Initial commit - Physiotherapy Clinic Management System
This commit is contained in:
Deploy committed
commit
dbb326f2cc
300 files changed
+144285
No files matched your search
@@ -0,0 +1,130 @@
|
||||
<?php
|
||||
|
||||
namespace App\Http\Controllers\Auth;
|
||||
|
||||
use App\Http\Controllers\Controller;
|
||||
use Illuminate\Http\Request;
|
||||
use Illuminate\Support\Facades\Hash;
|
||||
|
||||
class TwoFactorController extends Controller
|
||||
{
|
||||
public function show()
|
||||
{
|
||||
$user = auth()->user();
|
||||
return view('auth.2fa-settings', compact('user'));
|
||||
}
|
||||
|
||||
public function enable(Request $request)
|
||||
{
|
||||
$user = auth()->user();
|
||||
|
||||
if ($user->isTwoFactorEnabled()) {
|
||||
return redirect()->route('2fa.settings')->with('error', __('auth.2fa_already_enabled'));
|
||||
}
|
||||
|
||||
$google2fa = app('pragmarx.google2fa');
|
||||
$secret = $google2fa->generateSecretKey();
|
||||
|
||||
$qrCodeUrl = $google2fa->getQRCodeUrl(
|
||||
config('app.name'),
|
||||
$user->email,
|
||||
$secret
|
||||
);
|
||||
|
||||
// Generate QR code image
|
||||
$qrCode = \BaconQrCode\Renderer\ImageRenderer::class;
|
||||
$writer = new \BaconQrCode\Writer(new \BaconQrCode\Renderer\ImageRenderer(
|
||||
new \BaconQrCode\Renderer\RendererStyle\RendererStyle(400),
|
||||
new \BaconQrCode\Renderer\Image\SvgImageBackEnd()
|
||||
));
|
||||
$qrCodeSvg = $writer->writeString($qrCodeUrl);
|
||||
|
||||
session(['2fa_secret' => $secret]);
|
||||
|
||||
return view('auth.2fa-enable', [
|
||||
'secret' => $secret,
|
||||
'qrCodeSvg' => $qrCodeSvg,
|
||||
]);
|
||||
}
|
||||
|
||||
public function confirm(Request $request)
|
||||
{
|
||||
$request->validate([
|
||||
'code' => ['required', 'string', 'size:6'],
|
||||
]);
|
||||
|
||||
$user = auth()->user();
|
||||
$secret = session('2fa_secret');
|
||||
|
||||
if (!$secret) {
|
||||
return redirect()->route('2fa.settings')->with('error', __('auth.2fa_session_expired'));
|
||||
}
|
||||
|
||||
$google2fa = app('pragmarx.google2fa');
|
||||
|
||||
if (!$google2fa->verifyKey($secret, $request->code)) {
|
||||
return back()->withErrors(['code' => __('auth.2fa_invalid')]);
|
||||
}
|
||||
|
||||
// Enable 2FA
|
||||
$recoveryCodes = $user->generateRecoveryCodes();
|
||||
$user->setTwoFactorSecret($secret);
|
||||
$user->two_factor_recovery_codes = $recoveryCodes;
|
||||
$user->two_factor_enabled = true;
|
||||
$user->save();
|
||||
|
||||
session()->forget('2fa_secret');
|
||||
|
||||
return view('auth.2fa-recovery-codes', [
|
||||
'recoveryCodes' => $recoveryCodes,
|
||||
]);
|
||||
}
|
||||
|
||||
public function disable(Request $request)
|
||||
{
|
||||
$request->validate([
|
||||
'password' => ['required', 'string'],
|
||||
'code' => ['nullable', 'string'],
|
||||
]);
|
||||
|
||||
$user = auth()->user();
|
||||
|
||||
if (!Hash::check($request->password, $user->password)) {
|
||||
return back()->withErrors(['password' => __('auth.password_incorrect')]);
|
||||
}
|
||||
|
||||
// If 2FA is enabled, verify the code
|
||||
if ($user->isTwoFactorEnabled() && $request->code) {
|
||||
$google2fa = app('pragmarx.google2fa');
|
||||
$secret = $user->getTwoFactorSecret();
|
||||
|
||||
if (!$google2fa->verifyKey($secret, $request->code)) {
|
||||
return back()->withErrors(['code' => __('auth.2fa_invalid')]);
|
||||
}
|
||||
}
|
||||
|
||||
$user->two_factor_secret = null;
|
||||
$user->two_factor_recovery_codes = null;
|
||||
$user->two_factor_enabled = false;
|
||||
$user->save();
|
||||
|
||||
return redirect()->route('2fa.settings')->with('success', __('auth.2fa_disabled'));
|
||||
}
|
||||
|
||||
public function regenerateRecoveryCodes()
|
||||
{
|
||||
$user = auth()->user();
|
||||
|
||||
if (!$user->isTwoFactorEnabled()) {
|
||||
return redirect()->route('2fa.settings')->with('error', __('auth.2fa_not_enabled'));
|
||||
}
|
||||
|
||||
$recoveryCodes = $user->generateRecoveryCodes();
|
||||
$user->two_factor_recovery_codes = $recoveryCodes;
|
||||
$user->save();
|
||||
|
||||
return view('auth.2fa-recovery-codes', [
|
||||
'recoveryCodes' => $recoveryCodes,
|
||||
]);
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,130 @@
|
||||
<?php
|
||||
|
||||
namespace App\Http\Controllers\Auth;
|
||||
|
||||
use App\Http\Controllers\Controller;
|
||||
use App\Models\User;
|
||||
use Illuminate\Http\Request;
|
||||
use Illuminate\Support\Facades\Auth;
|
||||
use Illuminate\Support\Facades\Hash;
|
||||
use Illuminate\Validation\Rules\Password;
|
||||
|
||||
class WebAuthController extends Controller
|
||||
{
|
||||
public function showLogin()
|
||||
{
|
||||
return view('auth.login');
|
||||
}
|
||||
|
||||
public function login(Request $request)
|
||||
{
|
||||
$credentials = $request->validate([
|
||||
'email' => ['required', 'email'],
|
||||
'password' => ['required'],
|
||||
]);
|
||||
|
||||
$user = User::where('email', $request->email)->first();
|
||||
|
||||
if (!$user || !Hash::check($request->password, $user->password)) {
|
||||
return back()->withErrors([
|
||||
'email' => __('auth.failed'),
|
||||
])->onlyInput('email');
|
||||
}
|
||||
|
||||
// Check if 2FA is enabled
|
||||
if ($user->isTwoFactorEnabled()) {
|
||||
session(['2fa_user_id' => $user->id]);
|
||||
return redirect()->route('2fa.challenge');
|
||||
}
|
||||
|
||||
Auth::login($user, $request->boolean('remember'));
|
||||
$request->session()->regenerate();
|
||||
|
||||
return redirect()->intended(route('dashboard'));
|
||||
}
|
||||
|
||||
public function show2FAChallenge()
|
||||
{
|
||||
if (!session()->has('2fa_user_id')) {
|
||||
return redirect()->route('login');
|
||||
}
|
||||
return view('auth.2fa-challenge');
|
||||
}
|
||||
|
||||
public function verify2FA(Request $request)
|
||||
{
|
||||
$request->validate([
|
||||
'code' => ['required', 'string'],
|
||||
]);
|
||||
|
||||
$userId = session('2fa_user_id');
|
||||
if (!$userId) {
|
||||
return redirect()->route('login');
|
||||
}
|
||||
|
||||
$user = User::find($userId);
|
||||
if (!$user) {
|
||||
return redirect()->route('login');
|
||||
}
|
||||
|
||||
$google2fa = app('pragmarx.google2fa');
|
||||
$secret = $user->getTwoFactorSecret();
|
||||
|
||||
$valid = $google2fa->verifyKey($secret, $request->code);
|
||||
|
||||
// Check recovery codes if TOTP is invalid
|
||||
if (!$valid) {
|
||||
$recoveryCodes = $user->two_factor_recovery_codes ?? [];
|
||||
if (in_array($request->code, $recoveryCodes)) {
|
||||
$user->two_factor_recovery_codes = array_diff($recoveryCodes, [$request->code]);
|
||||
$user->save();
|
||||
$valid = true;
|
||||
}
|
||||
}
|
||||
|
||||
if (!$valid) {
|
||||
return back()->withErrors([
|
||||
'code' => __('auth.2fa_invalid'),
|
||||
]);
|
||||
}
|
||||
|
||||
session()->forget('2fa_user_id');
|
||||
Auth::login($user);
|
||||
$request->session()->regenerate();
|
||||
|
||||
return redirect()->intended(route('dashboard'));
|
||||
}
|
||||
|
||||
public function showRegister()
|
||||
{
|
||||
return view('auth.register');
|
||||
}
|
||||
|
||||
public function register(Request $request)
|
||||
{
|
||||
$request->validate([
|
||||
'name' => ['required', 'string', 'max:255'],
|
||||
'email' => ['required', 'string', 'email', 'max:255', 'unique:users'],
|
||||
'password' => ['required', 'confirmed', Password::defaults()],
|
||||
]);
|
||||
|
||||
$user = User::create([
|
||||
'name' => $request->name,
|
||||
'email' => $request->email,
|
||||
'password' => Hash::make($request->password),
|
||||
]);
|
||||
|
||||
Auth::login($user);
|
||||
|
||||
return redirect()->route('dashboard');
|
||||
}
|
||||
|
||||
public function logout(Request $request)
|
||||
{
|
||||
Auth::logout();
|
||||
$request->session()->invalidate();
|
||||
$request->session()->regenerateToken();
|
||||
|
||||
return redirect()->route('login');
|
||||
}
|
||||
}
|
||||
Reference in new issue
Block a user