BookStack/app/Http/Controllers/Auth/MfaController.php

74 lines
2.0 KiB
PHP
Raw Normal View History

2021-06-28 17:02:45 -04:00
<?php
namespace BookStack\Http\Controllers\Auth;
use BookStack\Actions\ActivityType;
use BookStack\Auth\Access\Mfa\MfaValue;
2021-06-28 17:02:45 -04:00
use BookStack\Http\Controllers\Controller;
use Illuminate\Http\Request;
2021-06-28 17:02:45 -04:00
class MfaController extends Controller
{
use HandlesPartialLogins;
2021-06-28 17:02:45 -04:00
/**
* Show the view to setup MFA for the current user.
*/
public function setup()
{
$userMethods = $this->currentOrLastAttemptedUser()
->mfaValues()
->get(['id', 'method'])
->groupBy('method');
2021-08-21 10:49:40 -04:00
$this->setPageTitle(trans('auth.mfa_setup'));
return view('mfa.setup', [
'userMethods' => $userMethods,
]);
2021-06-28 17:02:45 -04:00
}
/**
* Remove an MFA method for the current user.
2021-08-21 10:49:40 -04:00
*
* @throws \Exception
*/
public function remove(string $method)
{
if (in_array($method, MfaValue::allMethods())) {
$value = user()->mfaValues()->where('method', '=', $method)->first();
if ($value) {
$value->delete();
$this->logActivity(ActivityType::MFA_REMOVE_METHOD, $method);
}
}
return redirect('/mfa/setup');
}
/**
* Show the page to start an MFA verification.
*/
public function verify(Request $request)
{
$desiredMethod = $request->get('method');
$userMethods = $this->currentOrLastAttemptedUser()
->mfaValues()
->get(['id', 'method'])
->groupBy('method');
// Basic search for the default option for a user.
// (Prioritises totp over backup codes)
$method = $userMethods->has($desiredMethod) ? $desiredMethod : $userMethods->keys()->sort()->reverse()->first();
2021-08-21 10:49:40 -04:00
$otherMethods = $userMethods->keys()->filter(function ($userMethod) use ($method) {
return $method !== $userMethod;
})->all();
return view('mfa.verify', [
2021-08-21 10:49:40 -04:00
'userMethods' => $userMethods,
'method' => $method,
'otherMethods' => $otherMethods,
]);
}
2021-06-28 17:02:45 -04:00
}