misc_pterodactyl-panel/app/Repositories/UserRepository.php

183 lines
6.4 KiB
PHP
Raw Normal View History

<?php
2016-01-20 00:10:39 +00:00
/**
2016-01-20 21:05:16 +00:00
* Pterodactyl - Panel
2017-01-24 22:57:08 +00:00
* Copyright (c) 2015 - 2017 Dane Everitt <dane@daneeveritt.com>
2016-12-07 22:46:38 +00:00
* Some Modifications (c) 2015 Dylan Seidt <dylan.seidt@gmail.com>.
2016-01-20 00:10:39 +00:00
*
* Permission is hereby granted, free of charge, to any person obtaining a copy
* of this software and associated documentation files (the "Software"), to deal
* in the Software without restriction, including without limitation the rights
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
* copies of the Software, and to permit persons to whom the Software is
* furnished to do so, subject to the following conditions:
2016-01-20 00:10:39 +00:00
*
* The above copyright notice and this permission notice shall be included in all
* copies or substantial portions of the Software.
2016-01-20 00:10:39 +00:00
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
* SOFTWARE.
2016-01-20 00:10:39 +00:00
*/
2016-12-07 22:46:38 +00:00
namespace Pterodactyl\Repositories;
2016-01-15 04:13:26 +00:00
use DB;
2016-12-07 22:46:38 +00:00
use Auth;
use Hash;
2017-01-12 20:40:24 +00:00
use Settings;
2016-12-07 22:46:38 +00:00
use Validator;
2016-01-15 04:13:26 +00:00
use Pterodactyl\Models;
use Pterodactyl\Services\UuidService;
2016-12-07 22:46:38 +00:00
use Pterodactyl\Exceptions\DisplayException;
use Pterodactyl\Exceptions\DisplayValidationException;
class UserRepository
{
/**
* Creates a user on the panel. Returns the created user's ID.
*
2017-03-19 23:36:50 +00:00
* @param array $data
* @return \Pterodactyl\Models\User
*
* @throws \Pterodactyl\Exceptions\DisplayValidationException
*/
2017-01-12 20:40:24 +00:00
public function create(array $data)
{
2017-01-12 20:40:24 +00:00
$validator = Validator::make($data, [
'email' => 'required|email|unique:users,email',
2017-01-12 20:40:24 +00:00
'username' => 'required|string|between:1,255|unique:users,username|' . Models\User::USERNAME_RULES,
'name_first' => 'required|string|between:1,255',
'name_last' => 'required|string|between:1,255',
'password' => 'sometimes|nullable|' . Models\User::PASSWORD_RULES,
'root_admin' => 'required|boolean',
2017-01-12 20:40:24 +00:00
'custom_id' => 'sometimes|nullable|unique:users,id',
]);
// Run validator, throw catchable and displayable exception if it fails.
// Exception includes a JSON result of failed validation rules.
if ($validator->fails()) {
throw new DisplayValidationException(json_encode($validator->errors()));
}
2016-01-19 00:57:10 +00:00
DB::beginTransaction();
try {
$user = new Models\User;
$uuid = new UuidService;
// Support for API Services
2017-01-12 20:40:24 +00:00
if (isset($data['custom_id']) && ! is_null($data['custom_id'])) {
$user->id = $token;
}
2017-01-12 20:40:24 +00:00
// UUIDs are not mass-fillable.
$user->uuid = $uuid->generate('users', 'uuid');
2017-01-12 20:40:24 +00:00
$user->fill([
'email' => $data['email'],
'username' => $data['username'],
'name_first' => $data['name_first'],
'name_last' => $data['name_last'],
'password' => (empty($data['password'])) ? 'unset' : Hash::make($data['password']),
2017-01-12 20:40:24 +00:00
'root_admin' => $data['root_admin'],
'language' => Settings::get('default_language', 'en'),
]);
2017-01-12 20:40:24 +00:00
$user->save();
2016-01-19 00:57:10 +00:00
DB::commit();
2016-12-07 22:46:38 +00:00
return $user;
} catch (\Exception $ex) {
2016-01-19 00:57:10 +00:00
DB::rollBack();
throw $ex;
}
}
/**
* Updates a user on the panel.
*
2017-03-19 23:36:50 +00:00
* @param int $id
* @param array $data
* @return \Pterodactyl\Models\User
2017-03-19 23:36:50 +00:00
*
* @throws \Pterodactyl\Exceptions\DisplayValidationException
*/
2016-01-15 04:13:26 +00:00
public function update($id, array $data)
{
$user = Models\User::findOrFail($id);
2016-01-15 04:13:26 +00:00
$validator = Validator::make($data, [
'email' => 'sometimes|required|email|unique:users,email,' . $id,
2017-01-12 20:40:24 +00:00
'username' => 'sometimes|required|string|between:1,255|unique:users,username,' . $user->id . '|' . Models\User::USERNAME_RULES,
'name_first' => 'sometimes|required|string|between:1,255',
'name_last' => 'sometimes|required|string|between:1,255',
'password' => 'sometimes|nullable|' . Models\User::PASSWORD_RULES,
'root_admin' => 'sometimes|required|boolean',
'language' => 'sometimes|required|string|min:1|max:5',
'use_totp' => 'sometimes|required|boolean',
2016-12-07 22:46:38 +00:00
'totp_secret' => 'sometimes|required|size:16',
2016-01-15 04:13:26 +00:00
]);
// Run validator, throw catchable and displayable exception if it fails.
// Exception includes a JSON result of failed validation rules.
if ($validator->fails()) {
throw new DisplayValidationException(json_encode($validator->errors()));
}
2017-01-12 20:40:24 +00:00
// The password and root_admin fields are not mass assignable.
if (! empty($data['password'])) {
2016-02-04 16:11:38 +00:00
$data['password'] = Hash::make($data['password']);
2017-01-12 20:40:24 +00:00
} else {
unset($data['password']);
}
2017-04-09 23:16:39 +00:00
$user->fill($data)->save();
Refactor to use more laravel logic and improve compatibility with older PHP versions (#206) * Fix @param namespaces for PHPDocs in ServerPolicy * Reduce permission check duplication in ServerPolicy This introduces a new checkPermission method to reduce code duplication when checking for permissions. * Simplify logic to list accessible servers for the user We can directly use the pluck function that laravel collections provide to simplify the logic. * Fix pagination issue when databases/servers exceed 20 Laravels strips out the currently selected tab (or any GET query for that matter) by default when using pagination. the appends() methods helps with keeping that information. * Refactor unnecessary array_merge calls We can just append to the array instead of constantly merging a new copy. * Fix accessing “API Access” on some versions of PHP The “new” word is reserved and should not be used as a method name. http://stackoverflow.com/questions/9575590/why-am-i-getting-an-unexpected-t-new-error-in-php * Fix revoking API keys on older versions of php (5.6) “string” was not a valid function argument type yet, so revoking keys results in an error on older installations. * Fix issues with API due to methods named “list” “list” is yet another reserved keyword in PHP and messes up older installations of PHP (5.6). This renames all methods named “list” to “lists”. The API route names are left untouched (e.g. still called “api.admin.users.list”). * Refactor and shorten some API logic Used laravel collection methods where applicable to directly transform the values instead of converting back and forth. This also removes some dead variables that were never used as well as getting rid of a n+1 problem in the Service API (loading service variables afterwards, not during the model creation). * Return model save status in repositories where applicable * Fix typo in ServicePolicy#powerStart * Apply StyleCI corrections
2016-12-12 19:30:57 +00:00
return $user;
}
/**
2017-03-19 23:36:50 +00:00
* Deletes a user on the panel.
*
2016-12-07 22:46:38 +00:00
* @param int $id
2017-03-19 23:36:50 +00:00
* @return void
* @todo Move user self-deletion checking to the controller, rather than the repository.
*
* @throws \Pterodactyl\Exceptions\DisplayException
*/
public function delete($id)
{
$user = Models\User::findOrFail($id);
2017-02-18 00:28:23 +00:00
if (Models\Server::where('owner_id', $id)->count() > 0) {
2016-01-15 04:13:26 +00:00
throw new DisplayException('Cannot delete a user with active servers attached to thier account.');
}
2017-03-19 23:36:50 +00:00
if (! is_null(Auth::user()) && (int) Auth::user()->id === (int) $id) {
2016-12-07 22:46:38 +00:00
throw new DisplayException('Cannot delete your own account.');
}
2016-01-15 04:13:26 +00:00
DB::beginTransaction();
try {
foreach (Models\Subuser::with('permissions')->where('user_id', $id)->get() as &$subuser) {
foreach ($subuser->permissions as &$permission) {
2017-02-18 00:28:23 +00:00
$permission->delete();
}
$subuser->delete();
}
$user->delete();
2016-01-15 04:13:26 +00:00
DB::commit();
} catch (\Exception $ex) {
DB::rollBack();
2016-01-15 04:13:26 +00:00
throw $ex;
}
}
}