TRF Certest first commit

app/Http/Controllers/Api/Profile/AuthDetailsController.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace Vanguard\Http\Controllers\Api\Profile;
+
+use Vanguard\Http\Controllers\Api\ApiController;
+use Vanguard\Http\Requests\User\UpdateProfileLoginDetailsRequest;
+use Vanguard\Http\Resources\UserResource;
+use Vanguard\Repositories\User\UserRepository;
+
+class AuthDetailsController extends ApiController
+{
+    public function update(UpdateProfileLoginDetailsRequest $request, UserRepository $users): UserResource
+    {
+        $user = $request->user();
+
+        $data = $request->only(['email', 'username', 'password']);
+
+        $user = $users->update($user->id, $data);
+
+        return new UserResource($user);
+    }
+}

app/Http/Controllers/Api/Profile/AvatarController.php

@@ -0,0 +1,72 @@
+<?php
+
+namespace Vanguard\Http\Controllers\Api\Profile;
+
+use Illuminate\Http\Request;
+use Vanguard\Events\User\ChangedAvatar;
+use Vanguard\Http\Controllers\Api\ApiController;
+use Vanguard\Http\Requests\User\UploadAvatarRawRequest;
+use Vanguard\Http\Resources\UserResource;
+use Vanguard\Repositories\User\UserRepository;
+use Vanguard\Services\Upload\UserAvatarManager;
+
+class AvatarController extends ApiController
+{
+    public function __construct(
+        private readonly UserRepository $users,
+        private readonly UserAvatarManager $avatarManager
+    ) {
+    }
+
+    public function update(UploadAvatarRawRequest $request): UserResource
+    {
+        $name = $this->avatarManager->uploadAndCropAvatar(
+            $request->file('file')
+        );
+
+        $user = $this->users->update(
+            auth()->id(),
+            ['avatar' => $name]
+        );
+
+        event(new ChangedAvatar);
+
+        return new UserResource($user);
+    }
+
+    public function updateExternal(Request $request): UserResource
+    {
+        $this->validate($request, [
+            'url' => 'required|url',
+        ]);
+
+        $this->avatarManager->deleteAvatarIfUploaded(
+            auth()->user()
+        );
+
+        $user = $this->users->update(
+            auth()->id(),
+            ['avatar' => $request->url]
+        );
+
+        event(new ChangedAvatar);
+
+        return new UserResource($user);
+    }
+
+    public function destroy(): UserResource
+    {
+        $user = auth()->user();
+
+        $this->avatarManager->deleteAvatarIfUploaded($user);
+
+        $user = $this->users->update(
+            $user->id,
+            ['avatar' => null]
+        );
+
+        event(new ChangedAvatar);
+
+        return new UserResource($user);
+    }
+}

app/Http/Controllers/Api/Profile/DetailsController.php

@@ -0,0 +1,39 @@
+<?php
+
+namespace Vanguard\Http\Controllers\Api\Profile;
+
+use Vanguard\Events\User\UpdatedProfileDetails;
+use Vanguard\Http\Controllers\Api\ApiController;
+use Vanguard\Http\Requests\User\UpdateProfileDetailsRequest;
+use Vanguard\Http\Resources\UserResource;
+use Vanguard\Repositories\User\UserRepository;
+
+class DetailsController extends ApiController
+{
+    public function index(): UserResource
+    {
+        return new UserResource(auth()->user());
+    }
+
+    public function update(UpdateProfileDetailsRequest $request, UserRepository $users): UserResource
+    {
+        $user = $request->user();
+
+        $data = collect($request->all());
+
+        $data = $data->only([
+            'first_name', 'last_name', 'birthday',
+            'phone', 'address', 'country_id',
+        ])->toArray();
+
+        if (! isset($data['country_id'])) {
+            $data['country_id'] = $user->country_id;
+        }
+
+        $user = $users->update($user->id, $data);
+
+        event(new UpdatedProfileDetails);
+
+        return new UserResource($user);
+    }
+}

app/Http/Controllers/Api/Profile/SessionsController.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace Vanguard\Http\Controllers\Api\Profile;
+
+use Vanguard\Http\Controllers\Api\ApiController;
+use Vanguard\Http\Resources\SessionResource;
+use Vanguard\Repositories\Session\SessionRepository;
+
+class SessionsController extends ApiController
+{
+    public function __construct()
+    {
+        $this->middleware('auth');
+        $this->middleware('session.database');
+    }
+
+    public function index(SessionRepository $sessions): \Illuminate\Http\Resources\Json\AnonymousResourceCollection
+    {
+        $sessions = $sessions->getUserSessions(auth()->id());
+
+        return SessionResource::collection($sessions);
+    }
+}

app/Http/Controllers/Api/Profile/TwoFactorController.php

@@ -0,0 +1,74 @@
+<?php
+
+namespace Vanguard\Http\Controllers\Api\Profile;
+
+use Illuminate\Validation\ValidationException;
+use Laravel\Fortify\Actions\ConfirmTwoFactorAuthentication;
+use Laravel\Fortify\Actions\EnableTwoFactorAuthentication;
+use Vanguard\Events\User\TwoFactorDisabled;
+use Vanguard\Events\User\TwoFactorEnabled;
+use Vanguard\Http\Controllers\Api\ApiController;
+use Vanguard\Http\Requests\TwoFactor\VerifyTwoFactorTokenRequest;
+use Vanguard\Http\Resources\UserResource;
+
+class TwoFactorController extends ApiController
+{
+    public function update(EnableTwoFactorAuthentication $enable)
+    {
+        $user = auth()->user();
+
+        if ($user->twoFactorEnabled()) {
+            return $this->setStatusCode(422)
+                ->respondWithError(trans('auth.2fa.already_enabled'));
+        }
+
+        $enable($user);
+
+        return $this->respondWithArray([
+            'message' => trans('auth.2fa.token_sent'),
+            'qrcode' => $user->twoFactorQrCodeSvg(),
+        ]);
+    }
+
+    /**
+     * Verify provided 2FA token.
+     */
+    public function verify(VerifyTwoFactorTokenRequest $request, ConfirmTwoFactorAuthentication $confirm): UserResource|\Illuminate\Http\JsonResponse
+    {
+        $user = auth()->user();
+
+        try {
+            $confirm($user, $request->input('code'));
+        } catch (ValidationException $e) {
+            return $this->setStatusCode(422)
+                ->respondWithError(trans('auth.2fa.invalid_token'));
+        }
+
+        event(new TwoFactorEnabled);
+
+        return new UserResource($user);
+    }
+
+    /**
+     * Disable 2FA for currently authenticated user.
+     */
+    public function destroy(): UserResource|\Illuminate\Http\JsonResponse
+    {
+        $user = auth()->user();
+
+        if (!$user->twoFactorEnabled()) {
+            return $this->setStatusCode(422)
+                ->respondWithError(trans('auth.2fa.not_enabled'));
+        }
+
+        $user->forceFill([
+            'two_factor_secret' => null,
+            'two_factor_recovery_codes' => null,
+            'two_factor_confirmed_at' => null,
+        ])->save();
+
+        event(new TwoFactorDisabled);
+
+        return new UserResource($user);
+    }
+}