59 lines
1.9 KiB
PHP
59 lines
1.9 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Api;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use App\Models\User;
|
|
use Illuminate\Auth\Events\PasswordReset;
|
|
use Illuminate\Http\JsonResponse;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Illuminate\Support\Facades\Password;
|
|
use Illuminate\Support\Str;
|
|
use Illuminate\Validation\Rules;
|
|
|
|
class PasswordResetController extends Controller
|
|
{
|
|
public function forgotPassword(Request $request): JsonResponse
|
|
{
|
|
$request->validate([
|
|
'email' => ['required', 'email'],
|
|
]);
|
|
|
|
$status = Password::sendResetLink($request->only('email'));
|
|
|
|
return $status === Password::RESET_LINK_SENT
|
|
? response()->json(['message' => __($status)])
|
|
: response()->json(['message' => __($status)], 422);
|
|
}
|
|
|
|
public function resetPassword(Request $request): JsonResponse
|
|
{
|
|
$request->validate([
|
|
'token' => ['required'],
|
|
'email' => ['required', 'email'],
|
|
'password' => ['required', 'confirmed', Rules\Password::defaults()],
|
|
]);
|
|
|
|
$status = Password::reset(
|
|
$request->only('email', 'password', 'password_confirmation', 'token'),
|
|
function (User $user) use ($request) {
|
|
$user->forceFill([
|
|
'password' => Hash::make($request->password),
|
|
'remember_token' => Str::random(60),
|
|
])->save();
|
|
|
|
// A password reset often means "I lost my phone" - revoke every
|
|
// existing API token rather than leaving old devices signed in.
|
|
$user->tokens()->delete();
|
|
|
|
event(new PasswordReset($user));
|
|
}
|
|
);
|
|
|
|
return $status === Password::PASSWORD_RESET
|
|
? response()->json(['message' => __($status)])
|
|
: response()->json(['message' => __($status)], 422);
|
|
}
|
|
}
|