password reset

be/app/Http/Controllers/UserController.php

@@ -3,32 +3,59 @@
 namespace App\Http\Controllers;
 
 use App\Http\Resources\UserResource;
+use App\Mail\PasswordReset;
 use App\Models\User;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Mail;
 use Illuminate\Support\Facades\Validator;
 
-class UserController extends Controller
-{
-    public function update($id, Request $request)
-    {
+class UserController extends Controller {
+    public function update( $id, Request $request ) {
 
-        $validator = Validator::make($request->all(), [
+        $validator = Validator::make( $request->all(), [
             'data.work_start' => 'required',
-            'data.work_end' => 'required',
-        ]);
+            'data.work_end'   => 'required',
+        ] );
 
-        if($validator->fails()){
-            return response()->json($validator->errors(), 400);
+        if ( $validator->fails() ) {
+            return response()->json( $validator->errors(), 400 );
         }
 
-        $user = User::find($id);
+        $user = User::find( $id );
 
-        $user->update($request->all()['data']);
+        $user->update( $request->all()['data'] );
 
-        return response()->json([
+        return response()->json( [
             'message' => 'User updated successfully',
-            'user' => new UserResource($user)
-        ], 201);
+            'user'    => new UserResource( $user )
+        ], 201 );
+    }
+
+    public function sendPasswordResetLink( Request $request ) {
+        $user = User::where( 'email', $request->all()['data']['email'] )->first();
+
+        if ( ! $user ) {
+            return response()->json( [
+                'message' => 'User not found.',
+            ], 400 );
+        }
+
+        $token = $user->createToken( 'password-reset', [ 'password-reset' ] )->plainTextToken;
+        $url   = env( 'APP_URL_FE' ) . '#/auth/reset-password?token=' . $token . '&email=' . $user->email;
+
+        Mail::to( 'michal.feher@gmail.com' )->send( new PasswordReset( $url ) );
+
+        return [ 'message' => 'Email sent.' ];
+    }
+
+    public function resetPassword( Request $request )
+    {
+        $userId = User::getUserIdFromBearerToken($request->bearerToken());
+
+        User::find($userId)->update(['password' => Hash::make($request->all()['data']['password'])]);
+
+        return [ 'message' => 'Password changed.' ];
     }
 
 }

be/app/Http/Kernel.php

@@ -63,5 +63,7 @@ class Kernel extends HttpKernel
         'signed' => \App\Http\Middleware\ValidateSignature::class,
         'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
         'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
+        'abilities' => \Laravel\Sanctum\Http\Middleware\CheckAbilities::class,
+        'ability' => \Laravel\Sanctum\Http\Middleware\CheckForAnyAbility::class,
     ];
 }