registration/lib/Controller/RegisterController.php

<?php
/**
 * ownCloud - registration
 *
 * This file is licensed under the Affero General Public License version 3 or
 * later. See the COPYING file.
 *
 * @author Pellaeon Lin <pellaeon@hs.ntnu.edu.tw>
 * @author Julius Härtl <jus@bitgrid.net>
 * @copyright Pellaeon Lin 2014
 */

namespace OCA\Registration\Controller;

use OCA\Registration\Db\Registration;
use OCA\Registration\Service\MailService;
use OCA\Registration\Service\RegistrationException;
use OCA\Registration\Service\RegistrationService;
use \OCP\IRequest;
use \OCP\AppFramework\Http\TemplateResponse;
use \OCP\AppFramework\Http\RedirectResponse;
use \OCP\AppFramework\Controller;
use OCP\IURLGenerator;
use \OCP\IConfig;
use \OCP\IL10N;

class RegisterController extends Controller {

	/** @var IL10N */
	private $l10n;
	/** @var IURLGenerator */
	private $urlgenerator;
	/** @var IConfig */
	private $config;
	/** @var RegistrationService */
	private $registrationService;
	/** @var MailService */
	private $mailService;


	public function __construct(
		$appName,
		IRequest $request,
		IL10N $l10n,
		IURLGenerator $urlgenerator,
		IConfig $config,
		RegistrationService $registrationService,
		MailService $mailService
	) {
		parent::__construct($appName, $request);
		$this->l10n = $l10n;
		$this->urlgenerator = $urlgenerator;
		$this->config = $config;
		$this->registrationService = $registrationService;
		$this->mailService = $mailService;
	}

	/**
	 * @NoCSRFRequired
	 * @PublicPage
	 *
	 * @param $errormsg
	 * @param $entered
	 * @return TemplateResponse
	 */
	public function askEmail($errormsg, $entered) {
		$params = [
			'errormsg' => $errormsg ? $errormsg : $this->request->getParam('errormsg'),
			'entered' => $entered ? $entered : $this->request->getParam('entered')
		];
		return new TemplateResponse('registration', 'register', $params, 'guest');
	}

	/**
	 * User POST email, if email is valid and not duplicate, we send token by mail
	 * @PublicPage
	 * @AnonRateThrottle(limit=5, period=1)
	 *
	 * @param string $email
	 * @return TemplateResponse
	 */
	public function validateEmail($email) {//TODO rename to receiveUserEmail
		if (!$this->registrationService->checkAllowedDomains($email)) {//TODO Duplicate code with Service
			return new TemplateResponse('registration', 'domains', [
				'domains' => $this->registrationService->getAllowedDomains()
			], 'guest');
		}
		try {
			$reg = $this->registrationService->validateEmail($email);
			if ($reg === true) {
				$registration = $this->registrationService->createRegistration($email);
				$this->mailService->sendTokenByMail($registration);
			} else {
				$this->registrationService->generateNewToken($reg);
				$this->mailService->sendTokenByMail($reg);
				return new TemplateResponse('registration', 'message', ['msg' =>
					$this->l10n->t('There is already a pending registration with this email, a new verification email has been sent to the address.')
				], 'guest');
			}
		} catch (RegistrationException $e) {
			return new TemplateResponse('registration', 'message', ['msg' =>
				$e->getMessage().'<br/>'.$e->getHint()
			], 'guest');
		}


		return new TemplateResponse('registration', 'message', ['msg' =>
			$this->l10n->t('Verification email successfully sent.')
		], 'guest');
	}

	/**
	 * @NoCSRFRequired
	 * @PublicPage
	 *
	 * @param $token
	 * @return TemplateResponse
	 */
	public function verifyToken($token) {
		try {
			/** @var Registration $registration */
			$registration = $this->registrationService->verifyToken($token);
			$this->registrationService->confirmEmail($registration);

			// create account without form if username/password are already stored
			if ($registration->getUsername() !== "" && $registration->getPassword() !== "") {
				$this->registrationService->createAccount($registration);
				return new TemplateResponse('registration', 'message',
					['msg' => $this->l10n->t('Your account has been successfully created, you can <a href="%s">log in now</a>.', [$this->urlgenerator->getAbsoluteURL('/')])],
					'guest'
				);
			}

			return new TemplateResponse('registration', 'form', [
				'email' => $registration->getEmail(),
				'email_is_login' => $this->config->getAppValue('registration', 'email_is_login', '0') === '1',
				'token' => $registration->getToken(),
			], 'guest');
		} catch (RegistrationException $exception) {
			return $this->renderError($exception->getMessage(), $exception->getHint());
		}
	}

	/**
	 * @PublicPage
	 * @UseSession
	 *
	 * @param $token
	 * @return RedirectResponse|TemplateResponse
	 */
	public function createAccount($token) {
		$registration = $this->registrationService->getRegistrationForToken($token);
		if ($this->config->getAppValue('registration', 'email_is_login', '0') === '1') {
			$username = $registration->getEmail();
		} else {
			$username = $this->request->getParam('username');
		}
		$password = $this->request->getParam('password');

		try {
			$user = $this->registrationService->createAccount($registration, $username, $password);
		} catch (\Exception $exception) {
			// Render form with previously sent values
			return new TemplateResponse('registration', 'form',
				[
					'email' => $registration->getEmail(),
					'entered_data' => ['user' => $username],
					'errormsgs' => [$exception->getMessage()],
					'token' => $token
				], 'guest');
		}

		if ($user->isEnabled()) {
			// log the user
			return $this->registrationService->loginUser($user->getUID(), $username, $password, false);
		} else {
			// warn the user their account needs admin validation
			return new TemplateResponse(
				'registration',
				'message',
				['msg' => $this->l10n->t("Your account has been successfully created, but it still needs approval from an administrator.")],
				'guest');
		}
	}

	private function renderError($error, $hint="") {
		return new TemplateResponse('', 'error', [
			'errors' => [[
				'error' => $error,
				'hint' => $hint
			]]
		], 'error');
	}
}