mirror of
https://github.com/Bubka/2FAuth.git
synced 2024-12-05 23:01:12 +01:00
316 lines
10 KiB
PHP
316 lines
10 KiB
PHP
<?php
|
|
|
|
namespace App\Api\v1\Controllers;
|
|
|
|
use App\Api\v1\Requests\TwoFAccountBatchRequest;
|
|
use App\Api\v1\Requests\TwoFAccountDynamicRequest;
|
|
use App\Api\v1\Requests\TwoFAccountImportRequest;
|
|
use App\Api\v1\Requests\TwoFAccountReorderRequest;
|
|
use App\Api\v1\Requests\TwoFAccountStoreRequest;
|
|
use App\Api\v1\Requests\TwoFAccountUpdateRequest;
|
|
use App\Api\v1\Requests\TwoFAccountUriRequest;
|
|
use App\Api\v1\Resources\TwoFAccountCollection;
|
|
use App\Api\v1\Resources\TwoFAccountExportCollection;
|
|
use App\Api\v1\Resources\TwoFAccountReadResource;
|
|
use App\Api\v1\Resources\TwoFAccountStoreResource;
|
|
use App\Facades\Groups;
|
|
use App\Facades\TwoFAccounts;
|
|
use App\Helpers\Helpers;
|
|
use App\Http\Controllers\Controller;
|
|
use App\Models\TwoFAccount;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Arr;
|
|
|
|
class TwoFAccountController extends Controller
|
|
{
|
|
/**
|
|
* List all resources
|
|
*
|
|
* @return \App\Api\v1\Resources\TwoFAccountCollection
|
|
*/
|
|
public function index(Request $request)
|
|
{
|
|
return new TwoFAccountCollection($request->user()->twofaccounts->sortBy('order_column'));
|
|
}
|
|
|
|
/**
|
|
* Display a 2FA account
|
|
*
|
|
* @param \App\Models\TwoFAccount $twofaccount
|
|
* @return \App\Api\v1\Resources\TwoFAccountReadResource
|
|
*/
|
|
public function show(TwoFAccount $twofaccount)
|
|
{
|
|
$this->authorize('view', $twofaccount);
|
|
|
|
return new TwoFAccountReadResource($twofaccount);
|
|
}
|
|
|
|
/**
|
|
* Store a new 2FA account
|
|
*
|
|
* @param \App\Api\v1\Requests\TwoFAccountDynamicRequest $request
|
|
* @return \Illuminate\Http\JsonResponse
|
|
*/
|
|
public function store(TwoFAccountDynamicRequest $request)
|
|
{
|
|
$this->authorize('create', TwoFAccount::class);
|
|
|
|
// Two possible cases :
|
|
// - The most common case, an URI is provided by the QuickForm, thanks to a QR code live scan or file upload
|
|
// -> We use that URI to define the account
|
|
// - The advanced form has been used and all individual parameters
|
|
// -> We use the parameters array to define the account
|
|
|
|
$validated = $request->validated();
|
|
$twofaccount = new TwoFAccount;
|
|
|
|
if (Arr::has($validated, 'uri')) {
|
|
$twofaccount->fillWithURI($validated['uri'], Arr::get($validated, 'custom_otp') === TwoFAccount::STEAM_TOTP);
|
|
} else {
|
|
$twofaccount->fillWithOtpParameters($validated);
|
|
}
|
|
$request->user()->twofaccounts()->save($twofaccount);
|
|
|
|
// Possible group association
|
|
Groups::assign($twofaccount->id, $request->user());
|
|
|
|
return (new TwoFAccountReadResource($twofaccount->refresh()))
|
|
->response()
|
|
->setStatusCode(201);
|
|
}
|
|
|
|
/**
|
|
* Update a 2FA account
|
|
*
|
|
* @param \App\Api\v1\Requests\TwoFAccountUpdateRequest $request
|
|
* @param \App\Models\TwoFAccount $twofaccount
|
|
* @return \Illuminate\Http\JsonResponse
|
|
*/
|
|
public function update(TwoFAccountUpdateRequest $request, TwoFAccount $twofaccount)
|
|
{
|
|
$this->authorize('update', $twofaccount);
|
|
|
|
$validated = $request->validated();
|
|
|
|
$twofaccount->fillWithOtpParameters($validated);
|
|
$request->user()->twofaccounts()->save($twofaccount);
|
|
|
|
return (new TwoFAccountReadResource($twofaccount))
|
|
->response()
|
|
->setStatusCode(200);
|
|
}
|
|
|
|
/**
|
|
* Convert a migration resource to a valid TwoFAccounts collection
|
|
*
|
|
* @param \App\Api\v1\Requests\TwoFAccountImportRequest $request
|
|
* @return \Illuminate\Http\JsonResponse|\App\Api\v1\Resources\TwoFAccountCollection
|
|
*/
|
|
public function migrate(TwoFAccountImportRequest $request)
|
|
{
|
|
$validated = $request->validated();
|
|
|
|
if (Arr::has($validated, 'file')) {
|
|
$migrationResource = $request->file('file');
|
|
|
|
return $migrationResource instanceof \Illuminate\Http\UploadedFile
|
|
? new TwoFAccountCollection(TwoFAccounts::migrate($migrationResource->get()))
|
|
: response()->json(['message' => __('errors.file_upload_failed')], 500);
|
|
} else {
|
|
return new TwoFAccountCollection(TwoFAccounts::migrate($request->payload));
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Save 2FA accounts order
|
|
*
|
|
* @param \App\Api\v1\Requests\TwoFAccountReorderRequest $request
|
|
* @return \Illuminate\Http\JsonResponse
|
|
*/
|
|
public function reorder(TwoFAccountReorderRequest $request)
|
|
{
|
|
$validated = $request->validated();
|
|
|
|
$twofaccounts = TwoFAccount::whereIn('id', $validated['orderedIds'])->get();
|
|
$this->authorize('updateEach', [new TwoFAccount(), $twofaccounts]);
|
|
|
|
TwoFAccount::setNewOrder($validated['orderedIds']);
|
|
|
|
return response()->json(['message' => 'order saved'], 200);
|
|
}
|
|
|
|
/**
|
|
* Preview account using an uri, without any db moves
|
|
*
|
|
* @param \App\Api\v1\Requests\TwoFAccountUriRequest $request
|
|
* @return \App\Api\v1\Resources\TwoFAccountStoreResource
|
|
*/
|
|
public function preview(TwoFAccountUriRequest $request)
|
|
{
|
|
$twofaccount = new TwoFAccount;
|
|
$twofaccount->fillWithURI($request->uri, $request->custom_otp === TwoFAccount::STEAM_TOTP);
|
|
|
|
return new TwoFAccountStoreResource($twofaccount);
|
|
}
|
|
|
|
/**
|
|
* Export accounts
|
|
*
|
|
* @param \App\Api\v1\Requests\TwoFAccountBatchRequest $request
|
|
* @return TwoFAccountExportCollection|\Illuminate\Http\JsonResponse
|
|
*/
|
|
public function export(TwoFAccountBatchRequest $request)
|
|
{
|
|
$validated = $request->validated();
|
|
|
|
if ($this->tooManyIds($validated['ids'])) {
|
|
return response()->json([
|
|
'message' => 'bad request',
|
|
'reason' => [__('errors.too_many_ids')],
|
|
], 400);
|
|
}
|
|
|
|
$twofaccounts = TwoFAccounts::export($validated['ids']);
|
|
$this->authorize('viewEach', [new TwoFAccount(), $twofaccounts]);
|
|
|
|
return new TwoFAccountExportCollection($twofaccounts);
|
|
}
|
|
|
|
/**
|
|
* Get a One-Time Password
|
|
*
|
|
* @param \Illuminate\Http\Request $request
|
|
* @param string|null $id
|
|
* @return \Illuminate\Http\JsonResponse
|
|
*/
|
|
public function otp(Request $request, $id = null)
|
|
{
|
|
$inputs = $request->all();
|
|
|
|
// The request input is the ID of an existing account
|
|
if ($id) {
|
|
$twofaccount = TwoFAccount::findOrFail((int) $id);
|
|
$this->authorize('view', $twofaccount);
|
|
}
|
|
|
|
// The request input is an uri
|
|
elseif ($request->has('uri')) {
|
|
// return 404 if uri is provided with any parameter other than otp_type
|
|
if ((count($inputs) == 2 && $request->missing('custom_otp')) || count($inputs) > 2) {
|
|
return response()->json([
|
|
'message' => 'bad request',
|
|
'reason' => ['uri' => __('validation.onlyCustomOtpWithUri')],
|
|
], 400);
|
|
} else {
|
|
$validatedData = $request->validate((new TwoFAccountUriRequest)->rules());
|
|
$twofaccount = new TwoFAccount;
|
|
$twofaccount->fillWithURI($validatedData['uri'], Arr::get($validatedData, 'custom_otp') === TwoFAccount::STEAM_TOTP, true);
|
|
}
|
|
}
|
|
|
|
// The request inputs should define an account
|
|
else {
|
|
$validatedData = $request->validate((new TwoFAccountStoreRequest)->rules());
|
|
$twofaccount = new TwoFAccount();
|
|
$twofaccount->fillWithOtpParameters($validatedData, true);
|
|
}
|
|
|
|
return response()->json($twofaccount->getOTP(), 200);
|
|
}
|
|
|
|
/**
|
|
* A simple and light method to get the account count.
|
|
*
|
|
* @param \Illuminate\Http\Request $request
|
|
* @return \Illuminate\Http\JsonResponse
|
|
*/
|
|
public function count(Request $request)
|
|
{
|
|
return response()->json(['count' => $request->user()->twofaccounts->count()], 200);
|
|
}
|
|
|
|
/**
|
|
* Withdraw one or more accounts from their group
|
|
*
|
|
* @param \App\Api\v1\Requests\TwoFAccountBatchRequest $request
|
|
* @return \Illuminate\Http\JsonResponse
|
|
*/
|
|
public function withdraw(TwoFAccountBatchRequest $request)
|
|
{
|
|
$validated = $request->validated();
|
|
|
|
if ($this->tooManyIds($validated['ids'])) {
|
|
return response()->json([
|
|
'message' => 'bad request',
|
|
'reason' => [__('errors.too_many_ids')],
|
|
], 400);
|
|
}
|
|
|
|
$ids = Helpers::commaSeparatedToArray($validated['ids']);
|
|
$twofaccounts = TwoFAccount::whereIn('id', $ids)->get();
|
|
|
|
$this->authorize('updateEach', [new TwoFAccount(), $twofaccounts]);
|
|
|
|
TwoFAccounts::withdraw($ids);
|
|
|
|
return response()->json(['message' => 'accounts withdrawn'], 200);
|
|
}
|
|
|
|
/**
|
|
* Remove the specified resource from storage.
|
|
*
|
|
* @param \App\Models\TwoFAccount $twofaccount
|
|
* @return \Illuminate\Http\JsonResponse
|
|
*/
|
|
public function destroy(TwoFAccount $twofaccount)
|
|
{
|
|
$this->authorize('delete', $twofaccount);
|
|
|
|
$twofaccount->delete();
|
|
|
|
return response()->json(null, 204);
|
|
}
|
|
|
|
/**
|
|
* Remove the specified resources from storage.
|
|
*
|
|
* @param \App\Api\v1\Requests\TwoFAccountBatchRequest $request
|
|
* @return \Illuminate\Http\JsonResponse
|
|
*/
|
|
public function batchDestroy(TwoFAccountBatchRequest $request)
|
|
{
|
|
$validated = $request->validated();
|
|
|
|
if ($this->tooManyIds($validated['ids'])) {
|
|
return response()->json([
|
|
'message' => 'bad request',
|
|
'reason' => [__('errors.too_many_ids')],
|
|
], 400);
|
|
}
|
|
|
|
$ids = Helpers::commaSeparatedToArray($validated['ids']);
|
|
$twofaccounts = TwoFAccount::whereIn('id', $ids)->get();
|
|
|
|
$this->authorize('deleteEach', [new TwoFAccount(), $twofaccounts]);
|
|
|
|
TwoFAccounts::delete($validated['ids']);
|
|
|
|
return response()->json(null, 204);
|
|
}
|
|
|
|
/**
|
|
* Checks ids length
|
|
*
|
|
* @param string $ids comma-separated ids
|
|
* @return bool whether or not the number of ids is acceptable
|
|
*/
|
|
private function tooManyIds(string $ids) : bool
|
|
{
|
|
$arIds = explode(',', $ids, 100);
|
|
$nb = count($arIds);
|
|
|
|
return $nb > 99 ? true : false;
|
|
}
|
|
}
|