containsParameter('password')) { return $rpcRequest->produceError(StandardError::RPC_INVALID_ARGUMENTS, "Missing 'password' parameter"); } if(!Cryptography::validatePasswordHash($rpcRequest->getParameter('password'))) { return $rpcRequest->produceError(StandardError::RPC_INVALID_ARGUMENTS, "Invalid 'password' parameter, must be a valid argon2id hash"); } try { if (PasswordManager::usesPassword($request->getPeer()->getUuid())) { return $rpcRequest->produceError(StandardError::METHOD_NOT_ALLOWED, "Cannot set password when one is already set, use 'settingsUpdatePassword' instead"); } } catch (DatabaseOperationException $e) { throw new StandardRpcException('Failed to check password due to an internal exception', StandardError::INTERNAL_SERVER_ERROR, $e); } try { // Set the password PasswordManager::setPassword($request->getPeer(), $rpcRequest->getParameter('password')); // Remove the SET_PASSWORD flag & update the session flow if necessary SessionManager::updateFlow($request->getSession(), [SessionFlags::SET_PASSWORD]); } catch(Exception $e) { throw new StandardRpcException('Failed to set password due to an internal exception', StandardError::INTERNAL_SERVER_ERROR, $e); } return $rpcRequest->produceResponse(true); } }