logger->info('Olvidó contraseña - Se envio link de recuperación ', ['user_id' => $user->id, 'ip' => Functions::getUserIP()]);
6854 stevensc 915 
 
1 www 916 
                        return new JsonModel([
917 
                            'success' => true,
918 
                        ]);
919 
                    }
920 
                }
921 
            } else {
6854 stevensc 922 
 
923 
 
1 www 924 
                $form_messages =  $form->getMessages('captcha');
6854 stevensc 925 
 
926 
 
927 
 
928 
                if (!empty($form_messages)) {
1 www 929 
                    return new JsonModel([
930 
                        'success'   => false,
931 
                        'data'      => 'ERROR_RECAPTCHA_EMPTY'
932 
                    ]);
933 
                }
6854 stevensc 934 
 
1 www 935 
                $messages = [];
936 
                $form_messages = (array) $form->getMessages();
6854 stevensc 937 
                foreach ($form_messages  as $fieldname => $field_messages) {
1 www 938 
                    $messages[$fieldname] = array_values($field_messages);
939 
                }
940 
 
941 
                return new JsonModel([
942 
                    'success'   => false,
6854 stevensc 943 
                    'data'      => $messages
1 www 944 
                ]);
945 
            }
6854 stevensc 946 
        }
947 
 
1 www 948 
        /*
949 
        if($request->isGet())  {
950 
            if(empty($_SESSION['aes'])) {
951 
                $_SESSION['aes'] = Functions::generatePassword(16);
952 
            }
953 
 
954 
            if($this->config['leaderslinked.runmode.sandbox']) {
955 
                $site_key      = $this->config['leaderslinked.google_captcha.sandbox_site_key'];
956 
            } else {
957 
                $site_key      = $this->config['leaderslinked.google_captcha.production_site_key'];
958 
            }
959 
 
960 
 
961 
            $form = new ForgotPasswordForm($this->config);
962 
 
963 
            $this->layout()->setTemplate('layout/auth.phtml');
964 
            $viewModel = new ViewModel();
965 
            $viewModel->setTemplate('leaders-linked/auth/signin.phtml');
966 
            $viewModel->setVariables([
967 
                'form' => $form,
968 
                'site_key' => $site_key,
969 
                'aes' => $_SESSION['aes'],
970 
            ]);
971 
 
972 
            return $viewModel ;
973 
        }
974 
        */
6854 stevensc 975 
 
976 
        if ($request->isGet()) {
977 
 
978 
            if (empty($_SESSION['aes'])) {
1 www 979 
                $_SESSION['aes'] = Functions::generatePassword(16);
980 
            }
6854 stevensc 981 
 
982 
            if ($this->config['leaderslinked.runmode.sandbox']) {
1 www 983 
                $site_key      = $this->config['leaderslinked.google_captcha.sandbox_site_key'];
984 
            } else {
985 
                $site_key      = $this->config['leaderslinked.google_captcha.production_site_key'];
986 
            }
6854 stevensc 987 
 
1 www 988 
            $email      = isset($_COOKIE['email']) ? $_COOKIE['email'] : '';
989 
            $remember   = $email ? true : false;
6854 stevensc 990 
 
1 www 991 
            $form = new SigninForm($this->config);
992 
            $form->setData([
993 
                'email'     => $email,
994 
                'remember'  => $remember,
995 
            ]);
996 
            $this->layout()->setTemplate('layout/auth.phtml');
997 
            $viewModel = new ViewModel();
998 
            $viewModel->setTemplate('leaders-linked/auth/signin.phtml');
999 
            $viewModel->setVariables([
1000 
                'form'      =>  $form,
1001 
                'site_key'  => $site_key,
1002 
                'aes'       => $_SESSION['aes'],
4422 efrain 1003 
                'defaultNetwork' => $currentNetwork->default,
1 www 1004 
            ]);
6854 stevensc 1005 
 
1006 
            return $viewModel;
1007 
        }
1008 
 
1 www 1009 
        return new JsonModel([
1010 
            'success' => false,
1011 
            'data' => 'ERROR_METHOD_NOT_ALLOWED'
1012 
        ]);
1013 
    }
6854 stevensc 1014 
 
1 www 1015 
    public function signupAction()
1016 
    {
3650 efrain 1017 
        $currentNetworkPlugin = $this->plugin('currentNetworkPlugin');
3649 efrain 1018 
        $currentNetwork  = $currentNetworkPlugin->getNetwork();
6854 stevensc 1019 
 
1020 
 
1 www 1021 
        $request = $this->getRequest();
6854 stevensc 1022 
        if ($request->isPost()) {
1 www 1023 
            $dataPost = $request->getPost()->toArray();
6854 stevensc 1024 
 
1025 
            if (empty($_SESSION['aes'])) {
1 www 1026 
                return new JsonModel([
1027 
                    'success'   => false,
1028 
                    'data'      => 'ERROR_WEBSERVICE_ENCRYPTION_KEYS_NOT_FOUND'
1029 
                ]);
1030 
            }
6854 stevensc 1031 
 
1032 
            if (!empty($dataPost['email'])) {
1033 
                $dataPost['email'] = CryptoJsAes::decrypt($dataPost['email'], $_SESSION['aes']);
1 www 1034 
            }
6854 stevensc 1035 
 
1036 
            if (!empty($dataPost['password'])) {
1037 
                $dataPost['password'] = CryptoJsAes::decrypt($dataPost['password'], $_SESSION['aes']);
1 www 1038 
            }
6854 stevensc 1039 
 
1040 
            if (!empty($dataPost['confirmation'])) {
1041 
                $dataPost['confirmation'] = CryptoJsAes::decrypt($dataPost['confirmation'], $_SESSION['aes']);
1 www 1042 
            }
6854 stevensc 1043 
 
1044 
            if (empty($dataPost['is_adult'])) {
4398 efrain 1045 
                $dataPost['is_adult'] = User::IS_ADULT_NO;
1046 
            } else {
1047 
                $dataPost['is_adult'] = $dataPost['is_adult'] == User::IS_ADULT_YES ? User::IS_ADULT_YES : User::IS_ADULT_NO;
1048 
            }
6854 stevensc 1049 
 
1050 
 
1051 
 
1 www 1052 
            $form = new SignupForm($this->config);
1053 
            $form->setData($dataPost);
6854 stevensc 1054 
 
1055 
            if ($form->isValid()) {
1 www 1056 
                $dataPost = (array) $form->getData();
6854 stevensc 1057 
 
1 www 1058 
                $email = $dataPost['email'];
6854 stevensc 1059 
 
1 www 1060 
                $userMapper = UserMapper::getInstance($this->adapter);
3649 efrain 1061 
                $user = $userMapper->fetchOneByEmailAndNetworkId($email, $currentNetwork->id);
6854 stevensc 1062 
                if ($user) {
1 www 1063 
                    $this->logger->err('Registro ' . $email . '- Email ya  existe ', ['ip' => Functions::getUserIP()]);
6854 stevensc 1064 
 
1065 
 
1066 
 
1 www 1067 
                    return new JsonModel([
1068 
                        'success' => false,
1069 
                        'data' => 'ERROR_EMAIL_IS_REGISTERED'
1070 
                    ]);
1071 
                } else {
6854 stevensc 1072 
 
6849 efrain 1073 
                    $user_share_invitation = $this->cache->getItem('user_share_invitation');
3364 efrain 1074 
 
6854 stevensc 1075 
 
1076 
                    if ($user_share_invitation) {
3364 efrain 1077 
                        $userRedirect = $userMapper->fetchOneByUuid($user_share_invitation);
6854 stevensc 1078 
                        if ($userRedirect && $userRedirect->status == User::STATUS_ACTIVE) {
3298 efrain 1079 
                            $password_hash = password_hash($dataPost['password'], PASSWORD_DEFAULT);
6854 stevensc 1080 
 
3298 efrain 1081 
                            $user = new User();
3649 efrain 1082 
                            $user->network_id           = $currentNetwork->id;
3298 efrain 1083 
                            $user->email                = $dataPost['email'];
1084 
                            $user->first_name           = $dataPost['first_name'];
1085 
                            $user->last_name            = $dataPost['last_name'];
1086 
                            $user->usertype_id          = UserType::USER;
1087 
                            $user->password             = $password_hash;
1088 
                            $user->password_updated_on  = date('Y-m-d H:i:s');
1089 
                            $user->status               = User::STATUS_ACTIVE;
1090 
                            $user->blocked              = User::BLOCKED_NO;
1091 
                            $user->email_verified       = User::EMAIL_VERIFIED_YES;
1092 
                            $user->login_attempt        = 0;
4398 efrain 1093 
                            $user->is_adult             = $dataPost['is_adult'];
4776 efrain 1094 
                            $user->request_access       = User::REQUEST_ACCESS_APPROVED;
3298 efrain 1095 
 
6854 stevensc 1096 
 
1097 
 
1098 
 
1099 
 
1100 
                            if ($userMapper->insert($user)) {
1101 
 
3298 efrain 1102 
                                $userPassword = new UserPassword();
1103 
                                $userPassword->user_id = $user->id;
1104 
                                $userPassword->password = $password_hash;
6854 stevensc 1105 
 
3298 efrain 1106 
                                $userPasswordMapper = UserPasswordMapper::getInstance($this->adapter);
1107 
                                $userPasswordMapper->insert($userPassword);
6854 stevensc 1108 
 
1109 
 
3298 efrain 1110 
                                $connectionMapper = ConnectionMapper::getInstance($this->adapter);
1111 
                                $connection = $connectionMapper->fetchOneByUserId1AndUserId2($user->id, $userRedirect->id);
6854 stevensc 1112 
 
1113 
                                if ($connection) {
1114 
 
1115 
                                    if ($connection->status != Connection::STATUS_ACCEPTED) {
3298 efrain 1116 
                                        $connectionMapper->approve($connection);
1117 
                                    }
1118 
                                } else {
1119 
                                    $connection = new Connection();
1120 
                                    $connection->request_from = $user->id;
1121 
                                    $connection->request_to = $userRedirect->id;
1122 
                                    $connection->status = Connection::STATUS_ACCEPTED;
6854 stevensc 1123 
 
3298 efrain 1124 
                                    $connectionMapper->insert($connection);
1125 
                                }
6854 stevensc 1126 
 
1127 
 
6849 efrain 1128 
                                $this->cache->removeItem('user_share_invitation');
3364 efrain 1129 
 
6854 stevensc 1130 
 
1131 
 
3364 efrain 1132 
                                $data = [
1133 
                                    'success'   => true,
1134 
                                    'data'      => $this->url()->fromRoute('home'),
1135 
                                ];
6854 stevensc 1136 
 
1137 
 
3298 efrain 1138 
                                $this->logger->info('Registro con Exito ', ['user_id' => $user->id, 'ip' => Functions::getUserIP()]);
6854 stevensc 1139 
 
3298 efrain 1140 
                                return new JsonModel($data);
1141 
                            }
1142 
                        }
1143 
                    }
1144 
 
6854 stevensc 1145 
 
1146 
 
1147 
 
1 www 1148 
                    $timestamp = time();
1149 
                    $activation_key = sha1($dataPost['email'] . uniqid() . $timestamp);
6854 stevensc 1150 
 
1 www 1151 
                    $password_hash = password_hash($dataPost['password'], PASSWORD_DEFAULT);
6854 stevensc 1152 
 
1 www 1153 
                    $user = new User();
3649 efrain 1154 
                    $user->network_id           = $currentNetwork->id;
1 www 1155 
                    $user->email                = $dataPost['email'];
1156 
                    $user->first_name           = $dataPost['first_name'];
1157 
                    $user->last_name            = $dataPost['last_name'];
1158 
                    $user->usertype_id          = UserType::USER;
1159 
                    $user->password             = $password_hash;
1160 
                    $user->password_updated_on  = date('Y-m-d H:i:s');
1161 
                    $user->activation_key       = $activation_key;
1162 
                    $user->status               = User::STATUS_INACTIVE;
1163 
                    $user->blocked              = User::BLOCKED_NO;
1164 
                    $user->email_verified       = User::EMAIL_VERIFIED_NO;
1165 
                    $user->login_attempt        = 0;
6854 stevensc 1166 
 
1167 
                    if ($currentNetwork->default == Network::DEFAULT_YES) {
4776 efrain 1168 
                        $user->request_access = User::REQUEST_ACCESS_APPROVED;
1169 
                    } else {
1170 
                        $user->request_access = User::REQUEST_ACCESS_PENDING;
1171 
                    }
6854 stevensc 1172 
 
1173 
 
1174 
 
1175 
                    if ($userMapper->insert($user)) {
1176 
 
1 www 1177 
                        $userPassword = new UserPassword();
1178 
                        $userPassword->user_id = $user->id;
1179 
                        $userPassword->password = $password_hash;
6854 stevensc 1180 
 
1 www 1181 
                        $userPasswordMapper = UserPasswordMapper::getInstance($this->adapter);
1182 
                        $userPasswordMapper->insert($userPassword);
6854 stevensc 1183 
 
1 www 1184 
                        $emailTemplateMapper = EmailTemplateMapper::getInstance($this->adapter);
3649 efrain 1185 
                        $emailTemplate = $emailTemplateMapper->fetchOneByCodeAndNetworkId(EmailTemplate::CODE_USER_REGISTER, $currentNetwork->id);
6854 stevensc 1186 
                        if ($emailTemplate) {
1 www 1187 
                            $arrayCont = [
1188 
                                'firstname'             => $user->first_name,
1189 
                                'lastname'              => $user->last_name,
1190 
                                'other_user_firstname'  => '',
1191 
                                'other_user_lastname'   => '',
1192 
                                'company_name'          => '',
1193 
                                'group_name'            => '',
1194 
                                'content'               => '',
1195 
                                'code'                  => '',
3298 efrain 1196 
                                'link'                  => $this->url()->fromRoute('activate-account', ['code' => $user->activation_key], ['force_canonical' => true])
1 www 1197 
                            ];
6854 stevensc 1198 
 
1 www 1199 
                            $email = new QueueEmail($this->adapter);
1200 
                            $email->processEmailTemplate($emailTemplate, $arrayCont, $user->email, trim($user->first_name . ' ' . $user->last_name));
1201 
                        }
1202 
                        $flashMessenger = $this->plugin('FlashMessenger');
1203 
                        $flashMessenger->addSuccessMessage('LABEL_REGISTRATION_DONE');
6854 stevensc 1204 
 
1 www 1205 
                        $this->logger->info('Registro con Exito ', ['user_id' => $user->id, 'ip' => Functions::getUserIP()]);
6854 stevensc 1206 
 
1 www 1207 
                        return new JsonModel([
1208 
                            'success' => true,
1209 
                        ]);
1210 
                    } else {
1211 
                        $this->logger->err('Registro ' . $email . '- Ha ocurrido un error ', ['ip' => Functions::getUserIP()]);
6854 stevensc 1212 
 
1 www 1213 
                        return new JsonModel([
1214 
                            'success' => false,
1215 
                            'data' => 'ERROR_THERE_WAS_AN_ERROR'
1216 
                        ]);
1217 
                    }
1218 
                }
6854 stevensc 1219 
            } else {
6826 stevensc 1220 
 
1 www 1221 
                $form_messages =  $form->getMessages('captcha');
6854 stevensc 1222 
                if (!empty($form_messages)) {
1 www 1223 
                    return new JsonModel([
1224 
                        'success'   => false,
1225 
                        'data'      => 'ERROR_RECAPTCHA_EMPTY'
1226 
                    ]);
1227 
                }
6854 stevensc 1228 
 
1 www 1229 
                $messages = [];
6854 stevensc 1230 
 
1 www 1231 
                $form_messages = (array) $form->getMessages();
6854 stevensc 1232 
                foreach ($form_messages  as $fieldname => $field_messages) {
1 www 1233 
                    $messages[$fieldname] = array_values($field_messages);
1234 
                }
6854 stevensc 1235 
 
1 www 1236 
                return new JsonModel([
1237 
                    'success'   => false,
1238 
                    'data'   => $messages
1239 
                ]);
1240 
            }
6854 stevensc 1241 
        }
1 www 1242 
        /*
1243 
        if($request->isGet())  {
1244 
            if(empty($_SESSION['aes'])) {
1245 
                $_SESSION['aes'] = Functions::generatePassword(16);
1246 
            }
1247 
 
1248 
            if($this->config['leaderslinked.runmode.sandbox']) {
1249 
                $site_key      = $this->config['leaderslinked.google_captcha.sandbox_site_key'];
1250 
            } else {
1251 
                $site_key      = $this->config['leaderslinked.google_captcha.production_site_key'];
1252 
            }
1253 
 
1254 
 
1255 
            $form = new SignupForm($this->config);
1256 
 
1257 
            $this->layout()->setTemplate('layout/auth.phtml');
1258 
            $viewModel = new ViewModel();
1259 
            $viewModel->setTemplate('leaders-linked/auth/signup.phtml');
1260 
            $viewModel->setVariables([
1261 
                'form' => $form,
1262 
                'site_key' => $site_key,
1263 
                'aes' =>  $_SESSION['aes'],
1264 
            ]);
1265 
 
1266 
            return $viewModel ;
1267 
        } */
6854 stevensc 1268 
 
1269 
 
1270 
        if ($request->isGet()) {
1271 
 
1272 
            if (empty($_SESSION['aes'])) {
1 www 1273 
                $_SESSION['aes'] = Functions::generatePassword(16);
1274 
            }
6854 stevensc 1275 
 
1276 
            if ($this->config['leaderslinked.runmode.sandbox']) {
1 www 1277 
                $site_key      = $this->config['leaderslinked.google_captcha.sandbox_site_key'];
1278 
            } else {
1279 
                $site_key      = $this->config['leaderslinked.google_captcha.production_site_key'];
1280 
            }
6854 stevensc 1281 
 
1 www 1282 
            $email      = isset($_COOKIE['email']) ? $_COOKIE['email'] : '';
1283 
            $remember   = $email ? true : false;
6854 stevensc 1284 
 
1 www 1285 
            $form = new SigninForm($this->config);
1286 
            $form->setData([
1287 
                'email'     => $email,
1288 
                'remember'  => $remember,
1289 
            ]);
1290 
            $this->layout()->setTemplate('layout/auth.phtml');
1291 
            $viewModel = new ViewModel();
1292 
            $viewModel->setTemplate('leaders-linked/auth/signin.phtml');
1293 
            $viewModel->setVariables([
1294 
                'form'      =>  $form,
1295 
                'site_key'  => $site_key,
1296 
                'aes'       => $_SESSION['aes'],
4419 efrain 1297 
                'defaultNetwork' => $currentNetwork->default,
1 www 1298 
            ]);
6854 stevensc 1299 
 
1300 
            return $viewModel;
1301 
        }
1302 
 
1 www 1303 
        return new JsonModel([
1304 
            'success' => false,
1305 
            'data' => 'ERROR_METHOD_NOT_ALLOWED'
1306 
        ]);
1307 
    }
6854 stevensc 1308 
 
1 www 1309 
    public function activateAccountAction()
1310 
    {
6854 stevensc 1311 
 
3650 efrain 1312 
        $currentNetworkPlugin = $this->plugin('currentNetworkPlugin');
3649 efrain 1313 
        $currentNetwork  = $currentNetworkPlugin->getNetwork();
6854 stevensc 1314 
 
1315 
 
1316 
 
1 www 1317 
        $request = $this->getRequest();
6854 stevensc 1318 
        if ($request->isGet()) {
6749 efrain 1319 
            $code   =  Functions::sanitizeFilterString($this->params()->fromRoute('code'));
1 www 1320 
            $userMapper = UserMapper::getInstance($this->adapter);
3759 efrain 1321 
            $user = $userMapper->fetchOneByActivationKeyAndNetworkId($code, $currentNetwork->id);
6854 stevensc 1322 
 
1 www 1323 
            $flashMessenger = $this->plugin('FlashMessenger');
6854 stevensc 1324 
 
1325 
            if ($user) {
1326 
                if (User::EMAIL_VERIFIED_YES == $user->email_verified) {
1327 
 
1 www 1328 
                    $this->logger->err('Verificación email - El código ya habia sido verificao ', ['user_id' => $user->id, 'ip' => Functions::getUserIP()]);
6854 stevensc 1329 
 
1 www 1330 
                    $flashMessenger->addErrorMessage('ERROR_EMAIL_HAS_BEEN_PREVIOUSLY_VERIFIED');
1331 
                } else {
3728 efrain 1332 
 
6854 stevensc 1333 
                    if ($userMapper->activateAccount((int) $user->id)) {
1334 
 
1 www 1335 
                        $this->logger->info('Verificación email realizada ', ['user_id' => $user->id, 'ip' => Functions::getUserIP()]);
6854 stevensc 1336 
 
1337 
 
1338 
 
6849 efrain 1339 
                        $user_share_invitation = $this->cache->getItem('user_share_invitation');
6854 stevensc 1340 
 
1341 
                        if ($user_share_invitation) {
3364 efrain 1342 
                            $userRedirect = $userMapper->fetchOneByUuid($user_share_invitation);
6854 stevensc 1343 
                            if ($userRedirect && $userRedirect->status == User::STATUS_ACTIVE && $user->id != $userRedirect->id) {
3298 efrain 1344 
                                $connectionMapper = ConnectionMapper::getInstance($this->adapter);
1345 
                                $connection = $connectionMapper->fetchOneByUserId1AndUserId2($user->id, $userRedirect->id);
6854 stevensc 1346 
 
1347 
                                if ($connection) {
1348 
 
1349 
                                    if ($connection->status != Connection::STATUS_ACCEPTED) {
3298 efrain 1350 
                                        $connectionMapper->approve($connection);
1351 
                                    }
1352 
                                } else {
1353 
                                    $connection = new Connection();
1354 
                                    $connection->request_from = $user->id;
1355 
                                    $connection->request_to = $userRedirect->id;
1356 
                                    $connection->status = Connection::STATUS_ACCEPTED;
6854 stevensc 1357 
 
3298 efrain 1358 
                                    $connectionMapper->insert($connection);
1359 
                                }
1360 
                            }
1361 
                        }
6854 stevensc 1362 
 
1363 
 
1364 
 
6849 efrain 1365 
                        $this->cache->removeItem('user_share_invitation');
6854 stevensc 1366 
 
1367 
 
1368 
                        if ($currentNetwork->default == Network::DEFAULT_YES) {
4776 efrain 1369 
                            $flashMessenger->addSuccessMessage('LABEL_YOUR_EMAIL_HAS_BEEN_VERIFIED');
1370 
                        } else {
6854 stevensc 1371 
 
4776 efrain 1372 
                            $emailTemplateMapper = EmailTemplateMapper::getInstance($this->adapter);
1373 
                            $emailTemplate = $emailTemplateMapper->fetchOneByCodeAndNetworkId(EmailTemplate::CODE_REQUEST_ACCESS_PENDING, $currentNetwork->id);
6854 stevensc 1374 
 
1375 
                            if ($emailTemplate) {
4776 efrain 1376 
                                $arrayCont = [
1377 
                                    'firstname'             => $user->first_name,
1378 
                                    'lastname'              => $user->last_name,
1379 
                                    'other_user_firstname'  => '',
1380 
                                    'other_user_lastname'   => '',
1381 
                                    'company_name'          => '',
1382 
                                    'group_name'            => '',
1383 
                                    'content'               => '',
1384 
                                    'code'                  => '',
1385 
                                    'link'                  => '',
1386 
                                ];
6854 stevensc 1387 
 
4776 efrain 1388 
                                $email = new QueueEmail($this->adapter);
1389 
                                $email->processEmailTemplate($emailTemplate, $arrayCont, $user->email, trim($user->first_name . ' ' . $user->last_name));
1390 
                            }
6854 stevensc 1391 
 
1392 
 
4776 efrain 1393 
                            $flashMessenger->addSuccessMessage('LABEL_YOUR_EMAIL_HAS_BEEN_VERIFIED_WE_ARE_VERIFYING_YOUR_INFORMATION');
1394 
                        }
1 www 1395 
                    } else {
1396 
                        $this->logger->err('Verificación email - Ha ocurrido un error ', ['user_id' => $user->id, 'ip' => Functions::getUserIP()]);
6854 stevensc 1397 
 
1 www 1398 
                        $flashMessenger->addErrorMessage('ERROR_THERE_WAS_AN_ERROR');
1399 
                    }
1400 
                }
1401 
            } else {
1402 
                $this->logger->err('Verificación email - El código no existe ', ['ip' => Functions::getUserIP()]);
6854 stevensc 1403 
 
1 www 1404 
                $flashMessenger->addErrorMessage('ERROR_ACTIVATION_CODE_IS_NOT_VALID');
1405 
            }
3729 efrain 1406 
 
6854 stevensc 1407 
            return $this->redirect()->toRoute('home');
1 www 1408 
        } else {
1409 
            $response = [
1410 
                'success' => false,
1411 
                'data' => 'ERROR_METHOD_NOT_ALLOWED'
1412 
            ];
1413 
        }
6854 stevensc 1414 
 
1 www 1415 
        return new JsonModel($response);
1416 
    }
6854 stevensc 1417 
 
1418 
 
1419 
 
1 www 1420 
    public function onroomAction()
1421 
    {
3650 efrain 1422 
        $currentNetworkPlugin = $this->plugin('currentNetworkPlugin');
3649 efrain 1423 
        $currentNetwork  = $currentNetworkPlugin->getNetwork();
6854 stevensc 1424 
 
1425 
 
1426 
 
1 www 1427 
        $request = $this->getRequest();
6854 stevensc 1428 
 
1429 
        if ($request->isPost()) {
1430 
 
1 www 1431 
            $dataPost = $request->getPost()->toArray();
1432 
 
6854 stevensc 1433 
 
1 www 1434 
            $form = new  MoodleForm();
1435 
            $form->setData($dataPost);
6854 stevensc 1436 
            if ($form->isValid()) {
1437 
 
1 www 1438 
                $dataPost   = (array) $form->getData();
1439 
                $username   = $dataPost['username'];
1440 
                $password   = $dataPost['password'];
1441 
                $timestamp  = $dataPost['timestamp'];
1442 
                $rand       = $dataPost['rand'];
1443 
                $data       = $dataPost['data'];
6854 stevensc 1444 
 
1 www 1445 
                $config_username    = $this->config['leaderslinked.moodle.username'];
1446 
                $config_password    = $this->config['leaderslinked.moodle.password'];
1447 
                $config_rsa_n       = $this->config['leaderslinked.moodle.rsa_n'];
1448 
                $config_rsa_d       = $this->config['leaderslinked.moodle.rsa_d'];
1449 
                $config_rsa_e       = $this->config['leaderslinked.moodle.rsa_e'];
6854 stevensc 1450 
 
1451 
 
1452 
 
1453 
 
1454 
                if (empty($username) || empty($password) || empty($timestamp) || empty($rand) || !is_integer($rand)) {
1455 
                    echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY1']);
1 www 1456 
                    exit;
1457 
                }
6854 stevensc 1458 
 
1459 
                if ($username != $config_username) {
1460 
                    echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY2']);
1 www 1461 
                    exit;
1462 
                }
6854 stevensc 1463 
 
1 www 1464 
                $dt = \DateTime::createFromFormat('Y-m-d\TH:i:s', $timestamp);
6854 stevensc 1465 
                if (!$dt) {
1466 
                    echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY3']);
1 www 1467 
                    exit;
1468 
                }
6854 stevensc 1469 
 
1 www 1470 
                $t0 = $dt->getTimestamp();
1471 
                $t1 = strtotime('-5 minutes');
1472 
                $t2 = strtotime('+5 minutes');
6854 stevensc 1473 
 
1474 
                if ($t0 < $t1 || $t0 > $t2) {
1 www 1475 
                    //echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY4']) ;
1476 
                    //exit;
1477 
                }
6854 stevensc 1478 
 
1479 
                if (!password_verify($username . '-' . $config_password . '-' . $rand . '-' . $timestamp, $password)) {
1480 
                    echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY5']);
1 www 1481 
                    exit;
1482 
                }
6854 stevensc 1483 
 
1484 
                if (empty($data)) {
1485 
                    echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS1']);
1 www 1486 
                    exit;
1487 
                }
6854 stevensc 1488 
 
1 www 1489 
                $data = base64_decode($data);
6854 stevensc 1490 
                if (empty($data)) {
1491 
                    echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS2']);
1 www 1492 
                    exit;
1493 
                }
6854 stevensc 1494 
 
1495 
 
1 www 1496 
                try {
1497 
                    $rsa = Rsa::getInstance();
1498 
                    $data = $rsa->decrypt($data,  $config_rsa_d,  $config_rsa_n);
6854 stevensc 1499 
                } catch (\Throwable $e) {
1500 
                    echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS3']);
1 www 1501 
                    exit;
1502 
                }
6854 stevensc 1503 
 
1 www 1504 
                $data = (array) json_decode($data);
6854 stevensc 1505 
                if (empty($data)) {
1506 
                    echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS4']);
1 www 1507 
                    exit;
1508 
                }
6854 stevensc 1509 
 
6749 efrain 1510 
                $email      = isset($data['email']) ? Functions::sanitizeFilterString($data['email']) : '';
1511 
                $first_name = isset($data['first_name']) ? Functions::sanitizeFilterString($data['first_name']) : '';
1512 
                $last_name  = isset($data['last_name']) ? Functions::sanitizeFilterString($data['last_name']) : '';
6854 stevensc 1513 
 
1514 
                if (!filter_var($email, FILTER_VALIDATE_EMAIL) || empty($first_name) || empty($last_name)) {
1515 
                    echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS5']);
1 www 1516 
                    exit;
1517 
                }
6854 stevensc 1518 
 
1 www 1519 
                $userMapper = UserMapper::getInstance($this->adapter);
1520 
                $user = $userMapper->fetchOneByEmail($email);
6854 stevensc 1521 
                if (!$user) {
1522 
 
1523 
 
1 www 1524 
                    $user = new User();
3649 efrain 1525 
                    $user->network_id = $currentNetwork->id;
1 www 1526 
                    $user->blocked = User::BLOCKED_NO;
1527 
                    $user->email = $email;
1528 
                    $user->email_verified = User::EMAIL_VERIFIED_YES;
1529 
                    $user->first_name = $first_name;
1530 
                    $user->last_name = $last_name;
1531 
                    $user->login_attempt = 0;
1532 
                    $user->password = '-NO-PASSWORD-';
1533 
                    $user->usertype_id = UserType::USER;
1534 
                    $user->status = User::STATUS_ACTIVE;
1535 
                    $user->show_in_search = User::SHOW_IN_SEARCH_YES;
6854 stevensc 1536 
 
1537 
                    if ($userMapper->insert($user)) {
1538 
                        echo json_encode(['success' => false, 'data' => $userMapper->getError()]);
1 www 1539 
                        exit;
1540 
                    }
6854 stevensc 1541 
 
1542 
 
1543 
 
1544 
 
1545 
                    $filename   = trim(isset($data['avatar_filename']) ? filter_var($data['avatar_filename'], FILTER_SANITIZE_EMAIL) : '');
6749 efrain 1546 
                    $content    = isset($data['avatar_content']) ? Functions::sanitizeFilterString($data['avatar_content']) : '';
6854 stevensc 1547 
 
1548 
                    if ($filename && $content) {
1 www 1549 
                        $source = sys_get_temp_dir() . DIRECTORY_SEPARATOR . $filename;
1550 
                        try {
1551 
                            file_put_contents($source, base64_decode($content));
1552 
                            if (file_exists($source)) {
1553 
                                $target_path = $this->config['leaderslinked.fullpath.user'] . $user->uuid;
6854 stevensc 1554 
                                list($target_width, $target_height) = explode('x', $this->config['leaderslinked.image_sizes.user_size']);
1555 
 
1 www 1556 
                                $target_filename    = 'user-' . uniqid() . '.png';
1557 
                                $crop_to_dimensions = true;
6854 stevensc 1558 
 
1559 
                                if (!Image::uploadImage($source, $target_path, $target_filename, $target_width, $target_height, $crop_to_dimensions)) {
1 www 1560 
                                    return new JsonModel([
1561 
                                        'success'   => false,
1562 
                                        'data'   =>  'ERROR_THERE_WAS_AN_ERROR'
1563 
                                    ]);
1564 
                                }
6854 stevensc 1565 
 
1 www 1566 
                                $user->image = $target_filename;
1567 
                                $userMapper->updateImage($user);
1568 
                            }
6854 stevensc 1569 
                        } catch (\Throwable $e) {
1 www 1570 
                        } finally {
6854 stevensc 1571 
                            if (file_exists($source)) {
1 www 1572 
                                unlink($source);
1573 
                            }
1574 
                        }
1575 
                    }
1576 
                }
6854 stevensc 1577 
 
1 www 1578 
                $auth = new AuthEmailAdapter($this->adapter);
1579 
                $auth->setData($email);
6854 stevensc 1580 
 
1 www 1581 
                $result = $auth->authenticate();
6854 stevensc 1582 
                if ($result->getCode() == AuthResult::SUCCESS) {
1 www 1583 
                    return $this->redirect()->toRoute('dashboard');
1584 
                } else {
1585 
                    $message = $result->getMessages()[0];
6854 stevensc 1586 
                    if (!in_array($message, [
1587 
                        'ERROR_USER_NOT_FOUND', 'ERROR_USER_EMAIL_HASNT_BEEN_VARIFIED', 'ERROR_USER_IS_BLOCKED',
1 www 1588 
                        'ERROR_USER_IS_INACTIVE', 'ERROR_ENTERED_PASS_INCORRECT_USER_IS_BLOCKED', 'ERROR_ENTERED_PASS_INCORRECT_2',
6854 stevensc 1589 
                        'ERROR_ENTERED_PASS_INCORRECT_1'
1590 
                    ])) {
1 www 1591 
                    }
6854 stevensc 1592 
 
1593 
                    switch ($message) {
1594 
                        case 'ERROR_USER_NOT_FOUND':
1 www 1595 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Email no existe', ['ip' => Functions::getUserIP()]);
1596 
                            break;
6854 stevensc 1597 
 
1598 
                        case 'ERROR_USER_EMAIL_HASNT_BEEN_VARIFIED':
1 www 1599 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Email no verificado', ['ip' => Functions::getUserIP()]);
1600 
                            break;
6854 stevensc 1601 
 
1602 
                        case 'ERROR_USER_IS_BLOCKED':
1 www 1603 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Usuario bloqueado', ['ip' => Functions::getUserIP()]);
1604 
                            break;
6854 stevensc 1605 
 
1606 
                        case 'ERROR_USER_IS_INACTIVE':
1 www 1607 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Usuario inactivo', ['ip' => Functions::getUserIP()]);
1608 
                            break;
6854 stevensc 1609 
 
1610 
 
1 www 1611 
                        case 'ERROR_ENTERED_PASS_INCORRECT_USER_IS_BLOCKED':
1612 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - 3er Intento Usuario bloqueado', ['ip' => Functions::getUserIP()]);
1613 
                            break;
6854 stevensc 1614 
 
1615 
 
1616 
                        case 'ERROR_ENTERED_PASS_INCORRECT_2':
1 www 1617 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - 1er Intento', ['ip' => Functions::getUserIP()]);
1618 
                            break;
6854 stevensc 1619 
 
1620 
 
1621 
                        case 'ERROR_ENTERED_PASS_INCORRECT_1':
1 www 1622 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - 2do Intento', ['ip' => Functions::getUserIP()]);
1623 
                            break;
6854 stevensc 1624 
 
1625 
 
1626 
                        default:
1 www 1627 
                            $message = 'ERROR_UNKNOWN';
1628 
                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Error desconocido', ['ip' => Functions::getUserIP()]);
1629 
                            break;
1630 
                    }
6854 stevensc 1631 
 
1632 
 
1633 
 
1634 
 
1635 
                    return new JsonModel([
1 www 1636 
                        'success'   => false,
1637 
                        'data'   => $message
1638 
                    ]);
1639 
                }
1640 
            } else {
1641 
                $messages = [];
6854 stevensc 1642 
 
1643 
 
1644 
 
1 www 1645 
                $form_messages = (array) $form->getMessages();
6854 stevensc 1646 
                foreach ($form_messages  as $fieldname => $field_messages) {
1647 
 
1 www 1648 
                    $messages[$fieldname] = array_values($field_messages);
1649 
                }
6854 stevensc 1650 
 
1 www 1651 
                return new JsonModel([
1652 
                    'success'   => false,
1653 
                    'data'   => $messages
1654 
                ]);
1655 
            }
1656 
        } else {
1657 
            $data = [
1658 
                'success' => false,
1659 
                'data' => 'ERROR_METHOD_NOT_ALLOWED'
1660 
            ];
6854 stevensc 1661 
 
1 www 1662 
            return new JsonModel($data);
1663 
        }
6854 stevensc 1664 
 
1 www 1665 
        return new JsonModel($data);
1666 
    }
6854 stevensc 1667 
 
210 efrain 1668 
    public function csrfAction()
1669 
    {
1670 
        $request = $this->getRequest();
6854 stevensc 1671 
        if ($request->isGet()) {
1672 
 
210 efrain 1673 
            $token = md5(uniqid('CSFR-' . mt_rand(), true));
1674 
            $_SESSION['token'] = $token;
6854 stevensc 1675 
 
1676 
 
210 efrain 1677 
            return new JsonModel([
1678 
                'success' => true,
1679 
                'data' => $token
1680 
            ]);
1681 
        } else {
1682 
            return new JsonModel([
1683 
                'success' => false,
1684 
                'data' => 'ERROR_METHOD_NOT_ALLOWED'
1685 
            ]);
1686 
        }
1687 
    }
6854 stevensc 1688 
 
3639 efrain 1689 
    public function impersonateAction()
1690 
    {
1691 
        $request = $this->getRequest();
6854 stevensc 1692 
        if ($request->isGet()) {
6749 efrain 1693 
            $user_uuid  = Functions::sanitizeFilterString($this->params()->fromQuery('user_uuid'));
3639 efrain 1694 
            $rand       = filter_var($this->params()->fromQuery('rand'), FILTER_SANITIZE_NUMBER_INT);
1695 
            $timestamp  = filter_var($this->params()->fromQuery('time'), FILTER_SANITIZE_NUMBER_INT);
6749 efrain 1696 
            $password   = Functions::sanitizeFilterString($this->params()->fromQuery('password'));
6854 stevensc 1697 
 
1698 
 
1699 
            if (!$user_uuid || !$rand || !$timestamp || !$password) {
3639 efrain 1700 
                throw new \Exception('ERROR_PARAMETERS_ARE_INVALID');
1701 
            }
6854 stevensc 1702 
 
1703 
 
3650 efrain 1704 
            $currentUserPlugin = $this->plugin('currentUserPlugin');
3639 efrain 1705 
            $currentUserPlugin->clearIdentity();
6854 stevensc 1706 
 
1707 
 
3639 efrain 1708 
            $authAdapter = new AuthImpersonateAdapter($this->adapter, $this->config);
1709 
            $authAdapter->setDataAdmin($user_uuid, $password, $timestamp, $rand);
6854 stevensc 1710 
 
3639 efrain 1711 
            $authService = new AuthenticationService();
1712 
            $result = $authService->authenticate($authAdapter);
6854 stevensc 1713 
 
1714 
 
1715 
            if ($result->getCode() == AuthResult::SUCCESS) {
3639 efrain 1716 
                return $this->redirect()->toRoute('dashboard');
1717 
            } else {
1718 
                throw new \Exception($result->getMessages()[0]);
1719 
            }
1720 
        }
6854 stevensc 1721 
 
3639 efrain 1722 
        return new JsonModel([
1723 
            'success' => false,
1724 
            'data' => 'ERROR_METHOD_NOT_ALLOWED'
1725 
        ]);
1726 
    }
1 www 1727 
}