xref: /webtrees/app/Http/RequestHandlers/VerifyEmail.php (revision d11be7027e34e3121be11cc025421873364403f9) 
1<?php
2
3/**
4 * webtrees: online genealogy
5 * Copyright (C) 2023 webtrees development team
6 * This program is free software: you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation, either version 3 of the License, or
9 * (at your option) any later version.
10 * This program is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 * GNU General Public License for more details.
14 * You should have received a copy of the GNU General Public License
15 * along with this program. If not, see <https://www.gnu.org/licenses/>.
16 */
17
18declare(strict_types=1);
19
20namespace Fisharebest\Webtrees\Http\RequestHandlers;
21
22use Fisharebest\Webtrees\Contracts\UserInterface;
23use Fisharebest\Webtrees\Http\ViewResponseTrait;
24use Fisharebest\Webtrees\I18N;
25use Fisharebest\Webtrees\Log;
26use Fisharebest\Webtrees\NoReplyUser;
27use Fisharebest\Webtrees\Services\EmailService;
28use Fisharebest\Webtrees\Services\MessageService;
29use Fisharebest\Webtrees\Services\UserService;
30use Fisharebest\Webtrees\SiteUser;
31use Fisharebest\Webtrees\User;
32use Fisharebest\Webtrees\Validator;
33use Illuminate\Database\Capsule\Manager as DB;
34use Psr\Http\Message\ResponseInterface;
35use Psr\Http\Message\ServerRequestInterface;
36use Psr\Http\Server\RequestHandlerInterface;
37
38/**
39 * Acknowledge an email verification code.
40 */
41class VerifyEmail implements RequestHandlerInterface
42{
43    use ViewResponseTrait;
44
45    private EmailService $email_service;
46
47    private UserService $user_service;
48
49    /**
50     * MessageController constructor.
51     *
52     * @param EmailService $email_service
53     * @param UserService  $user_service
54     */
55    public function __construct(EmailService $email_service, UserService $user_service)
56    {
57        $this->email_service = $email_service;
58        $this->user_service  = $user_service;
59    }
60
61    /**
62     * Respond to a verification link that was emailed to a user.
63     *
64     * @param ServerRequestInterface $request
65     *
66     * @return ResponseInterface
67     */
68    public function handle(ServerRequestInterface $request): ResponseInterface
69    {
70        $token    = $request->getAttribute('token');
71        $tree     = Validator::attributes($request)->treeOptional();
72        $username = $request->getAttribute('username');
73
74        $title = I18N::translate('User verification');
75
76        $user = $this->user_service->findByUserName($username);
77
78        if ($user instanceof User && $user->getPreference(UserInterface::PREF_VERIFICATION_TOKEN) === $token) {
79            $old_language = I18N::languageTag();
80
81            foreach ($this->user_service->administrators() as $administrator) {
82                // switch language to administrator settings
83                I18N::init($administrator->getPreference(UserInterface::PREF_LANGUAGE));
84
85                $base_url = Validator::attributes($request)->string('base_url');
86
87                /* I18N: %s is a server name/URL */
88                $subject = I18N::translate('New user at %s', $base_url);
89
90                $this->email_service->send(
91                    new SiteUser(),
92                    $administrator,
93                    new NoReplyUser(),
94                    $subject,
95                    view('emails/verify-notify-text', ['user' => $user]),
96                    view('emails/verify-notify-html', ['user' => $user])
97                );
98
99                $mail1_method = $administrator->getPreference('CONTACT_METHOD');
100
101                if (
102                    $mail1_method !== MessageService::CONTACT_METHOD_EMAIL &&
103                    $mail1_method !== MessageService::CONTACT_METHOD_MAILTO &&
104                    $mail1_method !== MessageService::CONTACT_METHOD_NONE
105                ) {
106                    DB::table('message')->insert([
107                        'sender'     => $username,
108                        'ip_address' => $request->getAttribute('client-ip'),
109                        'user_id'    => $administrator->id(),
110                        'subject'    => $subject,
111                        'body'       => view('emails/verify-notify-text', ['user' => $user]),
112                    ]);
113                }
114            }
115            I18N::init($old_language);
116
117            $user->setPreference(UserInterface::PREF_IS_EMAIL_VERIFIED, '1');
118            $user->setPreference(UserInterface::PREF_TIMESTAMP_REGISTERED, date('U'));
119            $user->setPreference(UserInterface::PREF_VERIFICATION_TOKEN, '');
120
121            Log::addAuthenticationLog('User ' . $username . ' verified their email address');
122
123            return $this->viewResponse('verify-success-page', [
124                'title' => $title,
125                'tree'  => $tree,
126            ]);
127        }
128
129        return $this->viewResponse('verify-failure-page', [
130            'title' => $title,
131            'tree'  => $tree,
132        ]);
133    }
134}
135