62 lines
No EOL
2.4 KiB
PHP
62 lines
No EOL
2.4 KiB
PHP
<?php
|
|
|
|
namespace Socialbox\Classes\StandardMethods\Settings;
|
|
|
|
use Exception;
|
|
use Socialbox\Abstracts\Method;
|
|
use Socialbox\Classes\Cryptography;
|
|
use Socialbox\Enums\Flags\SessionFlags;
|
|
use Socialbox\Enums\StandardError;
|
|
use Socialbox\Exceptions\DatabaseOperationException;
|
|
use Socialbox\Exceptions\Standard\StandardRpcException;
|
|
use Socialbox\Interfaces\SerializableInterface;
|
|
use Socialbox\Managers\PasswordManager;
|
|
use Socialbox\Managers\SessionManager;
|
|
use Socialbox\Objects\ClientRequest;
|
|
use Socialbox\Objects\RpcRequest;
|
|
|
|
class SettingsSetPassword extends Method
|
|
{
|
|
/**
|
|
* @inheritDoc
|
|
*/
|
|
public static function execute(ClientRequest $request, RpcRequest $rpcRequest): ?SerializableInterface
|
|
{
|
|
if(!$rpcRequest->containsParameter('password'))
|
|
{
|
|
return $rpcRequest->produceError(StandardError::RPC_INVALID_ARGUMENTS, "Missing 'password' parameter");
|
|
}
|
|
|
|
if(!Cryptography::validatePasswordHash($rpcRequest->getParameter('password')))
|
|
{
|
|
return $rpcRequest->produceError(StandardError::RPC_INVALID_ARGUMENTS, "Invalid 'password' parameter, must be a valid argon2id hash");
|
|
}
|
|
|
|
try
|
|
{
|
|
if (PasswordManager::usesPassword($request->getPeer()->getUuid()))
|
|
{
|
|
return $rpcRequest->produceError(StandardError::METHOD_NOT_ALLOWED, "Cannot set password when one is already set, use 'settingsUpdatePassword' instead");
|
|
}
|
|
}
|
|
catch (DatabaseOperationException $e)
|
|
{
|
|
throw new StandardRpcException('Failed to check password due to an internal exception', StandardError::INTERNAL_SERVER_ERROR, $e);
|
|
}
|
|
|
|
try
|
|
{
|
|
// Set the password
|
|
PasswordManager::setPassword($request->getPeer(), $rpcRequest->getParameter('password'));
|
|
|
|
// Remove the SET_PASSWORD flag & update the session flow if necessary
|
|
SessionManager::updateFlow($request->getSession(), [SessionFlags::SET_PASSWORD]);
|
|
}
|
|
catch(Exception $e)
|
|
{
|
|
throw new StandardRpcException('Failed to set password due to an internal exception', StandardError::INTERNAL_SERVER_ERROR, $e);
|
|
}
|
|
|
|
return $rpcRequest->produceResponse(true);
|
|
}
|
|
} |