Password reset functionality

Author: kamranahmedse

app/Http/Controllers/Auth/PasswordController.php

@@ -4,20 +4,13 @@
 
 use App\Http\Controllers\Controller;
 use Illuminate\Foundation\Auth\ResetsPasswords;
+use Illuminate\Http\Request;
+use App\Models\User;
+use Illuminate\Support\Facades\Mail;
+use Auth;
 
 class PasswordController extends Controller
 {
-    /*
-    |--------------------------------------------------------------------------
-    | Password Reset Controller
-    |--------------------------------------------------------------------------
-    |
-    | This controller is responsible for handling password reset requests
-    | and uses a simple trait to include this behavior. You're free to
-    | explore this trait and override any methods you wish to tweak.
-    |
-    */
-
     use ResetsPasswords;
 
     /**
@@ -27,11 +20,81 @@ class PasswordController extends Controller
      */
     protected $redirectTo = '/dashboard';
 
+    protected $request;
+    protected $user;
+
     /**
      * Create a new password controller instance.
      */
-    public function __construct()
+    public function __construct(User $user, Request $request)
     {
         $this->middleware('guest');
+        $this->request = $request;
+        $this->user = $user;
+    }
+
+    public function postEmail() 
+    {
+        error_reporting(-1);
+        ini_set('display_errors', 'On');
+
+
+        $params = $this->request->all();
+
+        $validator = $this->validate($this->request, [
+                'email' => 'required|email|exists:users'
+            ], [
+                'exists' => 'There is no user against the given email'
+            ]);
+
+        $user = $this->user->findByEmail($params['email']);
+        $user->token = str_random(32);
+        $user->save();
+
+        Mail::send('auth.emails.password', [
+            'token' => $user->token, 
+            'email' => $user->email
+        ], function($message) use ($user){
+            $message->to($user->email, $user->name)->subject('Dingo - Reset Password');
+        });
+
+        return redirect('/')->with('status', 'A reset link been sent to your email address');
+    }
+
+    /**
+     * Reset the given user's password.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return \Illuminate\Http\Response
+     */
+    public function reset()
+    {
+        $request = $this->request;
+        $this->validate($request, [
+            'token' => 'required',
+            'email' => 'required|email|exists:users',
+            'password' => 'required|confirmed|min:6',
+        ]);
+
+        $credentials = $request->only(
+            'email', 'password', 'password_confirmation', 'token'
+        );
+
+        $user = $this->user->findByEmail($credentials['email']);
+
+        if ($user->token != $credentials['token']) {
+            return redirect()->back()
+                ->withInput($request->only('email'))
+                ->withErrors(['email' => 'Invalid authentication token']);
+        }
+
+        $user->password = bcrypt($credentials['password']);
+        $user->token = '';
+
+        $user->save();
+
+        Auth::loginUsingId($user->id);
+
+        return redirect($this->redirectTo)->with('status', 'Password successfuly reset');
     }
 }

app/Models/User.php

@@ -22,4 +22,14 @@ class User extends Model implements AuthenticatableContract, CanResetPasswordCon
     protected $hidden = [
         'password', 'remember_token',
     ];
+
+    /**
+     * Finds the user by email
+     * @param  string $email Email of the user
+     * @return User
+     */
+    public function findByEmail($email) 
+    {
+        return $this->where('email', $email)->first();
+    }
 }

config/app.php

@@ -91,7 +91,7 @@
     |
     */
 
-    'key' => env('APP_KEY'),
+    'key' => env('APP_KEY', '9TSL9BsEjZyoM9BjX9du0XaLnCDi4m4Z'),
 
     'cipher' => 'AES-256-CBC',
 

database/migrations/2016_06_01_224735_add_reset_code_column_in_users_table.php

@@ -0,0 +1,31 @@
+<?php
+
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Database\Migrations\Migration;
+
+class AddResetCodeColumnInUsersTable extends Migration
+{
+    /**
+     * Run the migrations.
+     *
+     * @return void
+     */
+    public function up()
+    {
+        Schema::table('users', function (Blueprint $table) {
+            $table->string('token', 250);
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     *
+     * @return void
+     */
+    public function down()
+    {
+        Schema::table('users', function (Blueprint $table) {
+            $table->dropColumn('token');
+        });
+    }
+}

database/seeds/DatabaseSeeder.php

@@ -11,6 +11,6 @@ class DatabaseSeeder extends Seeder
      */
     public function run()
     {
-        // $this->call(UserTableSeeder::class);
+        $this->call(UserTableSeeder::class);
     }
 }

database/seeds/UserTableSeeder.php

@@ -0,0 +1,21 @@
+<?php
+
+use Illuminate\Database\Seeder;
+use App\Models\User;
+
+class UserTableSeeder extends Seeder
+{
+    /**
+     * Run the database seeds.
+     *
+     * @return void
+     */
+    public function run()
+    {
+        $user = new User();
+        $user->name = 'admin';
+        $user->email = '[email protected]';
+        $user->password = bcrypt('admin');
+        $user->save();
+    }
+}

public/index.php

@@ -1,5 +1,6 @@
 <?php
 
+
 /**
  * Laravel - A PHP Framework For Web Artisans
  *

resources/views/auth/emails/password.blade.php

@@ -1 +1 @@
-Click here to reset your password: <a href="{{ $link = url('password/reset', $token).'?email='.urlencode($user->getEmailForPasswordReset()) }}"> {{ $link }} </a>
+Click here to reset your password: <a href="{{ $link = url('password/reset', $token).'?email=' . $email }}"> {{ $link }} </a>

resources/views/auth/login.blade.php

@@ -3,6 +3,13 @@
 @section('content')
     <div class="row" style="position: relative; top: 100px;">
         <div class="col-lg-4 col-md-offset-4">
+
+            @if(Session::has('status'))
+                <div class="alert alert-success">
+                    <p>{{ Session::get('status') }}</p>
+                </div>
+            @endif
+
             <h1 style="margin-bottom: 25px; font-family: Arvo; font-size: 24px; font-weight: 600; color: #666666; ">
                 Login To Dingo</h1>
             <form role="form" method="POST" action="{{ url('/login') }}">