ChangePasswordFormTrait.php

<?php

declare(strict_types=1);

namespace ADT\FancyAdmin\UI\Components\Forms\ChangePassword;

use ADT\FancyAdmin\DI\Injects\AuthenticatorInject;
use ADT\FancyAdmin\DI\Injects\BreachedPasswordCheckerInject;
use ADT\FancyAdmin\DI\Injects\ConfigurationQueryFactoryInject;
use ADT\FancyAdmin\DI\Injects\EntityManagerInject;
use ADT\FancyAdmin\DI\Injects\FancyAdminInject;
use ADT\FancyAdmin\DI\Injects\SecurityUserInject;
use ADT\FancyAdmin\Model\Entities\Identity;
use ADT\Forms\Form;

trait ChangePasswordFormTrait
{
	use AuthenticatorInject;
	use BreachedPasswordCheckerInject;
	use ConfigurationQueryFactoryInject;
	use FancyAdminInject;
	use SecurityUserInject;
	use EntityManagerInject;

	public function initForm(Form $form): void
	{
		$form->addPassword('currentPassword', 'fcadmin.forms.changePassword.labels.currentPassword')
			->setRequired('fcadmin.forms.changePassword.errors.required');

		$form->addPassword('password', 'fcadmin.forms.changePassword.labels.password')
			->setRequired('fcadmin.forms.changePassword.errors.required')
			->addRule($form::MinLength, 'fcadmin.forms.newPassword.errors.minLength', 8);

		$form->addPassword('passwordRepeat', 'fcadmin.forms.changePassword.labels.passwordRepeat')
			->setRequired('fcadmin.forms.changePassword.errors.required');

		$form->addSubmit('submit', 'fcadmin.forms.changePassword.labels.submit');
	}

	public function validateForm(array $values, Form $form): void
	{
		/** @var Identity $identity */
		$identity = $this->getEntity();

		if (!password_verify($values['currentPassword'], $identity->getPassword())) {
			$form->getComponentTextInput('currentPassword')->addError('fcadmin.forms.changePassword.errors.wrongPassword');
		}

		if ($values['password'] !== $values['passwordRepeat']) {
			$form->getComponentTextInput('passwordRepeat')->addError('fcadmin.forms.newPassword.errors.noMatch');
		}

		if ($this->_breachedPasswordChecker->isBreached($values['password'])) {
			$form->getComponentTextInput('password')->addError('fcadmin.forms.newPassword.errors.breachedPassword');
		}

		$this->validatePasswordPolicy($values['password'], $form);
	}

	private function validatePasswordPolicy(string $password, Form $form): void
	{
		/** @var Identity $identity */
		$identity = $this->getEntity();

		if ($identity->isAdmin()) {
			$policyKey = 'password.policy.admin';
		} elseif ($identity->isAllowed($this->_fancyAdmin->getBackofficeAclResource())) {
			$policyKey = 'password.policy.backoffice';
		} else {
			return;
		}

		$config = $this->_configurationQueryFactory->create()->byKey($policyKey)->fetchOneOrNull();
		if (!$config) {
			return;
		}

		$policy = json_decode($config->getValue(), true);
		if (!($policy['enabled'] ?? false)) {
			return;
		}

		$field = $form->getComponentTextInput('password');

		if (mb_strlen($password) < ($policy['minLength'] ?? 8)) {
			$field->addError($this->getTranslator()->translate('fcadmin.forms.newPassword.errors.minLength', $policy['minLength']));
		}
		if (($policy['requireUppercase'] ?? false) && !preg_match('/[A-Z]/', $password)) {
			$field->addError('fcadmin.forms.newPassword.errors.requireUppercase');
		}
		if (($policy['requireLowercase'] ?? false) && !preg_match('/[a-z]/', $password)) {
			$field->addError('fcadmin.forms.newPassword.errors.requireLowercase');
		}
		if (($policy['requireDigit'] ?? false) && !preg_match('/\d/', $password)) {
			$field->addError('fcadmin.forms.newPassword.errors.requireDigit');
		}
		if (($policy['requireSpecialChar'] ?? false) && !preg_match('/[^a-zA-Z0-9]/', $password)) {
			$field->addError('fcadmin.forms.newPassword.errors.requireSpecialChar');
		}
	}

	public function processForm(array $values): void
	{
		/** @var Identity $identity */
		$identity = $this->getEntity();

		$identity->setPassword($values['password']);
		$this->_em->flush();

		$this->_authenticator->clearIdentity($identity->getAuthObjectId());

		$this->_securityUser->logout(true);
		$this->_securityUser->login($identity, context: $this->_fancyAdmin->getContext());
	}

	public function getEntityClass(): ?string
	{
		return $this->_em->findEntityClassByInterface(Identity::class);
	}
}