password reset

be/app/Http/Controllers/UserController.php

@@ -3,14 +3,15 @@
 namespace App\Http\Controllers;
 
 use App\Http\Resources\UserResource;
+use App\Mail\PasswordReset;
 use App\Models\User;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Mail;
 use Illuminate\Support\Facades\Validator;
 
-class UserController extends Controller
-{
-    public function update($id, Request $request)
-    {
+class UserController extends Controller {
+    public function update( $id, Request $request ) {
 
         $validator = Validator::make( $request->all(), [
             'data.work_start' => 'required',
@@ -31,4 +32,30 @@ class UserController extends Controller
         ], 201 );
     }
 
+    public function sendPasswordResetLink( Request $request ) {
+        $user = User::where( 'email', $request->all()['data']['email'] )->first();
+
+        if ( ! $user ) {
+            return response()->json( [
+                'message' => 'User not found.',
+            ], 400 );
+        }
+
+        $token = $user->createToken( 'password-reset', [ 'password-reset' ] )->plainTextToken;
+        $url   = env( 'APP_URL_FE' ) . '#/auth/reset-password?token=' . $token . '&email=' . $user->email;
+
+        Mail::to( 'michal.feher@gmail.com' )->send( new PasswordReset( $url ) );
+
+        return [ 'message' => 'Email sent.' ];
+    }
+
+    public function resetPassword( Request $request )
+    {
+        $userId = User::getUserIdFromBearerToken($request->bearerToken());
+
+        User::find($userId)->update(['password' => Hash::make($request->all()['data']['password'])]);
+
+        return [ 'message' => 'Password changed.' ];
+    }
+
 }

be/app/Http/Kernel.php

@@ -63,5 +63,7 @@ class Kernel extends HttpKernel
         'signed' => \App\Http\Middleware\ValidateSignature::class,
         'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
         'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
+        'abilities' => \Laravel\Sanctum\Http\Middleware\CheckAbilities::class,
+        'ability' => \Laravel\Sanctum\Http\Middleware\CheckForAnyAbility::class,
     ];
 }

be/app/Mail/PasswordReset.php

@@ -0,0 +1,61 @@
+<?php
+
+namespace App\Mail;
+
+use Illuminate\Bus\Queueable;
+use Illuminate\Contracts\Queue\ShouldQueue;
+use Illuminate\Mail\Mailable;
+use Illuminate\Mail\Mailables\Content;
+use Illuminate\Mail\Mailables\Envelope;
+use Illuminate\Queue\SerializesModels;
+
+class PasswordReset extends Mailable
+{
+    use Queueable, SerializesModels;
+
+    public $url;
+
+    /**
+     * Create a new message instance.
+     *
+     * @return void
+     */
+    public function __construct($url)
+    {
+        $this->url = $url;
+    }
+
+    /**
+     * Get the message envelope.
+     *
+     * @return \Illuminate\Mail\Mailables\Envelope
+     */
+    public function envelope()
+    {
+        return new Envelope(
+            subject: 'Password Reset',
+        );
+    }
+
+    /**
+     * Get the message content definition.
+     *
+     * @return \Illuminate\Mail\Mailables\Content
+     */
+    public function content()
+    {
+        return new Content(
+            view: 'emails.password.reset',
+        );
+    }
+
+    /**
+     * Get the attachments for the message.
+     *
+     * @return array
+     */
+    public function attachments()
+    {
+        return [];
+    }
+}

be/app/Models/User.php

@@ -2,9 +2,12 @@
 
 namespace App\Models;
 
+use App\Mail\PasswordReset;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Foundation\Auth\User as Authenticatable;
+use Illuminate\Http\Request;
 use Illuminate\Notifications\Notifiable;
+use Illuminate\Support\Facades\Mail;
 use Laravel\Sanctum\HasApiTokens;
 use Laravel\Sanctum\PersonalAccessToken;
 
@@ -58,5 +61,4 @@ class User extends Authenticatable
 
         return $token->tokenable_id;
     }
-
 }

be/resources/views/emails/password/reset.blade.php

@@ -0,0 +1 @@
+Click <a href="{{ $url }}">here</a> for resetting your password.

be/routes/api.php

@@ -35,7 +35,7 @@ use Illuminate\Http\Request;
 |
 */
 
-Route::middleware(['auth:sanctum'])->group(function () {
+Route::middleware(['auth:sanctum', 'abilities:full-access'])->group(function () {
     Route::get('/user', function (Request $request) {
         return $request->user();
     });
@@ -105,10 +105,23 @@ Route::middleware(['auth:sanctum'])->group(function () {
     Route::put('/v1/users/{id}', UserController::class . '@update');
 });
 
+Route::middleware(['auth:sanctum', 'abilities:password-reset'])->group(function () {
+    Route::post('/v1/users/reset', UserController::class . '@resetPassword');
+});
+
+Route::post('/v1/users/forgot', UserController::class . '@sendPasswordResetLink');
+
+
 Route::post('/v1/tokens/create', function (Request $request) {
     $user = User::where('email', $request->all()['data']['email'])->first();
 
-    $token = $user->createToken($user->email . '-' . now());
+    if (!$user)
+        return response()->json(['message' => 'E-mail address doesnt exist.'], 401);
+
+    if (! Hash::check($request->all()['data']['password'], $user->password))
+        return response()->json(['message' => 'Incorrect password.'], 401);
+
+    $token = $user->createToken($user->email . '-' . now(), ['full-access']);
 
     return ['token' => $token->plainTextToken, 'user' => new UserResource($user)];
 });