2021-06-26 15:23:15 +00:00
|
|
|
<?php
|
|
|
|
|
|
|
|
namespace BookStack\Auth;
|
2015-07-12 19:01:42 +00:00
|
|
|
|
2021-05-23 12:41:56 +00:00
|
|
|
use BookStack\Actions\Favourite;
|
2019-12-29 13:02:26 +00:00
|
|
|
use BookStack\Api\ApiToken;
|
2021-06-30 21:10:02 +00:00
|
|
|
use BookStack\Auth\Access\Mfa\MfaValue;
|
2021-03-09 23:06:12 +00:00
|
|
|
use BookStack\Entities\Tools\SlugGenerator;
|
2020-11-20 18:53:01 +00:00
|
|
|
use BookStack\Interfaces\Loggable;
|
2021-03-08 22:34:22 +00:00
|
|
|
use BookStack\Interfaces\Sluggable;
|
2018-09-25 11:30:50 +00:00
|
|
|
use BookStack\Model;
|
2016-09-17 17:22:04 +00:00
|
|
|
use BookStack\Notifications\ResetPassword;
|
2018-09-25 15:58:03 +00:00
|
|
|
use BookStack\Uploads\Image;
|
2019-08-17 14:52:33 +00:00
|
|
|
use Carbon\Carbon;
|
2021-01-10 22:43:22 +00:00
|
|
|
use Exception;
|
2015-07-12 19:01:42 +00:00
|
|
|
use Illuminate\Auth\Authenticatable;
|
|
|
|
use Illuminate\Auth\Passwords\CanResetPassword;
|
|
|
|
use Illuminate\Contracts\Auth\Authenticatable as AuthenticatableContract;
|
|
|
|
use Illuminate\Contracts\Auth\CanResetPassword as CanResetPasswordContract;
|
2021-01-10 22:43:22 +00:00
|
|
|
use Illuminate\Database\Eloquent\Builder;
|
2021-10-30 20:29:59 +00:00
|
|
|
use Illuminate\Database\Eloquent\Factories\HasFactory;
|
2021-01-10 22:43:22 +00:00
|
|
|
use Illuminate\Database\Eloquent\Relations\BelongsTo;
|
2016-09-29 11:43:46 +00:00
|
|
|
use Illuminate\Database\Eloquent\Relations\BelongsToMany;
|
2019-12-29 13:02:26 +00:00
|
|
|
use Illuminate\Database\Eloquent\Relations\HasMany;
|
2016-09-17 17:22:04 +00:00
|
|
|
use Illuminate\Notifications\Notifiable;
|
2021-01-02 01:22:41 +00:00
|
|
|
use Illuminate\Support\Collection;
|
2015-07-12 19:01:42 +00:00
|
|
|
|
2019-08-17 14:52:33 +00:00
|
|
|
/**
|
2021-06-26 15:23:15 +00:00
|
|
|
* Class User.
|
|
|
|
*
|
2021-11-01 11:32:00 +00:00
|
|
|
* @property int $id
|
2021-06-26 15:23:15 +00:00
|
|
|
* @property string $name
|
|
|
|
* @property string $slug
|
|
|
|
* @property string $email
|
|
|
|
* @property string $password
|
|
|
|
* @property Carbon $created_at
|
|
|
|
* @property Carbon $updated_at
|
|
|
|
* @property bool $email_confirmed
|
|
|
|
* @property int $image_id
|
|
|
|
* @property string $external_auth_id
|
|
|
|
* @property string $system_name
|
2021-03-03 22:11:00 +00:00
|
|
|
* @property Collection $roles
|
2021-07-14 19:18:48 +00:00
|
|
|
* @property Collection $mfaValues
|
2019-08-17 14:52:33 +00:00
|
|
|
*/
|
2021-03-08 22:34:22 +00:00
|
|
|
class User extends Model implements AuthenticatableContract, CanResetPasswordContract, Loggable, Sluggable
|
2015-07-12 19:01:42 +00:00
|
|
|
{
|
2021-10-30 20:29:59 +00:00
|
|
|
use HasFactory;
|
2021-06-26 15:23:15 +00:00
|
|
|
use Authenticatable;
|
|
|
|
use CanResetPassword;
|
|
|
|
use Notifiable;
|
2015-07-12 19:01:42 +00:00
|
|
|
|
|
|
|
/**
|
|
|
|
* The database table used by the model.
|
2021-06-26 15:23:15 +00:00
|
|
|
*
|
2015-07-12 19:01:42 +00:00
|
|
|
* @var string
|
|
|
|
*/
|
|
|
|
protected $table = 'users';
|
|
|
|
|
|
|
|
/**
|
|
|
|
* The attributes that are mass assignable.
|
2021-06-26 15:23:15 +00:00
|
|
|
*
|
2015-07-12 19:01:42 +00:00
|
|
|
* @var array
|
|
|
|
*/
|
2019-05-04 14:48:15 +00:00
|
|
|
protected $fillable = ['name', 'email'];
|
2015-07-12 19:01:42 +00:00
|
|
|
|
2021-01-10 22:43:22 +00:00
|
|
|
protected $casts = ['last_activity_at' => 'datetime'];
|
|
|
|
|
2015-07-12 19:01:42 +00:00
|
|
|
/**
|
|
|
|
* The attributes excluded from the model's JSON form.
|
2021-06-26 15:23:15 +00:00
|
|
|
*
|
2015-07-12 19:01:42 +00:00
|
|
|
* @var array
|
|
|
|
*/
|
2020-04-10 14:19:18 +00:00
|
|
|
protected $hidden = [
|
|
|
|
'password', 'remember_token', 'system_name', 'email_confirmed', 'external_auth_id', 'email',
|
2022-02-04 00:44:56 +00:00
|
|
|
'created_at', 'updated_at', 'image_id', 'roles', 'avatar', 'user_id',
|
2020-04-10 14:19:18 +00:00
|
|
|
];
|
2015-08-23 12:41:35 +00:00
|
|
|
|
2015-11-26 23:45:04 +00:00
|
|
|
/**
|
|
|
|
* This holds the user's permissions when loaded.
|
|
|
|
*/
|
2022-02-13 12:56:26 +00:00
|
|
|
protected ?Collection $permissions;
|
2015-11-26 23:45:04 +00:00
|
|
|
|
2022-08-10 16:50:35 +00:00
|
|
|
/**
|
|
|
|
* This holds the user's avatar URL when loaded to prevent re-calculating within the same request.
|
|
|
|
*/
|
|
|
|
protected string $avatarUrl = '';
|
|
|
|
|
2019-10-05 11:55:01 +00:00
|
|
|
/**
|
|
|
|
* This holds the default user when loaded.
|
2021-06-26 15:23:15 +00:00
|
|
|
*
|
2019-10-05 11:55:01 +00:00
|
|
|
* @var null|User
|
|
|
|
*/
|
2022-02-13 12:56:26 +00:00
|
|
|
protected static ?User $defaultUser = null;
|
2019-10-05 11:55:01 +00:00
|
|
|
|
2015-08-24 20:10:04 +00:00
|
|
|
/**
|
2016-09-29 11:43:46 +00:00
|
|
|
* Returns the default public user.
|
2015-08-24 20:10:04 +00:00
|
|
|
*/
|
2021-10-26 21:04:18 +00:00
|
|
|
public static function getDefault(): self
|
2015-08-24 20:10:04 +00:00
|
|
|
{
|
2019-10-05 11:55:01 +00:00
|
|
|
if (!is_null(static::$defaultUser)) {
|
|
|
|
return static::$defaultUser;
|
|
|
|
}
|
2021-06-26 15:23:15 +00:00
|
|
|
|
2021-03-08 22:34:22 +00:00
|
|
|
static::$defaultUser = static::query()->where('system_name', '=', 'public')->first();
|
2021-06-26 15:23:15 +00:00
|
|
|
|
2019-10-05 11:55:01 +00:00
|
|
|
return static::$defaultUser;
|
2016-09-29 11:43:46 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Check if the user is the default public user.
|
|
|
|
*/
|
2021-03-08 22:34:22 +00:00
|
|
|
public function isDefault(): bool
|
2016-09-29 11:43:46 +00:00
|
|
|
{
|
|
|
|
return $this->system_name === 'public';
|
2015-08-24 20:10:04 +00:00
|
|
|
}
|
|
|
|
|
2015-08-29 14:03:42 +00:00
|
|
|
/**
|
|
|
|
* The roles that belong to the user.
|
2021-06-26 15:23:15 +00:00
|
|
|
*
|
2016-09-29 11:43:46 +00:00
|
|
|
* @return BelongsToMany
|
2015-08-29 14:03:42 +00:00
|
|
|
*/
|
|
|
|
public function roles()
|
|
|
|
{
|
2018-01-28 16:58:52 +00:00
|
|
|
if ($this->id === 0) {
|
2021-06-26 15:23:15 +00:00
|
|
|
return;
|
2018-01-28 16:58:52 +00:00
|
|
|
}
|
2021-06-26 15:23:15 +00:00
|
|
|
|
2016-05-01 20:20:50 +00:00
|
|
|
return $this->belongsToMany(Role::class);
|
2015-08-29 14:03:42 +00:00
|
|
|
}
|
|
|
|
|
2016-02-27 19:24:42 +00:00
|
|
|
/**
|
|
|
|
* Check if the user has a role.
|
|
|
|
*/
|
2020-08-04 13:55:01 +00:00
|
|
|
public function hasRole($roleId): bool
|
2015-08-29 14:03:42 +00:00
|
|
|
{
|
2020-08-04 13:55:01 +00:00
|
|
|
return $this->roles->pluck('id')->contains($roleId);
|
2015-11-26 23:45:04 +00:00
|
|
|
}
|
|
|
|
|
2017-01-01 21:21:11 +00:00
|
|
|
/**
|
|
|
|
* Check if the user has a role.
|
|
|
|
*/
|
2021-03-08 22:34:22 +00:00
|
|
|
public function hasSystemRole(string $roleSystemName): bool
|
2017-01-01 21:21:11 +00:00
|
|
|
{
|
2021-03-08 22:34:22 +00:00
|
|
|
return $this->roles->pluck('system_name')->contains($roleSystemName);
|
2017-01-01 21:21:11 +00:00
|
|
|
}
|
|
|
|
|
2020-02-02 17:31:00 +00:00
|
|
|
/**
|
|
|
|
* Attach the default system role to this user.
|
|
|
|
*/
|
|
|
|
public function attachDefaultRole(): void
|
|
|
|
{
|
2022-01-31 14:16:56 +00:00
|
|
|
$roleId = intval(setting('registration-role'));
|
2020-02-02 17:31:00 +00:00
|
|
|
if ($roleId && $this->roles()->where('id', '=', $roleId)->count() === 0) {
|
|
|
|
$this->roles()->attach($roleId);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2021-01-02 01:22:41 +00:00
|
|
|
/**
|
|
|
|
* Check if the user has a particular permission.
|
|
|
|
*/
|
|
|
|
public function can(string $permissionName): bool
|
|
|
|
{
|
|
|
|
if ($this->email === 'guest') {
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
|
|
|
return $this->permissions()->contains($permissionName);
|
|
|
|
}
|
|
|
|
|
2015-11-26 23:45:04 +00:00
|
|
|
/**
|
2022-07-13 14:23:03 +00:00
|
|
|
* Get all permissions belonging to the current user.
|
2015-11-26 23:45:04 +00:00
|
|
|
*/
|
2021-01-02 01:22:41 +00:00
|
|
|
protected function permissions(): Collection
|
2015-11-26 23:45:04 +00:00
|
|
|
{
|
2021-01-02 01:22:41 +00:00
|
|
|
if (isset($this->permissions)) {
|
2018-01-28 16:58:52 +00:00
|
|
|
return $this->permissions;
|
|
|
|
}
|
2021-01-02 01:22:41 +00:00
|
|
|
|
|
|
|
$this->permissions = $this->newQuery()->getConnection()->table('role_user', 'ru')
|
|
|
|
->select('role_permissions.name as name')->distinct()
|
|
|
|
->leftJoin('permission_role', 'ru.role_id', '=', 'permission_role.role_id')
|
|
|
|
->leftJoin('role_permissions', 'permission_role.permission_id', '=', 'role_permissions.id')
|
|
|
|
->where('ru.user_id', '=', $this->id)
|
|
|
|
->pluck('name');
|
|
|
|
|
|
|
|
return $this->permissions;
|
2015-08-29 14:03:42 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2021-01-02 01:22:41 +00:00
|
|
|
* Clear any cached permissions on this instance.
|
2015-08-29 14:03:42 +00:00
|
|
|
*/
|
2021-01-02 01:22:41 +00:00
|
|
|
public function clearPermissionCache()
|
2015-08-29 14:03:42 +00:00
|
|
|
{
|
2021-01-02 01:22:41 +00:00
|
|
|
$this->permissions = null;
|
2015-08-29 14:03:42 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Attach a role to this user.
|
|
|
|
*/
|
|
|
|
public function attachRole(Role $role)
|
|
|
|
{
|
2020-02-02 17:31:00 +00:00
|
|
|
$this->roles()->attach($role->id);
|
2015-08-29 14:03:42 +00:00
|
|
|
}
|
|
|
|
|
2015-09-04 19:40:36 +00:00
|
|
|
/**
|
|
|
|
* Get the social account associated with this user.
|
|
|
|
*/
|
2021-03-08 22:34:22 +00:00
|
|
|
public function socialAccounts(): HasMany
|
2015-09-04 19:40:36 +00:00
|
|
|
{
|
2016-05-01 20:20:50 +00:00
|
|
|
return $this->hasMany(SocialAccount::class);
|
2015-09-04 19:40:36 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Check if the user has a social account,
|
|
|
|
* If a driver is passed it checks for that single account type.
|
2021-06-26 15:23:15 +00:00
|
|
|
*
|
2015-09-04 19:40:36 +00:00
|
|
|
* @param bool|string $socialDriver
|
2021-06-26 15:23:15 +00:00
|
|
|
*
|
2015-09-04 19:40:36 +00:00
|
|
|
* @return bool
|
|
|
|
*/
|
|
|
|
public function hasSocialAccount($socialDriver = false)
|
|
|
|
{
|
2015-11-26 23:45:04 +00:00
|
|
|
if ($socialDriver === false) {
|
2015-09-04 19:40:36 +00:00
|
|
|
return $this->socialAccounts()->count() > 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
return $this->socialAccounts()->where('driver', '=', $socialDriver)->exists();
|
|
|
|
}
|
|
|
|
|
2015-08-23 12:41:35 +00:00
|
|
|
/**
|
2021-06-26 15:23:15 +00:00
|
|
|
* Returns a URL to the user's avatar.
|
2015-08-23 12:41:35 +00:00
|
|
|
*/
|
2021-03-08 22:34:22 +00:00
|
|
|
public function getAvatar(int $size = 50): string
|
2015-08-23 12:41:35 +00:00
|
|
|
{
|
2019-08-04 13:26:39 +00:00
|
|
|
$default = url('/user_avatar.png');
|
2017-01-22 12:19:50 +00:00
|
|
|
$imageId = $this->image_id;
|
2018-01-28 16:58:52 +00:00
|
|
|
if ($imageId === 0 || $imageId === '0' || $imageId === null) {
|
|
|
|
return $default;
|
|
|
|
}
|
2017-01-22 12:19:50 +00:00
|
|
|
|
2022-08-10 16:50:35 +00:00
|
|
|
if (!empty($this->avatarUrl)) {
|
|
|
|
return $this->avatarUrl;
|
|
|
|
}
|
|
|
|
|
2017-01-22 12:19:50 +00:00
|
|
|
try {
|
2019-08-04 13:26:39 +00:00
|
|
|
$avatar = $this->avatar ? url($this->avatar->getThumb($size, $size, false)) : $default;
|
2021-01-10 22:43:22 +00:00
|
|
|
} catch (Exception $err) {
|
2017-01-22 12:19:50 +00:00
|
|
|
$avatar = $default;
|
|
|
|
}
|
2021-06-26 15:23:15 +00:00
|
|
|
|
2022-08-10 16:50:35 +00:00
|
|
|
$this->avatarUrl = $avatar;
|
2017-01-22 12:19:50 +00:00
|
|
|
return $avatar;
|
2015-12-09 22:30:55 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Get the avatar for the user.
|
|
|
|
*/
|
2021-03-08 22:34:22 +00:00
|
|
|
public function avatar(): BelongsTo
|
2015-12-09 22:30:55 +00:00
|
|
|
{
|
2016-05-01 20:20:50 +00:00
|
|
|
return $this->belongsTo(Image::class, 'image_id');
|
2015-08-23 12:41:35 +00:00
|
|
|
}
|
2015-09-04 19:40:36 +00:00
|
|
|
|
2019-12-29 13:02:26 +00:00
|
|
|
/**
|
|
|
|
* Get the API tokens assigned to this user.
|
|
|
|
*/
|
|
|
|
public function apiTokens(): HasMany
|
|
|
|
{
|
|
|
|
return $this->hasMany(ApiToken::class);
|
|
|
|
}
|
|
|
|
|
2021-05-23 12:41:56 +00:00
|
|
|
/**
|
|
|
|
* Get the favourite instances for this user.
|
|
|
|
*/
|
|
|
|
public function favourites(): HasMany
|
|
|
|
{
|
|
|
|
return $this->hasMany(Favourite::class);
|
|
|
|
}
|
|
|
|
|
2021-06-30 21:10:02 +00:00
|
|
|
/**
|
|
|
|
* Get the MFA values belonging to this use.
|
|
|
|
*/
|
|
|
|
public function mfaValues(): HasMany
|
|
|
|
{
|
|
|
|
return $this->hasMany(MfaValue::class);
|
|
|
|
}
|
|
|
|
|
2020-11-20 20:10:18 +00:00
|
|
|
/**
|
2021-01-10 22:43:22 +00:00
|
|
|
* Get the last activity time for this user.
|
2020-11-20 20:10:18 +00:00
|
|
|
*/
|
2021-01-10 22:43:22 +00:00
|
|
|
public function scopeWithLastActivityAt(Builder $query)
|
2020-11-20 20:10:18 +00:00
|
|
|
{
|
2021-01-10 22:43:22 +00:00
|
|
|
$query->addSelect(['activities.created_at as last_activity_at'])
|
|
|
|
->leftJoinSub(function (\Illuminate\Database\Query\Builder $query) {
|
|
|
|
$query->from('activities')->select('user_id')
|
|
|
|
->selectRaw('max(created_at) as created_at')
|
|
|
|
->groupBy('user_id');
|
|
|
|
}, 'activities', 'users.id', '=', 'activities.user_id');
|
2020-11-20 20:10:18 +00:00
|
|
|
}
|
|
|
|
|
2015-09-21 19:54:11 +00:00
|
|
|
/**
|
|
|
|
* Get the url for editing this user.
|
|
|
|
*/
|
2019-12-29 13:02:26 +00:00
|
|
|
public function getEditUrl(string $path = ''): string
|
2015-09-04 19:40:36 +00:00
|
|
|
{
|
2019-12-29 13:02:26 +00:00
|
|
|
$uri = '/settings/users/' . $this->id . '/' . trim($path, '/');
|
2021-06-26 15:23:15 +00:00
|
|
|
|
2019-12-29 13:02:26 +00:00
|
|
|
return url(rtrim($uri, '/'));
|
2015-09-04 19:40:36 +00:00
|
|
|
}
|
2016-03-30 20:28:38 +00:00
|
|
|
|
2016-08-14 11:29:35 +00:00
|
|
|
/**
|
|
|
|
* Get the url that links to this user's profile.
|
|
|
|
*/
|
2019-12-29 13:02:26 +00:00
|
|
|
public function getProfileUrl(): string
|
2016-08-14 11:29:35 +00:00
|
|
|
{
|
2021-03-09 23:06:12 +00:00
|
|
|
return url('/user/' . $this->slug);
|
2016-08-14 11:29:35 +00:00
|
|
|
}
|
|
|
|
|
2016-03-30 20:28:38 +00:00
|
|
|
/**
|
|
|
|
* Get a shortened version of the user's name.
|
|
|
|
*/
|
2021-03-08 22:34:22 +00:00
|
|
|
public function getShortName(int $chars = 8): string
|
2016-03-30 20:28:38 +00:00
|
|
|
{
|
2019-05-25 15:14:57 +00:00
|
|
|
if (mb_strlen($this->name) <= $chars) {
|
2018-01-28 16:58:52 +00:00
|
|
|
return $this->name;
|
|
|
|
}
|
2016-03-30 20:28:38 +00:00
|
|
|
|
|
|
|
$splitName = explode(' ', $this->name);
|
2019-05-25 15:14:57 +00:00
|
|
|
if (mb_strlen($splitName[0]) <= $chars) {
|
2018-01-28 16:58:52 +00:00
|
|
|
return $splitName[0];
|
|
|
|
}
|
2016-03-30 20:28:38 +00:00
|
|
|
|
|
|
|
return '';
|
|
|
|
}
|
2016-09-17 17:22:04 +00:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Send the password reset notification.
|
2021-06-26 15:23:15 +00:00
|
|
|
*
|
|
|
|
* @param string $token
|
|
|
|
*
|
2016-09-17 17:22:04 +00:00
|
|
|
* @return void
|
|
|
|
*/
|
|
|
|
public function sendPasswordResetNotification($token)
|
|
|
|
{
|
|
|
|
$this->notify(new ResetPassword($token));
|
|
|
|
}
|
2020-11-20 18:53:01 +00:00
|
|
|
|
|
|
|
/**
|
2021-10-26 21:04:18 +00:00
|
|
|
* {@inheritdoc}
|
2020-11-20 18:53:01 +00:00
|
|
|
*/
|
|
|
|
public function logDescriptor(): string
|
|
|
|
{
|
|
|
|
return "({$this->id}) {$this->name}";
|
|
|
|
}
|
2021-03-09 23:06:12 +00:00
|
|
|
|
|
|
|
/**
|
2021-10-26 21:04:18 +00:00
|
|
|
* {@inheritdoc}
|
2021-03-09 23:06:12 +00:00
|
|
|
*/
|
|
|
|
public function refreshSlug(): string
|
|
|
|
{
|
|
|
|
$this->slug = app(SlugGenerator::class)->generate($this);
|
2021-06-26 15:23:15 +00:00
|
|
|
|
2021-03-09 23:06:12 +00:00
|
|
|
return $this->slug;
|
|
|
|
}
|
2015-07-12 19:01:42 +00:00
|
|
|
}
|