BookStack/app/Auth/User.php

356 lines
8.7 KiB
PHP
Raw Normal View History

2021-06-26 11:23:15 -04:00
<?php
namespace BookStack\Auth;
2015-07-12 15:01:42 -04:00
use BookStack\Actions\Favourite;
use BookStack\Api\ApiToken;
use BookStack\Auth\Access\Mfa\MfaValue;
use BookStack\Entities\Tools\SlugGenerator;
use BookStack\Interfaces\Loggable;
use BookStack\Interfaces\Sluggable;
use BookStack\Model;
use BookStack\Notifications\ResetPassword;
use BookStack\Uploads\Image;
2019-08-17 10:52:33 -04:00
use Carbon\Carbon;
use Exception;
2015-07-12 15:01:42 -04:00
use Illuminate\Auth\Authenticatable;
use Illuminate\Auth\Passwords\CanResetPassword;
use Illuminate\Contracts\Auth\Authenticatable as AuthenticatableContract;
use Illuminate\Contracts\Auth\CanResetPassword as CanResetPasswordContract;
use Illuminate\Database\Eloquent\Builder;
use Illuminate\Database\Eloquent\Relations\BelongsTo;
use Illuminate\Database\Eloquent\Relations\BelongsToMany;
use Illuminate\Database\Eloquent\Relations\HasMany;
use Illuminate\Notifications\Notifiable;
use Illuminate\Support\Collection;
2015-07-12 15:01:42 -04:00
2019-08-17 10:52:33 -04:00
/**
2021-06-26 11:23:15 -04:00
* Class User.
*
* @property int $id
2021-06-26 11:23:15 -04:00
* @property string $name
* @property string $slug
* @property string $email
* @property string $password
* @property Carbon $created_at
* @property Carbon $updated_at
* @property bool $email_confirmed
* @property int $image_id
* @property string $external_auth_id
* @property string $system_name
* @property Collection $roles
* @property Collection $mfaValues
2019-08-17 10:52:33 -04:00
*/
class User extends Model implements AuthenticatableContract, CanResetPasswordContract, Loggable, Sluggable
2015-07-12 15:01:42 -04:00
{
2021-06-26 11:23:15 -04:00
use Authenticatable;
use CanResetPassword;
use Notifiable;
2015-07-12 15:01:42 -04:00
/**
* The database table used by the model.
2021-06-26 11:23:15 -04:00
*
2015-07-12 15:01:42 -04:00
* @var string
*/
protected $table = 'users';
/**
* The attributes that are mass assignable.
2021-06-26 11:23:15 -04:00
*
2015-07-12 15:01:42 -04:00
* @var array
*/
protected $fillable = ['name', 'email'];
2015-07-12 15:01:42 -04:00
protected $casts = ['last_activity_at' => 'datetime'];
2015-07-12 15:01:42 -04:00
/**
* The attributes excluded from the model's JSON form.
2021-06-26 11:23:15 -04:00
*
2015-07-12 15:01:42 -04:00
* @var array
*/
protected $hidden = [
'password', 'remember_token', 'system_name', 'email_confirmed', 'external_auth_id', 'email',
2020-05-22 19:28:41 -04:00
'created_at', 'updated_at', 'image_id',
];
2015-08-23 08:41:35 -04:00
/**
* This holds the user's permissions when loaded.
2021-06-26 11:23:15 -04:00
*
* @var ?Collection
*/
protected $permissions;
/**
* This holds the default user when loaded.
2021-06-26 11:23:15 -04:00
*
* @var null|User
*/
protected static $defaultUser = null;
2015-08-24 16:10:04 -04:00
/**
* Returns the default public user.
2015-08-24 16:10:04 -04:00
*/
public static function getDefault(): User
2015-08-24 16:10:04 -04:00
{
if (!is_null(static::$defaultUser)) {
return static::$defaultUser;
}
2021-06-26 11:23:15 -04:00
static::$defaultUser = static::query()->where('system_name', '=', 'public')->first();
2021-06-26 11:23:15 -04:00
return static::$defaultUser;
}
/**
* Check if the user is the default public user.
*/
public function isDefault(): bool
{
return $this->system_name === 'public';
2015-08-24 16:10:04 -04:00
}
2015-08-29 10:03:42 -04:00
/**
* The roles that belong to the user.
2021-06-26 11:23:15 -04:00
*
* @return BelongsToMany
2015-08-29 10:03:42 -04:00
*/
public function roles()
{
if ($this->id === 0) {
2021-06-26 11:23:15 -04:00
return;
}
2021-06-26 11:23:15 -04:00
return $this->belongsToMany(Role::class);
2015-08-29 10:03:42 -04:00
}
/**
* Check if the user has a role.
*/
public function hasRole($roleId): bool
2015-08-29 10:03:42 -04:00
{
return $this->roles->pluck('id')->contains($roleId);
}
2017-01-01 16:21:11 -05:00
/**
* Check if the user has a role.
*/
public function hasSystemRole(string $roleSystemName): bool
2017-01-01 16:21:11 -05:00
{
return $this->roles->pluck('system_name')->contains($roleSystemName);
2017-01-01 16:21:11 -05:00
}
/**
* Attach the default system role to this user.
*/
public function attachDefaultRole(): void
{
$roleId = setting('registration-role');
if ($roleId && $this->roles()->where('id', '=', $roleId)->count() === 0) {
$this->roles()->attach($roleId);
}
}
/**
* Check if the user has a particular permission.
*/
public function can(string $permissionName): bool
{
if ($this->email === 'guest') {
return false;
}
return $this->permissions()->contains($permissionName);
}
/**
* Get all permissions belonging to a the current user.
*/
protected function permissions(): Collection
{
if (isset($this->permissions)) {
return $this->permissions;
}
$this->permissions = $this->newQuery()->getConnection()->table('role_user', 'ru')
->select('role_permissions.name as name')->distinct()
->leftJoin('permission_role', 'ru.role_id', '=', 'permission_role.role_id')
->leftJoin('role_permissions', 'permission_role.permission_id', '=', 'role_permissions.id')
->where('ru.user_id', '=', $this->id)
->get()
->pluck('name');
return $this->permissions;
2015-08-29 10:03:42 -04:00
}
/**
* Clear any cached permissions on this instance.
2015-08-29 10:03:42 -04:00
*/
public function clearPermissionCache()
2015-08-29 10:03:42 -04:00
{
$this->permissions = null;
2015-08-29 10:03:42 -04:00
}
/**
* Attach a role to this user.
*/
public function attachRole(Role $role)
{
$this->roles()->attach($role->id);
2015-08-29 10:03:42 -04:00
}
2015-09-04 15:40:36 -04:00
/**
* Get the social account associated with this user.
*/
public function socialAccounts(): HasMany
2015-09-04 15:40:36 -04:00
{
return $this->hasMany(SocialAccount::class);
2015-09-04 15:40:36 -04:00
}
/**
* Check if the user has a social account,
* If a driver is passed it checks for that single account type.
2021-06-26 11:23:15 -04:00
*
2015-09-04 15:40:36 -04:00
* @param bool|string $socialDriver
2021-06-26 11:23:15 -04:00
*
2015-09-04 15:40:36 -04:00
* @return bool
*/
public function hasSocialAccount($socialDriver = false)
{
if ($socialDriver === false) {
2015-09-04 15:40:36 -04:00
return $this->socialAccounts()->count() > 0;
}
return $this->socialAccounts()->where('driver', '=', $socialDriver)->exists();
}
2015-08-23 08:41:35 -04:00
/**
2021-06-26 11:23:15 -04:00
* Returns a URL to the user's avatar.
2015-08-23 08:41:35 -04:00
*/
public function getAvatar(int $size = 50): string
2015-08-23 08:41:35 -04:00
{
$default = url('/user_avatar.png');
$imageId = $this->image_id;
if ($imageId === 0 || $imageId === '0' || $imageId === null) {
return $default;
}
try {
$avatar = $this->avatar ? url($this->avatar->getThumb($size, $size, false)) : $default;
} catch (Exception $err) {
$avatar = $default;
}
2021-06-26 11:23:15 -04:00
return $avatar;
2015-12-09 17:30:55 -05:00
}
/**
* Get the avatar for the user.
*/
public function avatar(): BelongsTo
2015-12-09 17:30:55 -05:00
{
return $this->belongsTo(Image::class, 'image_id');
2015-08-23 08:41:35 -04:00
}
2015-09-04 15:40:36 -04:00
/**
* Get the API tokens assigned to this user.
*/
public function apiTokens(): HasMany
{
return $this->hasMany(ApiToken::class);
}
/**
* Get the favourite instances for this user.
*/
public function favourites(): HasMany
{
return $this->hasMany(Favourite::class);
}
/**
* Get the MFA values belonging to this use.
*/
public function mfaValues(): HasMany
{
return $this->hasMany(MfaValue::class);
}
/**
* Get the last activity time for this user.
*/
public function scopeWithLastActivityAt(Builder $query)
{
$query->addSelect(['activities.created_at as last_activity_at'])
->leftJoinSub(function (\Illuminate\Database\Query\Builder $query) {
$query->from('activities')->select('user_id')
->selectRaw('max(created_at) as created_at')
->groupBy('user_id');
}, 'activities', 'users.id', '=', 'activities.user_id');
}
2015-09-21 15:54:11 -04:00
/**
* Get the url for editing this user.
*/
public function getEditUrl(string $path = ''): string
2015-09-04 15:40:36 -04:00
{
$uri = '/settings/users/' . $this->id . '/' . trim($path, '/');
2021-06-26 11:23:15 -04:00
return url(rtrim($uri, '/'));
2015-09-04 15:40:36 -04:00
}
2016-03-30 16:28:38 -04:00
/**
* Get the url that links to this user's profile.
*/
public function getProfileUrl(): string
{
return url('/user/' . $this->slug);
}
2016-03-30 16:28:38 -04:00
/**
* Get a shortened version of the user's name.
*/
public function getShortName(int $chars = 8): string
2016-03-30 16:28:38 -04:00
{
if (mb_strlen($this->name) <= $chars) {
return $this->name;
}
2016-03-30 16:28:38 -04:00
$splitName = explode(' ', $this->name);
if (mb_strlen($splitName[0]) <= $chars) {
return $splitName[0];
}
2016-03-30 16:28:38 -04:00
return '';
}
/**
* Send the password reset notification.
2021-06-26 11:23:15 -04:00
*
* @param string $token
*
* @return void
*/
public function sendPasswordResetNotification($token)
{
$this->notify(new ResetPassword($token));
}
/**
* @inheritdoc
*/
public function logDescriptor(): string
{
return "({$this->id}) {$this->name}";
}
/**
* @inheritDoc
*/
public function refreshSlug(): string
{
$this->slug = app(SlugGenerator::class)->generate($this);
2021-06-26 11:23:15 -04:00
return $this->slug;
}
2015-07-12 15:01:42 -04:00
}