Proyectos de Subversion LeadersLinked - Antes de SPA

<?php
declare(strict_types=1);

namespace LeadersLinked\Controller;

use Laminas\Authentication\AuthenticationService;
use Laminas\Authentication\Result as AuthResult;
use Laminas\Db\Adapter\AdapterInterface;
use Laminas\Cache\Storage\Adapter\AbstractAdapter;
use Laminas\Http\Header\SetCookie;
use Laminas\Mvc\Controller\AbstractActionController;
use Laminas\Log\LoggerInterface;
use Laminas\View\Model\ViewModel;
use Laminas\View\Model\JsonModel;
use GeoIp2\Database\Reader As GeoIp2Reader;
use LeadersLinked\Form\Auth\SigninForm;
use LeadersLinked\Form\Auth\ResetPasswordForm;
use LeadersLinked\Form\Auth\ForgotPasswordForm;
use LeadersLinked\Form\Auth\SignupForm;
use LeadersLinked\Authentication\AuthAdapter;
use LeadersLinked\Mapper\UserMapper;
use LeadersLinked\Mapper\EmailTemplateMapper;
use LeadersLinked\Model\User;
use LeadersLinked\Model\UserType;
use LeadersLinked\Library\QueueEmail;
use LeadersLinked\Library\Functions;
use LeadersLinked\Model\EmailTemplate;
use LeadersLinked\Mapper\UserPasswordMapper;
use LeadersLinked\Model\UserBrowser;
use LeadersLinked\Mapper\UserBrowserMapper;
use LeadersLinked\Mapper\UserIpMapper;
use LeadersLinked\Model\UserIp;
use LeadersLinked\Form\Auth\MoodleForm;
use LeadersLinked\Library\Rsa;
use LeadersLinked\Library\Image;
use LeadersLinked\Authentication\AuthEmailAdapter;
use Nullix\CryptoJsAes\CryptoJsAes;
use LeadersLinked\Model\UserPassword;
use LeadersLinked\Mapper\CompanyMapper;
use LeadersLinked\Mapper\CompanyUserMapper;
use LeadersLinked\Model\CompanyUser;
use LeadersLinked\Mapper\NetworkMapper;
use LeadersLinked\Model\CalendarEvent;
use LeadersLinked\Mapper\PerformanceEvaluationTestMapper;


class BackendController extends AbstractActionController
{
    /**
     *
     * @var AdapterInterface
     */
    private $adapter;
    
    
    /**
     *
     * @var AbstractAdapter
     */
    private $cache;
    
    /**
     *
     * @var  LoggerInterface
     */
    private $logger;

    /**
     * 
     * @var array
     */
    private $config;
    
    
    
    
    /**
     * 
     * @param AdapterInterface $adapter
     * @param AbstractAdapter $cache
     * @param LoggerInterface $logger
     * @param array $config
     */
    public function __construct($adapter, $cache , $logger, $config)
    {
        $this->adapter      = $adapter;
        $this->cache        = $cache;
        $this->logger       = $logger;
        $this->config       = $config;
    }
    
    public function signinAdminAction()
    {

        $request = $this->getRequest();
        if($request->isGet()) {
            $currentUserPlugin = $this->plugin('currentUserPlugin');
            $currentUser = $currentUserPlugin->getUser();
            
            $networkMapper = NetworkMapper::getInstance($this->adapter);
            $network = $networkMapper->fetchOne($currentUser->network_id);
            
            $sandbox = $this->config['leaderslinked.runmode.sandbox'];
            if($sandbox) {
                $salt = $this->config['leaderslinked.backend.sandbox_salt'];
            } else {
                $salt = $this->config['leaderslinked.backend.production_salt'];
            }
            
            
            
            if($currentUser && $currentUser->usertype_id == UserType::ADMIN) {
                
                
                if(!$currentUser->one_time_password) {
                    $one_time_password = Functions::generatePassword(25);
                    
                    $currentUser->one_time_password = $one_time_password;
                    
                    $userMapper = UserMapper::getInstance($this->adapter);
                    $userMapper->updateOneTimePassword($currentUser, $one_time_password);
                }
                

                
                
                $rand = 1000 + mt_rand(1, 999);
                $timestamp = time();
                $password = md5($currentUser->one_time_password . '-' . $rand . '-' . $timestamp . '-' . $salt);
                
                $params = [
                    'user_uuid' => $currentUser->uuid,
                    'password' => $password,
                    'rand' => $rand,
                    'time' => $timestamp,
                ];
                
                $link_admin = 'https://'. $network->admin_hostname . '/signin-admin' . '?' . http_build_query($params);
            } else {
                $link_admin = '';
            }
            
            $data = [
                'success' => true,
                'data' => $link_admin
            ];
            
            return new JsonModel($data);
            
        } else {
            $data = [
                'success' => false,
                'data' => 'ERROR_METHOD_NOT_ALLOWED'
            ];
            
            return new JsonModel($data);
        }

        return new JsonModel($data);

        
    }
    
    public function signinCompanyAction()
    {

        $request = $this->getRequest();
        if($request->isGet()) {
           
            
            $currentUserPlugin = $this->plugin('currentUserPlugin');
            $currentUser = $currentUserPlugin->getUser();

            
            $id = $this->params()->fromRoute('id');
            $type = $this->params()->fromRoute('type');
            $relational = $this->params()->fromRoute('relational');
            
            
            
            $companyMapper = CompanyMapper::getInstance($this->adapter);
            $company = $companyMapper->fetchOneByUuid($id);
            
            $link_admin = '';
            
            if($company) {
                
                $networkMapper = NetworkMapper::getInstance($this->adapter);
                $network = $networkMapper->fetchOne($currentUser->network_id);
                
                $companyUserMapper = CompanyUserMapper::getInstance($this->adapter);
                $companyUser = $companyUserMapper->fetchOneByCompanyIdAndUserId($company->id, $currentUser->id);
                
                if($companyUser && $companyUser->status == CompanyUser::STATUS_ACCEPTED && $companyUser->backend == CompanyUser::BACKEND_YES ) {
                    if(!$currentUser->one_time_password) {
                        $one_time_password = Functions::generatePassword(25);
                        
                        $currentUser->one_time_password = $one_time_password;
                        
                        $userMapper = UserMapper::getInstance($this->adapter);
                        $userMapper->updateOneTimePassword($currentUser, $one_time_password);
                    }
                    
                    
                    $sandbox = $this->config['leaderslinked.runmode.sandbox'];
                    if($sandbox) {
                        $salt = $this->config['leaderslinked.backend.sandbox_salt'];
                    } else {
                        $salt = $this->config['leaderslinked.backend.production_salt'];
                    }
                
                    if($relational && $type) {
                        switch($type) 
                        {
                            case CalendarEvent::TYPE_PERFORMANCE_EVALUATION : 
                                $performanceEvaluationTestMapper = PerformanceEvaluationTestMapper::getInstance($this->adapter);
                                $performanceEvaluationTest = $performanceEvaluationTestMapper->fetchOneByUuid($relational);
                                if($performanceEvaluationTest) {
                                    
                                    
                                    if($performanceEvaluationTest->employee_id != $currentUser->id 
                                        && $performanceEvaluationTest->supervisor_id != $currentUser->id) {
                                            $data = [
                                                'success' => false,
                                                'data' => 'ERROR_BACKEND_COMPANY_RELATIONAL_RECORD_UNAUTHORIZE'
                                            ];
                                            
                                            return new JsonModel($data);
                                    }

                                } else {
                                    $data = [
                                        'success' => false,
                                        'data' => 'ERROR_BACKEND_COMPANY_RELATIONAL_RECORD_NOT_FOUND'
                                    ];
                                    
                                    return new JsonModel($data);
                                }
                                
                                break;
                                
                            default :
                                $data = [
                                    'success' => false,
                                    'data' => 'ERROR_BACKEND_COMPANY_RELATIONAL_TYPE_NOT_FOUND'
                                ];
                                
                                return new JsonModel($data);
                                
                              
                        }
                    }
                    
                    
                    $timestamp = date('Y-m-d\TH:i:s');
                    $rand = 1000 + rand(1, 8999);
     
                    
                    
                    $rand = 1000 + mt_rand(1, 999);
                    $timestamp = time();
                    $password = md5($currentUser->one_time_password . '-' . $rand . '-' . $timestamp . '-' . $salt);
                    
                    $params = [
                        'user_uuid' => $currentUser->uuid,
                        'password' => $password,
                        'rand' => $rand,
                        'time' => $timestamp,
                        'company_uuid' => $company->uuid
                       
                    ];
                    
                    if($relational && $type) {
                        $params['relational'] = $relational;
                        $params['type'] = $type;
                    }
                    
                    $link_admin = 'https://'. $network->admin_hostname . '/signin-company' . '?' . http_build_query($params);
               }
                
                
                
            }
            
           
            
            $data = [
                'success' => true,
                'data' => $link_admin
            ];
            
            return new JsonModel($data);
            
        } else {
            $data = [
                'success' => false,
                'data' => 'ERROR_METHOD_NOT_ALLOWED'
            ];
            
            return new JsonModel($data);
        }
        
        return new JsonModel($data);
        
        
    }
    
   
}