WebSVN – LeadersLinked - Services – Diff – /module/LeadersLinked/src/Controller/AuthController.php

 use Laminas\Authentication\AuthenticationService;
 use Laminas\Authentication\Result as AuthResult;
 use Laminas\Mvc\Controller\AbstractActionController;
 use Laminas\View\Model\JsonModel;
 use LeadersLinked\Form\Auth\SigninForm;
 use LeadersLinked\Form\Auth\ResetPasswordForm;
 use LeadersLinked\Form\Auth\ForgotPasswordForm;
 use LeadersLinked\Mapper\JwtTokenMapper;
 use Firebase\JWT\JWT;
 use Firebase\JWT\Key;
 use LeadersLinked\Form\Auth\SigninDebugForm;
 use LeadersLinked\Library\ExternalCredentials;
-//use LeadersLinked\Library\Storage;
+use LeadersLinked\Library\Storage;
-class AuthController extends AbstractActionController
 class AuthController extends AbstractActionController
     const _USE_S3 = false;
                 $replace_main = false;
             } else {
                 $replace_main = true;
+            }
-            if(self::_USE_S3) {
-            /*
                 $storage = Storage::getInstance($this->config);
                 $path = $storage->getPathNetwork();
                 if($currentNetwork->favico) {
                     $favico_url = $storage->getGenericImage($path, $currentNetwork->uuid, $currentNetwork->favico);
                 } else {
-                    $favico_url = '';
-                }*/
-            } else {
-                $logo_url = $this->url()->fromRoute('storage-network', ['type' => 'logo'],['force_canonical' => true]);
-                if($replace_main) {
-                    $logo_url = str_replace($currentNetwork->main_hostname, $currentNetwork->service_hostname, $logo_url);
+                    $favico_url = '';
-                }
+                }
-                if($currentNetwork->alternative_hostname) {
-                    $logo_url = str_replace($currentNetwork->alternative_hostname, $currentNetwork->service_hostname, $logo_url);
-                }
-                $navbar_url = $this->url()->fromRoute('storage-network', ['type' => 'navbar'],['force_canonical' => true]);
-                if($replace_main) {
-                    $navbar_url = str_replace($currentNetwork->main_hostname, $currentNetwork->service_hostname, $navbar_url);
-                }
-                if($currentNetwork->alternative_hostname) {
-                    $navbar_url = str_replace($currentNetwork->alternative_hostname, $currentNetwork->service_hostname, $navbar_url);
-                }
-                $favico_url= $this->url()->fromRoute('storage-network', ['type' => 'favico'],['force_canonical' => true]);
-                if($replace_main) {
-                    $favico_url = str_replace($currentNetwork->main_hostname, $currentNetwork->service_hostname, $favico_url);
-                }
-                if($currentNetwork->alternative_hostname) {
-                    $favico_url = str_replace($currentNetwork->alternative_hostname, $currentNetwork->service_hostname, $favico_url);
-                }
-            }
             ];
+        }
         return new JsonModel($response);
-    }
+    }
     public function onroomAction()
+    {
         $currentNetworkPlugin = $this->plugin('currentNetworkPlugin');
         $currentNetwork  = $currentNetworkPlugin->getNetwork();
         $request = $this->getRequest();
         if ($request->isPost()) {
             $dataPost = $request->getPost()->toArray();
             $form = new  MoodleForm();
             $form->setData($dataPost);
             if ($form->isValid()) {
                 $dataPost   = (array) $form->getData();
                 $username   = $dataPost['username'];
                 $password   = $dataPost['password'];
                 $timestamp  = $dataPost['timestamp'];
                 $rand       = $dataPost['rand'];
                 $data       = $dataPost['data'];
                 $config_username    = $this->config['leaderslinked.moodle.username'];
                 $config_password    = $this->config['leaderslinked.moodle.password'];
                 $config_rsa_n       = $this->config['leaderslinked.moodle.rsa_n'];
                 $config_rsa_d       = $this->config['leaderslinked.moodle.rsa_d'];
                 $config_rsa_e       = $this->config['leaderslinked.moodle.rsa_e'];
                 if (empty($username) || empty($password) || empty($timestamp) || empty($rand) || !is_integer($rand)) {
                     echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY1']);
                     exit;
                 }
                 if ($username != $config_username) {
                     echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY2']);
                     exit;
                 }
                 $dt = \DateTime::createFromFormat('Y-m-d\TH:i:s', $timestamp);
                 if (!$dt) {
                     echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY3']);
                     exit;
                 }
                 $t0 = $dt->getTimestamp();
                 $t1 = strtotime('-5 minutes');
                 $t2 = strtotime('+5 minutes');
                 if ($t0 < $t1 || $t0 > $t2) {
                     //echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY4']) ;
                     //exit;
                 }
                 if (!password_verify($username . '-' . $config_password . '-' . $rand . '-' . $timestamp, $password)) {
                     echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY5']);
                     exit;
                 }
                 if (empty($data)) {
                     echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS1']);
                     exit;
                 }
                 $data = base64_decode($data);
                 if (empty($data)) {
                     echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS2']);
                     exit;
                 }
                 try {
                     $rsa = Rsa::getInstance();
                     $data = $rsa->decrypt($data,  $config_rsa_d,  $config_rsa_n);
                 } catch (\Throwable $e) {
                     echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS3']);
                     exit;
                 }
                 $data = (array) json_decode($data);
                 if (empty($data)) {
                     echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS4']);
                     exit;
                 }
                 $email      = isset($data['email']) ? Functions::sanitizeFilterString($data['email']) : '';
                 $first_name = isset($data['first_name']) ? Functions::sanitizeFilterString($data['first_name']) : '';
                 $last_name  = isset($data['last_name']) ? Functions::sanitizeFilterString($data['last_name']) : '';
                 if (!filter_var($email, FILTER_VALIDATE_EMAIL) || empty($first_name) || empty($last_name)) {
                     echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS5']);
                     exit;
                 }
                 $userMapper = UserMapper::getInstance($this->adapter);
                 $user = $userMapper->fetchOneByEmail($email);
                 if (!$user) {
                     $user = new User();
                     $user->network_id = $currentNetwork->id;
                     $user->blocked = User::BLOCKED_NO;
                     $user->email = $email;
                     $user->login_attempt = 0;
                     $user->password = '-NO-PASSWORD-';
                     $user->usertype_id = UserType::USER;
                     $user->status = User::STATUS_ACTIVE;
                     $user->show_in_search = User::SHOW_IN_SEARCH_YES;
                     if ($userMapper->insert($user)) {
                         echo json_encode(['success' => false, 'data' => $userMapper->getError()]);
                         exit;
+                    }
                     $user = $userMapper->fetchOne($user->id);
                     $filename   = trim(isset($data['avatar_filename']) ? filter_var($data['avatar_filename'], FILTER_SANITIZE_EMAIL) : '');
                     $content    = isset($data['avatar_content']) ? Functions::sanitizeFilterString($data['avatar_content']) : '';
                     if ($filename && $content) {
                         $source = sys_get_temp_dir() . DIRECTORY_SEPARATOR . $filename;
                         try {
                             file_put_contents($source, base64_decode($content));
                             if (file_exists($source)) {
                                 list($target_width, $target_height) = explode('x', $this->config['leaderslinked.image_sizes.user_size']);
                                 $target_filename    = 'user-' . uniqid() . '.png';
                                 $crop_to_dimensions = true;
                                 $image = Image::getInstance($this->config);
                                 $target_path    = $image->getStorage()->getPathUser();
                                 $unlink_source  = true;
                                 if (!$image->uploadImageChangeSize($source, $target_path, $user->uuid, $target_filename, $target_width, $target_height, $crop_to_dimensions, $unlink_source)) {
                                     return new JsonModel([
                                         'success'   => false,
                                         'data'   =>  'ERROR_THERE_WAS_AN_ERROR'
                                     ]);
+                                }
                                 $user->image = $target_filename;
                                 unlink($source);
+                            }
+                        }
+                    }
+                }
                 $auth = new AuthEmailAdapter($this->adapter);
                 $auth->setData($email);
                 $result = $auth->authenticate();
                 if ($result->getCode() == AuthResult::SUCCESS) {
                     return $this->redirect()->toRoute('dashboard');
                 } else {
                     $message = $result->getMessages()[0];
                         'ERROR_USER_NOT_FOUND', 'ERROR_USER_EMAIL_HASNT_BEEN_VARIFIED', 'ERROR_USER_IS_BLOCKED',
                         'ERROR_USER_IS_INACTIVE', 'ERROR_ENTERED_PASS_INCORRECT_USER_IS_BLOCKED', 'ERROR_ENTERED_PASS_INCORRECT_2',
                         'ERROR_ENTERED_PASS_INCORRECT_1'
                     ])) {
+                    }
                     switch ($message) {
                         case 'ERROR_USER_NOT_FOUND':
                             $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Email no existe', ['ip' => Functions::getUserIP()]);
                             break;
                         case 'ERROR_USER_EMAIL_HASNT_BEEN_VARIFIED':
                             $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Email no verificado', ['ip' => Functions::getUserIP()]);
                             break;
                         case 'ERROR_USER_IS_BLOCKED':
                             $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Usuario bloqueado', ['ip' => Functions::getUserIP()]);
                             break;
                         case 'ERROR_USER_IS_INACTIVE':
                             $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Usuario inactivo', ['ip' => Functions::getUserIP()]);
                             break;
                         case 'ERROR_ENTERED_PASS_INCORRECT_USER_IS_BLOCKED':
                             $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - 3er Intento Usuario bloqueado', ['ip' => Functions::getUserIP()]);
                             break;
                         case 'ERROR_ENTERED_PASS_INCORRECT_2':
                             $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - 1er Intento', ['ip' => Functions::getUserIP()]);
                             break;
                         case 'ERROR_ENTERED_PASS_INCORRECT_1':
                             $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - 2do Intento', ['ip' => Functions::getUserIP()]);
                             break;
                         default:
                             $message = 'ERROR_UNKNOWN';
                             $this->logger->err('Error de ingreso a LeadersLinked de ' . $email . ' - Error desconocido', ['ip' => Functions::getUserIP()]);
                             break;
+                    }
                     return new JsonModel([
                         'success'   => false,
                         'data'   => $message
                     ]);
+                }
             } else {
                 $messages = [];
+                $form_messages = (array) $form->getMessages();
+                foreach ($form_messages  as $fieldname => $field_messages) {
+                    $messages[$fieldname] = array_values($field_messages);
+                }
+                return new JsonModel([
+                    'success'   => false,
+                    'data'   => $messages
+                ]);
+            }
+        } else {
+            $data = [
+                'success' => false,
+                'data' => 'ERROR_METHOD_NOT_ALLOWED'
+            ];
+            return new JsonModel($data);
+        }
+        return new JsonModel($data);
+    }
+    public function cesamsAction()
+    {
+        $currentNetworkPlugin = $this->plugin('currentNetworkPlugin');
+        $currentNetwork  = $currentNetworkPlugin->getNetwork();
+        $request = $this->getRequest();
+        if ($request->isPost()) {
+            $dataPost = $request->getPost()->toArray();
+            $form = new  MoodleForm();
+            $form->setData($dataPost);
+            if ($form->isValid()) {
+                $dataPost   = (array) $form->getData();
+                $username   = $dataPost['username'];
+                $password   = $dataPost['password'];
+                $timestamp  = $dataPost['timestamp'];
+                $rand       = $dataPost['rand'];
+                $data       = $dataPost['data'];
+                $config_username    = $this->config['leaderslinked.moodle.username'];
+                $config_password    = $this->config['leaderslinked.moodle.password'];
+                $config_rsa_n       = $this->config['leaderslinked.moodle.rsa_n'];
+                $config_rsa_d       = $this->config['leaderslinked.moodle.rsa_d'];
+                $config_rsa_e       = $this->config['leaderslinked.moodle.rsa_e'];
+                if (empty($username) || empty($password) || empty($timestamp) || empty($rand) || !is_integer($rand)) {
+                    echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY1']);
+                    exit;
+                }
+                if ($username != $config_username) {
+                    echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY2']);
+                    exit;
+                }
+                $dt = \DateTime::createFromFormat('Y-m-d\TH:i:s', $timestamp);
+                if (!$dt) {
+                    echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY3']);
+                    exit;
+                }
+                $dt = \DateTimeImmutable::createFromFormat('Y-m-d\TH:i:s',  gmdate('Y-m-d\TH:i:s'));
+                $dtMax = $dt->add(\DateInterval::createFromDateString('5 minutes'));
+                $dtMin = $dt->sub(\DateInterval::createFromDateString('5 minutes'));
+                $t0 = $dt->getTimestamp();
+                $t1 = $dtMin->getTimestamp();
+                $t2 = $dtMax->getTimestamp();
+                if ($t0 < $t1 || $t0 > $t2) {
+                    //echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY4']) ;
+                    //exit;
+                }
+                if (!password_verify($username . '-' . $config_password . '-' . $rand . '-' . $timestamp, $password)) {
+                    echo json_encode(['success' => false, 'data' => 'ERROR_SECURITY5']);
+                    exit;
+                }
+                if (empty($data)) {
+                    echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS1']);
+                    exit;
+                }
+                $data = base64_decode($data);
+                if (empty($data)) {
+                    echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS2']);
+                    exit;
+                }
+                try {
+                    $rsa = Rsa::getInstance();
+                    $data = $rsa->decrypt($data,  $config_rsa_d,  $config_rsa_n);
+                } catch (\Throwable $e) {
+                    echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS3']);
+                    exit;
+                }
+                $data = (array) json_decode($data);
+                if (empty($data)) {
+                    echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS4']);
+                    exit;
+                }
+                $email      = isset($data['email']) ? Functions::sanitizeFilterString($data['email']) : '';
+                $first_name = isset($data['first_name']) ? Functions::sanitizeFilterString($data['first_name']) : '';
+                $last_name  = isset($data['last_name']) ? Functions::sanitizeFilterString($data['last_name']) : '';
+                $password   = isset($data['password']) ? Functions::sanitizeFilterString($data['password']) : '';
+                if (!filter_var($email, FILTER_VALIDATE_EMAIL) || empty($first_name) || empty($last_name) || empty($password)) {
+                    echo json_encode(['success' => false, 'data' => 'ERROR_PARAMETERS5']);
+                    exit;
+                }
+                $userMapper = UserMapper::getInstance($this->adapter);
+                $user = $userMapper->fetchOneByEmail($email);
+                if (!$user) {
+                    $user = new User();
+                    $user->network_id = $currentNetwork->id;
+                    $user->blocked = User::BLOCKED_NO;
+                    $user->email = $email;
+                    $user->email_verified = User::EMAIL_VERIFIED_YES;
+                    $user->first_name = $first_name;
+                    $user->last_name = $last_name;
+                    $user->login_attempt = 0;
+                    $user->password = password_hash($password, PASSWORD_DEFAULT);
+                    $user->usertype_id = UserType::USER;
+                    $user->status = User::STATUS_ACTIVE;
+                    $user->show_in_search = User::SHOW_IN_SEARCH_YES;
+                    if ($userMapper->insert($user)) {
+                        echo json_encode(['success' => false, 'data' => $userMapper->getError()]);
+                        exit;
+                    }
+                    $user = $userMapper->fetchOne($user->id);
+                    $userPassword = new UserPassword();
+                    $userPassword->user_id = $user->id;
+                    $userPassword->password = password_hash($password, PASSWORD_DEFAULT);
+                    $userPasswordMapper = UserPasswordMapper::getInstance($this->adapter);
+                    $userPasswordMapper->insert($userPassword);
+                    $userDefaultForConnection = $userMapper->fetchOneDefaultForConnection();
+                    if($userDefaultForConnection) {
+                        $connection = new Connection();
+                        $connection->request_from = $userDefaultForConnection->id;
+                        $connection->request_to = $user->id;
+                        $connection->status = Connection::STATUS_ACCEPTED;
+                        $connectionMapper = ConnectionMapper::getInstance($this->adapter);
+                        $connectionMapper->insert($connection);
+                    }
+                }
+                return new JsonModel([
+                    'success'   => true,
+                    'data'   => $user->uuid
+                ]);
+            } else {
+                $messages = [];

Proyectos de Subversion LeadersLinked - Services

(root)/module/LeadersLinked/src/Controller/AuthController.php – Rev 280 → 283