Proyectos de Subversion LeadersLinked - Services

<?php

declare(strict_types=1);

namespace LeadersLinked\Controller;

use Nullix\CryptoJsAes\CryptoJsAes;

use GeoIp2\Database\Reader as GeoIp2Reader;

use Laminas\Authentication\AuthenticationService;

use Laminas\Authentication\Result as AuthResult;

use Laminas\Mvc\Controller\AbstractActionController;

use Laminas\View\Model\JsonModel;

use LeadersLinked\Form\Auth\SigninForm;

use LeadersLinked\Form\Auth\ResetPasswordForm;

use LeadersLinked\Form\Auth\ForgotPasswordForm;

use LeadersLinked\Form\Auth\SignupForm;

use LeadersLinked\Mapper\ConnectionMapper;

use LeadersLinked\Mapper\EmailTemplateMapper;

use LeadersLinked\Mapper\NetworkMapper;

use LeadersLinked\Mapper\UserMapper;

use LeadersLinked\Model\User;

use LeadersLinked\Model\UserType;

use LeadersLinked\Library\QueueEmail;

use LeadersLinked\Library\Functions;

use LeadersLinked\Model\EmailTemplate;

use LeadersLinked\Mapper\UserPasswordMapper;

use LeadersLinked\Model\UserBrowser;

use LeadersLinked\Mapper\UserBrowserMapper;

use LeadersLinked\Mapper\UserIpMapper;

use LeadersLinked\Model\UserIp;

use LeadersLinked\Form\Auth\MoodleForm;

use LeadersLinked\Library\Rsa;

use LeadersLinked\Library\Image;

use LeadersLinked\Authentication\AuthAdapter;

use LeadersLinked\Authentication\AuthEmailAdapter;

use LeadersLinked\Model\UserPassword;

use LeadersLinked\Model\Connection;

use LeadersLinked\Authentication\AuthImpersonateAdapter;

use LeadersLinked\Model\Network;

use LeadersLinked\Model\JwtToken;

use LeadersLinked\Mapper\JwtTokenMapper;

use Firebase\JWT\JWT;

use Firebase\JWT\Key;

class AuthController extends AbstractActionController

{

    /**

     *

     * @var \Laminas\Db\Adapter\AdapterInterface

     */

    private $adapter;

    /**

     *

     * @var \LeadersLinked\Cache\CacheInterface

     */

    private $cache;

    /**

     *

     * @var \Laminas\Log\LoggerInterface

     */

    private $logger;

    /**

     *

     * @var array

     */

    private $config;

    /**

     *

     * @var \Laminas\Mvc\I18n\Translator

     */

    private $translator;

    /**

     *

     * @param \Laminas\Db\Adapter\AdapterInterface $adapter

     * @param \LeadersLinked\Cache\CacheInterface $cache

     * @param \Laminas\Log\LoggerInterface LoggerInterface $logger

     * @param array $config

     * @param \Laminas\Mvc\I18n\Translator $translator

     */

    public function __construct($adapter, $cache, $logger, $config, $translator)

    {

        $this->adapter      = $adapter;

        $this->cache        = $cache;

        $this->logger       = $logger;

        $this->config       = $config;

        $this->translator   = $translator;

    }

    public function signinAction()

    {

        $currentNetworkPlugin = $this->plugin('currentNetworkPlugin');

        $currentNetwork = $currentNetworkPlugin->getNetwork();

        $request = $this->getRequest();

        if ($request->isPost()) {

            $currentNetworkPlugin = $this->plugin('currentNetworkPlugin');

            $currentNetwork = $currentNetworkPlugin->getNetwork();

            $jwtToken = null;

            $headers = getallheaders();

            if(!empty($headers['authorization']) || !empty($headers['Authorization'])) {

                $token = trim(empty($headers['authorization']) ? $headers['Authorization'] : $headers['authorization']);

                if (substr($token, 0, 6 ) == 'Bearer') {

                    $token = trim(substr($token, 7));

                    if(!empty($this->config['leaderslinked.jwt.key'])) {

                        $key = $this->config['leaderslinked.jwt.key'];

                        try {

                            $payload = JWT::decode($token, new Key($key, 'HS256'));

                            if(empty($payload->iss) || $payload->iss != $_SERVER['HTTP_HOST']) {

                                return new JsonModel(['success' => false, 'data' => 'Unauthorized - JWT - Wrong server',  'fatal'  => true]);

                            }

                            $uuid = empty($payload->uuid) ? '' : $payload->uuid;

                            $jwtTokenMapper = JwtTokenMapper::getInstance($this->adapter);

                            $jwtToken = $jwtTokenMapper->fetchOneByUuid($uuid);

                            if(!$jwtToken) {

                                return new JsonModel(['success' => false, 'data' => 'Unauthorized - JWT - Expired',  'fatal'  => true]);

                            }

                        } catch(\Exception $e) {

                            return new JsonModel(['success' => false, 'data' => 'Unauthorized - JWT - Wrong key',  'fatal'  => true]);

                        }

                    } else {

                        return new JsonModel(['success' => false, 'data' => 'Unauthorized - JWT - SecreteKey required',  'fatal'  => true]);

                    }

                } else {

                    return new JsonModel(['success' => false, 'data' => 'Unauthorized - JWT - Bearer required',  'fatal'  => true]);

                }

            } else {

                return new JsonModel(['success' => false, 'data' => 'Unauthorized - JWT - Required',  'fatal'  => true]);

            }

            $form = new  SigninForm($this->config);

            $dataPost = $request->getPost()->toArray();

/*

            if (empty($_SESSION['aes'])) {

                return new JsonModel([

                    'success'   => false,

                    'data'      => 'ERROR_WEBSERVICE_ENCRYPTION_KEYS_NOT_FOUND'

                ]);

            }

            if (!empty($dataPost['email'])) {

                $dataPost['email'] = CryptoJsAes::decrypt($dataPost['email'], $_SESSION['aes']);

            }

            if (!empty($dataPost['password'])) {

                $dataPost['password'] = CryptoJsAes::decrypt($dataPost['password'], $_SESSION['aes']);

            }*/

            $form->setData($dataPost);

            if ($form->isValid()) {

                $dataPost = (array) $form->getData();

                $email      = $dataPost['email'];

                $password   = $dataPost['password'];

                $remember   = $dataPost['remember'];

                $authAdapter = new AuthAdapter($this->adapter, $this->logger);

                $authAdapter->setData($email, $password, $currentNetwork->id);

                $authService = new AuthenticationService();

                $result = $authService->authenticate($authAdapter);

                if ($result->getCode() == AuthResult::SUCCESS) {

                    $userMapper = UserMapper::getInstance($this->adapter);

                    $user = $userMapper->fetchOneByEmail($email);

                    if($token) {

                        $jwtToken->user_id = $user->id;

                        $jwtTokenMapper = JwtTokenMapper::getInstance($this->adapter);

                        $jwtTokenMapper->update($jwtToken);

                    }

                    $navigator = get_browser(null, true);

                    $device_type    =  isset($navigator['device_type']) ? $navigator['device_type'] : '';

                    $platform       =  isset($navigator['platform']) ? $navigator['platform'] : '';

                    $browser        =  isset($navigator['browser']) ? $navigator['browser'] : '';

                    $istablet = isset($navigator['istablet']) ?  intval($navigator['istablet']) : 0;

                    $ismobiledevice = isset($navigator['ismobiledevice']) ? intval($navigator['ismobiledevice']) : 0;

                    $version = isset($navigator['version']) ? $navigator['version'] : '';

                    $userBrowserMapper = UserBrowserMapper::getInstance($this->adapter);

                    $userBrowser = $userBrowserMapper->fetch($user->id, $device_type, $platform, $browser);

                    if ($userBrowser) {

                        $userBrowserMapper->update($userBrowser);

                    } else {

                        $userBrowser = new UserBrowser();

                        $userBrowser->user_id           = $user->id;

                        $userBrowser->browser           = $browser;

                        $userBrowser->platform          = $platform;

                        $userBrowser->device_type       = $device_type;

                        $userBrowser->is_tablet         = $istablet;

                        $userBrowser->is_mobile_device  = $ismobiledevice;

                        $userBrowser->version           = $version;

                        $userBrowserMapper->insert($userBrowser);

                    }

                    //

                    $ip = Functions::getUserIP();

                    $ip = $ip == '127.0.0.1' ? '148.240.211.148' : $ip;

                    $userIpMapper = UserIpMapper::getInstance($this->adapter);

                    $userIp = $userIpMapper->fetch($user->id, $ip);

                    if (empty($userIp)) {

                        if ($this->config['leaderslinked.runmode.sandbox']) {

                            $filename = $this->config['leaderslinked.geoip2.production_database'];

                        } else {

                            $filename = $this->config['leaderslinked.geoip2.sandbox_database'];

                        }

                        $reader = new GeoIp2Reader($filename); //GeoIP2-City.mmdb');

                        $record = $reader->city($ip);

                        if ($record) {

                            $userIp = new UserIp();

                            $userIp->user_id = $user->id;

                            $userIp->city = !empty($record->city->name) ? Functions::utf8_decode($record->city->name) : '';

                            $userIp->state_code = !empty($record->mostSpecificSubdivision->isoCode) ? Functions::utf8_decode($record->mostSpecificSubdivision->isoCode) : '';

                            $userIp->state_name = !empty($record->mostSpecificSubdivision->name) ? Functions::utf8_decode($record->mostSpecificSubdivision->name) : '';

                            $userIp->country_code = !empty($record->country->isoCode) ? Functions::utf8_decode($record->country->isoCode) : '';

                            $userIp->country_name = !empty($record->country->name) ? Functions::utf8_decode($record->country->name) : '';

                            $userIp->ip = $ip;

                            $userIp->latitude = !empty($record->location->latitude) ? $record->location->latitude : 0;

                            $userIp->longitude = !empty($record->location->longitude) ? $record->location->longitude : 0;

                            $userIp->postal_code = !empty($record->postal->code) ? $record->postal->code : '';

                            $userIpMapper->insert($userIp);

                        }

                    } else {

                        $userIpMapper->update($userIp);

                    }

                    /*

                    if ($remember) {

                        $expired = time() + 365 * 24 * 60 * 60;

                        $cookieEmail = new SetCookie('email', $email, $expired);

                    } else {

                        $expired = time() - 7200;

                        $cookieEmail = new SetCookie('email', '', $expired);

                    }

                    $response = $this->getResponse();

                    $response->getHeaders()->addHeader($cookieEmail);

                    */

                    $this->logger->info('Ingreso a LeadersLiked', ['user_id' => $user->id, 'ip' => Functions::getUserIP()]);

                    $user_share_invitation = $this->cache->getItem('user_share_invitation');

                    if ($user_share_invitation) {

                        $userRedirect = $userMapper->fetchOneByUuid($user_share_invitation);

                        if ($userRedirect && $userRedirect->status == User::STATUS_ACTIVE && $user->id != $userRedirect->id) {

                            $connectionMapper = ConnectionMapper::getInstance($this->adapter);

                            $connection = $connectionMapper->fetchOneByUserId1AndUserId2($user->id, $userRedirect->id);

                            if ($connection) {

                                if ($connection->status != Connection::STATUS_ACCEPTED) {

                                    $connectionMapper->approve($connection);

                                }

                            } else {

                                $connection = new Connection();

                                $connection->request_from = $user->id;

                                $connection->request_to = $userRedirect->id;

                                $connection->status = Connection::STATUS_ACCEPTED;

                                $connectionMapper->insert($connection);

                            }

                        }

                    }

                    $data = [

                        'success'   => true,

                        'data'      => $this->url()->fromRoute('dashboard'),

                    ];

                    $this->cache->removeItem('user_share_invitation');

                } else {

                    $message = $result->getMessages()[0];

                    if (!in_array($message, [

                        'ERROR_USER_NOT_FOUND', 'ERROR_USER_EMAIL_HASNT_BEEN_VARIFIED', 'ERROR_USER_IS_BLOCKED',

                        'ERROR_USER_IS_INACTIVE', 'ERROR_ENTERED_PASS_INCORRECT_USER_IS_BLOCKED', 'ERROR_ENTERED_PASS_INCORRECT_2',

                        'ERROR_ENTERED_PASS_INCORRECT_1', 'ERROR_USER_REQUEST_ACCESS_IS_PENDING', 'ERROR_USER_REQUEST_ACCESS_IS_REJECTED'

                    ])) {

                    }

                    switch ($message) {

                        case 'ERROR_USER_NOT_FOUND':

                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Email no existe', ['ip' => Functions::getUserIP()]);

                            break;

                        case 'ERROR_USER_EMAIL_HASNT_BEEN_VARIFIED':

                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Email no verificado', ['ip' => Functions::getUserIP()]);

                            break;

                        case 'ERROR_USER_IS_BLOCKED':

                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Usuario bloqueado', ['ip' => Functions::getUserIP()]);

                            break;

                        case 'ERROR_USER_IS_INACTIVE':

                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Usuario inactivo', ['ip' => Functions::getUserIP()]);

                            break;

                        case 'ERROR_ENTERED_PASS_INCORRECT_USER_IS_BLOCKED':

                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - 3er Intento Usuario bloqueado', ['ip' => Functions::getUserIP()]);

                            break;

                        case 'ERROR_ENTERED_PASS_INCORRECT_2':

                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - 1er Intento', ['ip' => Functions::getUserIP()]);

                            break;

                        case 'ERROR_ENTERED_PASS_INCORRECT_1':

                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - 2do Intento', ['ip' => Functions::getUserIP()]);

                            break;

                        case 'ERROR_USER_REQUEST_ACCESS_IS_PENDING':

                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Falta verificar que pertence a la Red Privada', ['ip' => Functions::getUserIP()]);

                            break;

                        case  'ERROR_USER_REQUEST_ACCESS_IS_REJECTED':

                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Rechazado por no pertence a la Red Privada', ['ip' => Functions::getUserIP()]);

                            break;

                        default:

                            $message = 'ERROR_UNKNOWN';

                            $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Error desconocido', ['ip' => Functions::getUserIP()]);

                            break;

                    }

                    $data = [

                        'success'   => false,

                        'data'   => $message

                    ];

                }

                return new JsonModel($data);

            } else {

                $messages = [];

                $form_messages = (array) $form->getMessages();

                foreach ($form_messages  as $fieldname => $field_messages) {

                    $messages[$fieldname] = array_values($field_messages);

                }

                return new JsonModel([

                    'success'   => false,

                    'data'   => $messages

                ]);

            }

        } else if ($request->isGet()) {

            $jwtToken = null;

            $headers = getallheaders();

            if(!empty($headers['authorization']) || !empty($headers['Authorization'])) {

                $token = trim(empty($headers['authorization']) ? $headers['Authorization'] : $headers['authorization']);

                if (substr($token, 0, 6 ) == 'Bearer') {

                    $token = trim(substr($token, 7));

                    if(!empty($this->config['leaderslinked.jwt.key'])) {

                        $key = $this->config['leaderslinked.jwt.key'];

                        try {

                            $payload = JWT::decode($token, new Key($key, 'HS256'));

                            if(empty($payload->iss) || $payload->iss != $_SERVER['HTTP_HOST']) {

                                return new JsonModel(['success' => false, 'data' => 'Unauthorized - JWT - Wrong server',  'fatal'  => true]);

                            }

                            $uuid = empty($payload->uuid) ? '' : $payload->uuid;

                            $jwtTokenMapper = JwtTokenMapper::getInstance($this->adapter);

                            $jwtToken = $jwtTokenMapper->fetchOneByUuid($uuid);

                        } catch(\Exception $e) {

                            //Token invalido

                        }

                    }

                }

            }

            if(!$jwtToken) {

                $aes = Functions::generatePassword(16);

                $jwtToken = new JwtToken();

                $jwtToken->aes = $aes;

                $jwtTokenMapper = JwtTokenMapper::getInstance($this->adapter);

                if($jwtTokenMapper->insert($jwtToken)) {

                    $jwtToken = $jwtTokenMapper->fetchOne($jwtToken->id);

                }

                $token = '';

                if(!empty($this->config['leaderslinked.jwt.key'])) {

                    $issuedAt   = new \DateTimeImmutable();

                    $expire     = $issuedAt->modify('+24 hours')->getTimestamp();

                    $serverName = $_SERVER['HTTP_HOST'];

                    $payload = [

                        'iat'  => $issuedAt->getTimestamp(),

                        'iss'  => $serverName,

                        'nbf'  => $issuedAt->getTimestamp(),

                        'exp'  => $expire,

                        'uuid' => $jwtToken->uuid,

                    ];

                    $key = $this->config['leaderslinked.jwt.key'];

                    $token = JWT::encode($payload, $key, 'HS256');

                }

            }

            if ($this->config['leaderslinked.runmode.sandbox']) {

                $site_key      = $this->config['leaderslinked.google_captcha.sandbox_site_key'];

            } else {

                $site_key      = $this->config['leaderslinked.google_captcha.production_site_key'];

            }

            $access_usign_social_networks = $this->config['leaderslinked.runmode.access_usign_social_networks'];

            $sandbox = $this->config['leaderslinked.runmode.sandbox'];

            if ($sandbox) {

                $google_map_key  = $this->config['leaderslinked.google_map.sandbox_api_key'];

            } else {

                $google_map_key  = $this->config['leaderslinked.google_map.production_api_key'];

            }

            $data = [

                'google_map_key'                => $google_map_key,

                'email'                         => '',

                'remember'                      => false,

                'site_key'                      => $site_key,

                'theme_id'                      => $currentNetwork->theme_id,

                'aes'                           => $aes,

                'jwt'                           => $token,

                'defaultNetwork'                => $currentNetwork->default,

                'access_usign_social_networks'  => $access_usign_social_networks && $currentNetwork->default == Network::DEFAULT_YES ? 'y' : 'n',

                'logo_url'                      => $this->url()->fromRoute('storage-network', ['type' => 'logo'],['force_canonical' => true]),

                'navbar_url'                    => $this->url()->fromRoute('storage-network', ['type' => 'navbar'],['force_canonical' => true]),

                'favico_url'                    => $this->url()->fromRoute('storage-network', ['type' => 'favico'],['force_canonical' => true]),

                'intro'                         => $currentNetwork->intro ? $currentNetwork->intro : '',

                'is_logged_in'                  => $jwtToken->user_id ? true : false,

            ];

            $data = [

                'success' => true,

                'data' =>  $data

            ];

        } else {

            $data = [

                'success' => false,

                'data' => 'ERROR_METHOD_NOT_ALLOWED'

            ];

            return new JsonModel($data);

        }

        return new JsonModel($data);

    }

    public function facebookAction()

    {

        $request = $this->getRequest();

        if ($request->isGet()) {

            /*

          //  try {

                $app_id = $this->config['leaderslinked.facebook.app_id'];

                $app_password = $this->config['leaderslinked.facebook.app_password'];

                $app_graph_version = $this->config['leaderslinked.facebook.app_graph_version'];

                //$app_url_auth = $this->config['leaderslinked.facebook.app_url_auth'];

                //$redirect_url = $this->config['leaderslinked.facebook.app_redirect_url'];

                [facebook]

                app_id=343770226993130

                app_password=028ee729090fd591e50a17a786666c12

                app_graph_version=v17

                app_redirect_url=https://leaderslinked.com/oauth/facebook

                https://www.facebook.com/v17.0/dialog/oauth?client_id=343770226993130&redirect_uri= https://dev.leaderslinked.com/oauth/facebook&state=AE12345678

                $s = 'https://www.facebook.com/v17.0/dialog/oauth' .

                    '?client_id='

                    '&redirect_uri={"https://www.domain.com/login"}

                    '&state={"{st=state123abc,ds=123456789}"}

                $fb = new \Facebook\Facebook([

                    'app_id' => $app_id,

                    'app_secret' => $app_password,

                    'default_graph_version' => $app_graph_version,

                ]);

                $app_url_auth =  $this->url()->fromRoute('oauth/facebook', [], ['force_canonical' => true]);

                $helper = $fb->getRedirectLoginHelper();

                $permissions = ['email', 'public_profile']; // Optional permissions

                $facebookUrl = $helper->getLoginUrl($app_url_auth, $permissions);

                return new JsonModel([

                    'success' => false,

                    'data' => $facebookUrl

                ]);

            } catch (\Throwable $e) {

                return new JsonModel([

                    'success' => false,

                    'data' =>  'ERROR_WE_COULD_NOT_CONNECT_TO_FACEBOOK'

                ]);

            }*/

        } else {

            return new JsonModel([

                'success' => false,

                'data' => 'ERROR_METHOD_NOT_ALLOWED'

            ]);

        }

    }

    public function twitterAction()

    {

        $request = $this->getRequest();

        if ($request->isGet()) {

            try {

                if ($this->config['leaderslinked.runmode.sandbox']) {

                    $twitter_api_key = $this->config['leaderslinked.twitter.sandbox_api_key'];

                    $twitter_api_secret = $this->config['leaderslinked.twitter.sandbox_api_secret'];

                } else {

                    $twitter_api_key = $this->config['leaderslinked.twitter.production_api_key'];

                    $twitter_api_secret = $this->config['leaderslinked.twitter.production_api_secret'];

                }

                /*

                 echo '$twitter_api_key = ' . $twitter_api_key . PHP_EOL;

                 echo '$twitter_api_secret = ' . $twitter_api_secret . PHP_EOL;

                 exit;

                 */

                //Twitter

                //$redirect_url =  $this->url()->fromRoute('oauth/twitter', [], ['force_canonical' => true]);

                $redirect_url = $this->config['leaderslinked.twitter.app_redirect_url'];

                $twitter = new \Abraham\TwitterOAuth\TwitterOAuth($twitter_api_key, $twitter_api_secret);

                $request_token =  $twitter->oauth('oauth/request_token', ['oauth_callback' => $redirect_url]);

                $twitterUrl = $twitter->url('oauth/authorize', ['oauth_token' => $request_token['oauth_token']]);

                $twitterSession = new \Laminas\Session\Container('twitter');

                $twitterSession->oauth_token = $request_token['oauth_token'];

                $twitterSession->oauth_token_secret = $request_token['oauth_token_secret'];

                return new JsonModel([

                    'success' => true,

                    'data' =>  $twitterUrl

                ]);

            } catch (\Throwable $e) {

                return new JsonModel([

                    'success' => false,

                    'data' =>  'ERROR_WE_COULD_NOT_CONNECT_TO_TWITTER'

                ]);

            }

        } else {

            return new JsonModel([

                'success' => false,

                'data' => 'ERROR_METHOD_NOT_ALLOWED'

            ]);

        }

    }

    public function googleAction()

    {

        $request = $this->getRequest();

        if ($request->isGet()) {

            try {

                //Google

                $google = new \Google_Client();

                $google->setAuthConfig('data/google/auth-leaderslinked/apps.google.com_secreto_cliente.json');

                $google->setAccessType("offline");        // offline access

                $google->setIncludeGrantedScopes(true);   // incremental auth

                $google->addScope('profile');

                $google->addScope('email');

                // $redirect_url =  $this->url()->fromRoute('oauth/google', [], ['force_canonical' => true]);

                $redirect_url = $this->config['leaderslinked.google_auth.app_redirect_url'];

                $google->setRedirectUri($redirect_url);

                $googleUrl = $google->createAuthUrl();

                return new JsonModel([

                    'success' => true,

                    'data' =>  $googleUrl

                ]);

            } catch (\Throwable $e) {

                return new JsonModel([

                    'success' => false,

                    'data' =>  'ERROR_WE_COULD_NOT_CONNECT_TO_GOOGLE'

                ]);

            }

        } else {

            return new JsonModel([

                'success' => false,

                'data' => 'ERROR_METHOD_NOT_ALLOWED'

            ]);

        }

    }

    public function signoutAction()

    {

        $currentUserPlugin = $this->plugin('currentUserPlugin');

        $currentUser = $currentUserPlugin->getRawUser();

        if ($currentUserPlugin->hasImpersonate()) {

            $userMapper = UserMapper::getInstance($this->adapter);

            $userMapper->leaveImpersonate($currentUser->id);

            $networkMapper = NetworkMapper::getInstance($this->adapter);

            $network = $networkMapper->fetchOne($currentUser->network_id);

            if (!$currentUser->one_time_password) {

                $one_time_password = Functions::generatePassword(25);

                $currentUser->one_time_password = $one_time_password;

                $userMapper = UserMapper::getInstance($this->adapter);

                $userMapper->updateOneTimePassword($currentUser, $one_time_password);

            }

            $sandbox = $this->config['leaderslinked.runmode.sandbox'];

            if ($sandbox) {

                $salt = $this->config['leaderslinked.backend.sandbox_salt'];

            } else {

                $salt = $this->config['leaderslinked.backend.production_salt'];

            }

            $rand = 1000 + mt_rand(1, 999);

            $timestamp = time();

            $password = md5($currentUser->one_time_password . '-' . $rand . '-' . $timestamp . '-' . $salt);

            $params = [

                'user_uuid' => $currentUser->uuid,

                'password' => $password,

                'rand' => $rand,

                'time' => $timestamp,

            ];

            $currentUserPlugin->clearIdentity();

            return new JsonModel([

                'success'   => true,

                'data'      => [

                    'message' => 'LABEL_SIGNOUT_SUCCESSFULLY',

                    'url' => 'https://' . $network->main_hostname . '/signin/impersonate' . '?' . http_build_query($params)

                ],

            ]);

           // $url = 'https://' . $network->main_hostname . '/signin/impersonate' . '?' . http_build_query($params);

           // return $this->redirect()->toUrl($url);

        } else {

            if ($currentUserPlugin->hasIdentity()) {

                $this->logger->info('Desconexión de LeadersLinked', ['user_id' => $currentUserPlugin->getUserId(), 'ip' => Functions::getUserIP()]);

            }

            $currentUserPlugin->clearIdentity();

           // return $this->redirect()->toRoute('home');

            return new JsonModel([

                'success'   => true,

                'data'      => [

                    'message' => 'LABEL_SIGNOUT_SUCCESSFULLY',

                    'url' => '',

                ],

            ]);

        }

    }

    public function resetPasswordAction()

    {

        $currentNetworkPlugin = $this->plugin('currentNetworkPlugin');

        $currentNetwork  = $currentNetworkPlugin->getNetwork();

        $flashMessenger = $this->plugin('FlashMessenger');

        $code =  Functions::sanitizeFilterString($this->params()->fromRoute('code', ''));

        $userMapper = UserMapper::getInstance($this->adapter);

        $user = $userMapper->fetchOneByPasswordResetKeyAndNetworkId($code, $currentNetwork->id);

        if (!$user) {

            $this->logger->err('Restablecer contraseña - Error código no existe', ['ip' => Functions::getUserIP()]);

            return new JsonModel([

                'success'   => true,

                'data'      => 'ERROR_PASSWORD_RECOVER_CODE_IS_INVALID'

            ]);

        }

        $password_generated_on = strtotime($user->password_generated_on);

        $expiry_time = $password_generated_on + $this->config['leaderslinked.security.reset_password_expired'];

        if (time() > $expiry_time) {

            $this->logger->err('Restablecer contraseña - Error código expirado', ['ip' => Functions::getUserIP()]);

            return new JsonModel([

                'success'   => true,

                'data'      => 'ERROR_PASSWORD_RECOVER_CODE_HAS_EXPIRED'

            ]);

        }

        $request = $this->getRequest();

        if ($request->isPost()) {

            $dataPost = $request->getPost()->toArray();

            if (empty($_SESSION['aes'])) {

                return new JsonModel([

                    'success'   => false,

                    'data'      => 'ERROR_WEBSERVICE_ENCRYPTION_KEYS_NOT_FOUND'

                ]);

            }

            if (!empty($dataPost['password'])) {

                $dataPost['password'] = CryptoJsAes::decrypt($dataPost['password'], $_SESSION['aes']);

            }

            if (!empty($dataPost['confirmation'])) {

                $dataPost['confirmation'] = CryptoJsAes::decrypt($dataPost['confirmation'], $_SESSION['aes']);

            }

            $form = new ResetPasswordForm($this->config);

            $form->setData($dataPost);

            if ($form->isValid()) {

                $data = (array) $form->getData();

                $password = $data['password'];

                $userPasswordMapper = UserPasswordMapper::getInstance($this->adapter);

                $userPasswords = $userPasswordMapper->fetchAllByUserId($user->id);

                $oldPassword = false;

                foreach ($userPasswords as $userPassword) {

                    if (password_verify($password, $userPassword->password) || (md5($password) == $userPassword->password)) {

                        $oldPassword = true;

                        break;

                    }

                }

                if ($oldPassword) {

                    $this->logger->err('Restablecer contraseña - Error contraseña ya utilizada anteriormente', ['user_id' => $user->id, 'ip' => Functions::getUserIP()]);

                    return new JsonModel([

                        'success'   => false,

                        'data'      => 'ERROR_PASSWORD_HAS_ALREADY_BEEN_USED'

                    ]);

                } else {

                    $password_hash = password_hash($password, PASSWORD_DEFAULT);

                    $result = $userMapper->updatePassword($user, $password_hash);

                    if ($result) {

                        $userPassword = new UserPassword();

                        $userPassword->user_id = $user->id;

                        $userPassword->password = $password_hash;

                        $userPasswordMapper->insert($userPassword);

                        $this->logger->info('Restablecer contraseña realizado', ['user_id' => $user->id, 'ip' => Functions::getUserIP()]);

                        $flashMessenger->addSuccessMessage('LABEL_YOUR_PASSWORD_HAS_BEEN_UPDATED');

                        return new JsonModel([

                            'success'   => true,

                            'data'      => [

                                'message' => 'LABEL_YOUR_PASSWORD_HAS_BEEN_UPDATED',

                                'redirect' => $this->url()->fromRoute('home'),

                            ],

                        ]);

                    } else {

                        $this->logger->err('Restablecer contraseña - Error desconocido', ['user_id' => $user->id, 'ip' => Functions::getUserIP()]);

                        return new JsonModel([

                            'success'   => false,

                            'data'      => 'ERROR_THERE_WAS_AN_ERROR'

                        ]);

                    }

                }

            } else {

                $form_messages =  $form->getMessages('captcha');

                if (!empty($form_messages)) {

                    return new JsonModel([

                        'success'   => false,

                        'data'      => 'ERROR_RECAPTCHA_EMPTY'

                    ]);

                }

                $messages = [];

                $form_messages = (array) $form->getMessages();

                foreach ($form_messages  as $fieldname => $field_messages) {

                    $messages[$fieldname] = array_values($field_messages);

                }

                return new JsonModel([

                    'success'   => false,

                    'data'   => $messages

                ]);

            }

        } else if ($request->isGet()) {

            if (empty($_SESSION['aes'])) {

                $_SESSION['aes'] = Functions::generatePassword(16);

            }

            if ($this->config['leaderslinked.runmode.sandbox']) {

                $site_key      = $this->config['leaderslinked.google_captcha.sandbox_site_key'];

            } else {

                $site_key      = $this->config['leaderslinked.google_captcha.production_site_key'];

            }

            return new JsonModel([

                'code' => $code,

                'site_key' => $site_key,

                'aes'       => $_SESSION['aes'],

                'defaultNetwork' => $currentNetwork->default,

            ]);

        }

        return new JsonModel([

            'success' => false,

            'data' => 'ERROR_METHOD_NOT_ALLOWED'

        ]);

    }

    public function forgotPasswordAction()

    {

        $currentNetworkPlugin = $this->plugin('currentNetworkPlugin');

        $currentNetwork  = $currentNetworkPlugin->getNetwork();

        $request = $this->getRequest();

        if ($request->isPost()) {

            $dataPost = $request->getPost()->toArray();

            if (empty($_SESSION['aes'])) {

                return new JsonModel([

                    'success'   => false,

                    'data'      => 'ERROR_WEBSERVICE_ENCRYPTION_KEYS_NOT_FOUND'

                ]);

            }

            if (!empty($dataPost['email'])) {

                $dataPost['email'] = CryptoJsAes::decrypt($dataPost['email'], $_SESSION['aes']);

            }

            $form = new ForgotPasswordForm($this->config);

            $form->setData($dataPost);

            if ($form->isValid()) {

                $dataPost = (array) $form->getData();

                $email      = $dataPost['email'];

                $userMapper = UserMapper::getInstance($this->adapter);

                $user = $userMapper->fetchOneByEmailAndNetworkId($email, $currentNetwork->id);

                if (!$user) {

                    $this->logger->err('Olvidó contraseña ' . $email . '- Email no existe ', ['ip' => Functions::getUserIP()]);

                    return new JsonModel([

                        'success' => false,

                        'data' =>  'ERROR_EMAIL_IS_NOT_REGISTERED'

                    ]);

                } else {

                    if ($user->status == User::STATUS_INACTIVE) {

                        return new JsonModel([

                            'success' => false,

                            'data' =>  'ERROR_USER_IS_INACTIVE'

                        ]);

                    } else if ($user->email_verified == User::EMAIL_VERIFIED_NO) {

                        $this->logger->err('Olvidó contraseña - Email no verificado ', ['user_id' => $user->id, 'ip' => Functions::getUserIP()]);

                        return new JsonModel([

                            'success' => false,

                            'data' => 'ERROR_EMAIL_HAS_NOT_BEEN_VERIFIED'

                        ]);

                    } else {

                        $password_reset_key = md5($user->email . time());

                        $userMapper->updatePasswordResetKey((int) $user->id, $password_reset_key);

                        $emailTemplateMapper = EmailTemplateMapper::getInstance($this->adapter);

                        $emailTemplate = $emailTemplateMapper->fetchOneByCodeAndNetworkId(EmailTemplate::CODE_RESET_PASSWORD, $currentNetwork->id);

                        if ($emailTemplate) {

                            $arrayCont = [

                                'firstname'             => $user->first_name,

                                'lastname'              => $user->last_name,

                                'other_user_firstname'  => '',

                                'other_user_lastname'   => '',

                                'company_name'          => '',

                                'group_name'            => '',

                                'content'               => '',

                                'code'                  => '',

                                'link'                  => $this->url()->fromRoute('reset-password', ['code' => $password_reset_key], ['force_canonical' => true])

                            ];