TRF Certest first commit

app/Http/Requests/Auth/ApiLoginRequest.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace Vanguard\Http\Requests\Auth;
+
+class ApiLoginRequest extends LoginRequest
+{
+    public function rules(): array
+    {
+        return array_merge(parent::rules(), [
+            'device_name' => 'required',
+        ]);
+    }
+
+    public function getCredentials(): array
+    {
+        $credentials = parent::getCredentials();
+
+        unset($credentials['password']);
+
+        return $credentials;
+    }
+}

app/Http/Requests/Auth/ApiVerifyEmailRequest.php

@@ -0,0 +1,16 @@
+<?php
+
+namespace Vanguard\Http\Requests\Auth;
+
+class ApiVerifyEmailRequest extends LoginRequest
+{
+    public function rules(): array
+    {
+        return [
+            'id' => 'required',
+            'hash' => 'required',
+            'expires' => 'required',
+            'signature' => 'required',
+        ];
+    }
+}

app/Http/Requests/Auth/LoginRequest.php

@@ -0,0 +1,45 @@
+<?php
+
+namespace Vanguard\Http\Requests\Auth;
+
+use Illuminate\Contracts\Validation\Factory as ValidationFactory;
+use Vanguard\Http\Requests\Request;
+
+class LoginRequest extends Request
+{
+    public function rules(): array
+    {
+        return [
+            'username' => 'required',
+            'password' => 'required',
+        ];
+    }
+
+    public function getCredentials(): array
+    {
+        // The form field for providing username or password
+        // have name of "username", however, in order to support
+        // logging users in with both (username and email)
+        // we have to check if user has entered one or another
+        $username = $this->get('username');
+
+        if ($this->isEmail($username)) {
+            return [
+                'email' => $username,
+                'password' => $this->get('password'),
+            ];
+        }
+
+        return $this->only('username', 'password');
+    }
+
+    private function isEmail($param): bool
+    {
+        $factory = $this->container->make(ValidationFactory::class);
+
+        return ! $factory->make(
+            ['username' => $param],
+            ['username' => 'email']
+        )->fails();
+    }
+}

app/Http/Requests/Auth/PasswordRemindRequest.php

@@ -0,0 +1,15 @@
+<?php
+
+namespace Vanguard\Http\Requests\Auth;
+
+use Vanguard\Http\Requests\Request;
+
+class PasswordRemindRequest extends Request
+{
+    public function rules(): array
+    {
+        return [
+            'email' => 'required|email|exists:users,email',
+        ];
+    }
+}

app/Http/Requests/Auth/PasswordResetRequest.php

@@ -0,0 +1,37 @@
+<?php
+
+namespace Vanguard\Http\Requests\Auth;
+
+use Vanguard\Http\Requests\Request;
+
+class PasswordResetRequest extends Request
+{
+    public function rules(): array
+    {
+        return [
+            'token' => 'required',
+            'email' => 'required|email',
+            'password' => [
+                'required',
+                'confirmed',
+                'min:8',
+                'regex:/^(?=.*[A-Za-z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{8,}$/'
+            ],
+        ];
+    }
+
+    public function messages(): array
+    {
+        return [
+            'password.regex' => __('The password must be at least 8 characters long and contain at least one number and one special character (@$!%*?&).'),
+        ];
+    }
+
+    /**
+     * Get the password reset fields.
+     */
+    public function credentials(): array
+    {
+        return $this->only('email', 'password', 'password_confirmation', 'token');
+    }
+}

app/Http/Requests/Auth/RegisterRequest.php

@@ -0,0 +1,55 @@
+<?php
+
+namespace Vanguard\Http\Requests\Auth;
+
+use Vanguard\Http\Requests\Request;
+use Vanguard\Support\Enum\UserStatus;
+
+class RegisterRequest extends Request
+{
+    public function rules(): array
+    {
+        $rules = [
+            'email' => 'required|email|unique:users,email',
+            'username' => 'required|unique:users,username',
+            'password' => [ 
+                'required', 
+                'confirmed', 
+                'min:8', 
+                'regex:/^(?=.*[A-Za-z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{8,}$/'
+            ],
+        ];
+
+        if (setting('registration.captcha.enabled')) {
+            $rules['g-recaptcha-response'] = 'required|captcha';
+        }
+
+        if (setting('tos')) {
+            $rules['tos'] = 'accepted';
+        }
+
+        return $rules;
+    }
+
+    public function messages(): array
+    {
+        return [
+            'tos.accepted' => __('You have to accept Terms of Service.'),
+            'password.regex' => __('The password must be at least 8 characters long and contain at least one number and one special character (@$!%*?&).'),
+        ];
+    }
+
+    public function validFormData(): array
+    {
+        // Determine user status. User's status will be set to UNCONFIRMED
+        // if he has to confirm his email or to ACTIVE if email confirmation is not required
+        $status = setting('reg_email_confirmation')
+            ? UserStatus::UNCONFIRMED
+            : UserStatus::ACTIVE;
+
+        return array_merge($this->only('email', 'username', 'password'), [
+            'status' => $status,
+            'email_verified_at' => setting('reg_email_confirmation') ? null : now(),
+        ]);
+    }
+}

app/Http/Requests/Auth/Social/ApiAuthenticateRequest.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace Vanguard\Http\Requests\Auth\Social;
+
+use Illuminate\Validation\Rule;
+use Vanguard\Http\Requests\Request;
+
+class ApiAuthenticateRequest extends Request
+{
+    public function rules(): array
+    {
+        return [
+            'network' => [
+                'required',
+                Rule::in(config('auth.social.providers')),
+            ],
+            'social_token' => 'required',
+            'device_name' => 'required',
+        ];
+    }
+}

app/Http/Requests/Auth/Social/SaveEmailRequest.php

@@ -0,0 +1,15 @@
+<?php
+
+namespace Vanguard\Http\Requests\Auth\Social;
+
+use Vanguard\Http\Requests\Request;
+
+class SaveEmailRequest extends Request
+{
+    public function rules(): array
+    {
+        return [
+            'email' => 'required|email|unique:users,email',
+        ];
+    }
+}

app/Http/Requests/Permission/BasePermissionRequest.php

@@ -0,0 +1,15 @@
+<?php
+
+namespace Vanguard\Http\Requests\Permission;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+class BasePermissionRequest extends FormRequest
+{
+    public function messages(): array
+    {
+        return [
+            'name.unique' => __('Permission with this name already exists.'),
+        ];
+    }
+}

app/Http/Requests/Permission/CreatePermissionRequest.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace Vanguard\Http\Requests\Permission;
+
+use Illuminate\Validation\Rule;
+use Vanguard\Rules\ValidPermissionName;
+
+class CreatePermissionRequest extends BasePermissionRequest
+{
+    public function rules(): array
+    {
+        return [
+            'name' => [
+                'required',
+                new ValidPermissionName,
+                Rule::unique('permissions', 'name'),
+            ],
+        ];
+    }
+}

app/Http/Requests/Permission/RemovePermissionRequest.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace Vanguard\Http\Requests\Permission;
+
+use Vanguard\Http\Requests\Request;
+
+class RemovePermissionRequest extends Request
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return $this->route('permission')->removable;
+    }
+
+    public function rules(): array
+    {
+        return [];
+    }
+}

app/Http/Requests/Permission/UpdatePermissionRequest.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace Vanguard\Http\Requests\Permission;
+
+use Illuminate\Validation\Rule;
+use Vanguard\Rules\ValidPermissionName;
+
+class UpdatePermissionRequest extends BasePermissionRequest
+{
+    public function rules(): array
+    {
+        return [
+            'name' => [
+                'required',
+                new ValidPermissionName,
+                Rule::unique('permissions', 'name')->ignore($this->route('permission')->id),
+            ],
+        ];
+    }
+}

app/Http/Requests/Request.php

@@ -0,0 +1,16 @@
+<?php
+
+namespace Vanguard\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+
+abstract class Request extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return true;
+    }
+}

app/Http/Requests/Role/CreateRoleRequest.php

@@ -0,0 +1,15 @@
+<?php
+
+namespace Vanguard\Http\Requests\Role;
+
+use Vanguard\Http\Requests\Request;
+
+class CreateRoleRequest extends Request
+{
+    public function rules(): array
+    {
+        return [
+            'name' => 'required|regex:/^[a-zA-Z0-9\-_\.]+$/|unique:roles,name',
+        ];
+    }
+}

app/Http/Requests/Role/RemoveRoleRequest.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace Vanguard\Http\Requests\Role;
+
+use Vanguard\Http\Requests\Request;
+
+class RemoveRoleRequest extends Request
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return $this->route('role')->removable;
+    }
+
+    public function rules(): array
+    {
+        return [];
+    }
+}

app/Http/Requests/Role/UpdateRolePermissionsRequest.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace Vanguard\Http\Requests\Role;
+
+use Illuminate\Validation\Rule;
+use Vanguard\Http\Requests\Request;
+use Vanguard\Permission;
+
+class UpdateRolePermissionsRequest extends Request
+{
+    public function rules(): array
+    {
+        $permissions = Permission::pluck('id')->toArray();
+
+        return [
+            'permissions' => 'required|array',
+            'permissions.*' => Rule::in($permissions),
+        ];
+    }
+
+    public function messages(): array
+    {
+        return [
+            'permissions.*' => 'Provided permission does not exist.',
+        ];
+    }
+}

app/Http/Requests/Role/UpdateRoleRequest.php

@@ -0,0 +1,17 @@
+<?php
+
+namespace Vanguard\Http\Requests\Role;
+
+use Vanguard\Http\Requests\Request;
+
+class UpdateRoleRequest extends Request
+{
+    public function rules(): array
+    {
+        $role = $this->route('role');
+
+        return [
+            'name' => 'required|regex:/^[a-zA-Z0-9\-_\.]+$/|unique:roles,name,'.$role->id,
+        ];
+    }
+}

app/Http/Requests/TwoFactor/DisableTwoFactorRequest.php

@@ -0,0 +1,7 @@
+<?php
+
+namespace Vanguard\Http\Requests\TwoFactor;
+
+class DisableTwoFactorRequest extends TwoFactorRequest
+{
+}

app/Http/Requests/TwoFactor/EnableTwoFactorRequest.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace Vanguard\Http\Requests\TwoFactor;
+
+class EnableTwoFactorRequest extends TwoFactorRequest
+{
+    public function rules(): array
+    {
+        return [];
+    }
+}

app/Http/Requests/TwoFactor/ReSendTwoFactorTokenRequest.php

@@ -0,0 +1,7 @@
+<?php
+
+namespace Vanguard\Http\Requests\TwoFactor;
+
+class ReSendTwoFactorTokenRequest extends TwoFactorRequest
+{
+}

app/Http/Requests/TwoFactor/TwoFactorLoginRequest.php

@@ -0,0 +1,64 @@
+<?php
+
+namespace Vanguard\Http\Requests\TwoFactor;
+
+use Laravel\Fortify\Contracts\TwoFactorAuthenticationProvider;
+use Vanguard\Http\Requests\Request;
+
+class TwoFactorLoginRequest extends Request
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     *
+     * @return bool
+     */
+    public function authorize(): bool
+    {
+        if ($userId = $this->get('user')) {
+            // Only users with "users.manage" permission can enable 2FA for other users.
+            return $this->user()->hasPermission('users.manage') || $this->user()->id == $userId;
+        }
+
+        return true;
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array
+     */
+    public function rules(): array
+    {
+        return [
+            'code' => 'nullable|string',
+        ];
+    }
+
+    private function clear2FAUserId($result)
+    {
+        if ($result) {
+            $this->session()->forget('auth.2fa.id');
+        }
+    }
+
+use PragmaRX\Google2FA\Google2FA;
+
+public function hasValidCode($user): bool
+{
+    try {
+        if (!$this->code) {
+            return false;
+        }
+
+        $google2fa = new Google2FA();
+        return tap(
+            $google2fa->verifyKey($user->google2fa_secret, $this->code),
+            fn($result) => $this->clear2FAUserId($result)
+        );
+    } catch (\Exception $e) {
+        \Log::info($e->getMessage());
+        return false;
+    }
+}
+
+}

app/Http/Requests/TwoFactor/TwoFactorRequest.php

@@ -0,0 +1,37 @@
+<?php
+
+namespace Vanguard\Http\Requests\TwoFactor;
+
+use Vanguard\Http\Requests\Request;
+use Vanguard\Repositories\User\UserRepository;
+use Vanguard\User;
+
+abstract class TwoFactorRequest extends Request
+{
+    public function authorize(): bool
+    {
+        if ($userId = $this->get('user')) {
+            // Only users with "users.manage" permission can enable 2FA for other users.
+            return $this->user()->hasPermission('users.manage') || $this->user()->id == $userId;
+        }
+
+        return true;
+    }
+
+    public function rules(): array
+    {
+        return [];
+    }
+
+    /**
+     * Get the user for which we should enable the 2FA.
+     */
+    public function theUser(): User
+    {
+        if ($userId = $this->get('user')) {
+            return app(UserRepository::class)->find($userId);
+        }
+
+        return $this->user();
+    }
+}

app/Http/Requests/TwoFactor/VerifyTwoFactorTokenRequest.php

@@ -0,0 +1,13 @@
+<?php
+
+namespace Vanguard\Http\Requests\TwoFactor;
+
+class VerifyTwoFactorTokenRequest extends TwoFactorRequest
+{
+    public function rules(): array
+    {
+        return [
+            'code' => 'required',
+        ];
+    }
+}

app/Http/Requests/User/CreateUserRequest.php

@@ -0,0 +1,38 @@
+<?php
+
+namespace Vanguard\Http\Requests\User;
+
+use Vanguard\Http\Requests\Request;
+
+class CreateUserRequest extends Request
+{
+    public function rules(): array
+    {
+        $rules = [
+            'email' => 'required|email|unique:users,email',
+            'username' => 'nullable|unique:users,username',
+            'password' => [
+                'required',
+                'confirmed',
+                'min:8',
+                'regex:/^(?=.*[A-Za-z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{8,}$/'
+            ],
+            'birthday' => 'nullable|date',
+            'role_id' => 'required|exists:roles,id',
+            'verified' => 'boolean',
+        ];
+
+        if ($this->get('country_id')) {
+            $rules['country_id'] = 'exists:countries,id';
+        }
+
+        return $rules;
+    }
+
+    public function messages(): array
+    {
+        return [
+            'password.regex' => __('The password must be at least 8 characters long and contain at least one number and one special character (@$!%*?&).'),
+        ];
+    }
+}

app/Http/Requests/User/UpdateDetailsRequest.php

@@ -0,0 +1,16 @@
+<?php
+
+namespace Vanguard\Http\Requests\User;
+
+use Vanguard\Http\Requests\Request;
+
+class UpdateDetailsRequest extends Request
+{
+    public function rules(): array
+    {
+        return [
+            'birthday' => 'nullable|date',
+            'role_id' => 'required|exists:roles,id',
+        ];
+    }
+}

app/Http/Requests/User/UpdateLoginDetailsRequest.php

@@ -0,0 +1,37 @@
+<?php
+
+namespace Vanguard\Http\Requests\User;
+
+use Vanguard\Http\Requests\Request;
+use Vanguard\User;
+
+class UpdateLoginDetailsRequest extends Request
+{
+    public function rules(): array
+    {
+        $user = $this->getUserForUpdate();
+
+        return [
+            'email' => 'required|email|unique:users,email,' . $user->id,
+            'username' => 'nullable|unique:users,username,' . $user->id,
+            'password' => [
+                'nullable', // Permette di aggiornare i dati senza cambiare la password
+                'confirmed',
+                'min:8',
+                'regex:/^(?=.*[A-Za-z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{8,}$/'
+            ],
+        ];
+    }
+
+    public function messages(): array
+    {
+        return [
+            'password.regex' => __('The password must be at least 8 characters long and contain at least one number and one special character (@$!%*?&).'),
+        ];
+    }
+
+    protected function getUserForUpdate(): User
+    {
+        return $this->route('user');
+    }
+}

app/Http/Requests/User/UpdateProfileDetailsRequest.php

@@ -0,0 +1,15 @@
+<?php
+
+namespace Vanguard\Http\Requests\User;
+
+use Vanguard\Http\Requests\Request;
+
+class UpdateProfileDetailsRequest extends Request
+{
+    public function rules(): array
+    {
+        return [
+            'birthday' => 'nullable|date',
+        ];
+    }
+}

app/Http/Requests/User/UpdateProfileLoginDetailsRequest.php

@@ -0,0 +1,13 @@
+<?php
+
+namespace Vanguard\Http\Requests\User;
+
+use Vanguard\User;
+
+class UpdateProfileLoginDetailsRequest extends UpdateLoginDetailsRequest
+{
+    protected function getUserForUpdate(): User
+    {
+        return \Auth::user();
+    }
+}

app/Http/Requests/User/UpdateUserRequest.php

@@ -0,0 +1,37 @@
+<?php
+
+namespace Vanguard\Http\Requests\User;
+
+use Illuminate\Validation\Rule;
+use Vanguard\Http\Requests\Request;
+use Vanguard\Support\Enum\UserStatus;
+
+class UpdateUserRequest extends Request
+{
+    public function rules(): array
+    {
+        $user = $this->user();
+
+        return [
+            'email' => 'email|unique:users,email,' . $user->id,
+            'username' => 'nullable|unique:users,username,' . $user->id,
+            'password' => [
+                'nullable', // Permette di aggiornare i dati senza cambiare la password
+                'confirmed',
+                'min:8',
+                'regex:/^(?=.*[A-Za-z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]{8,}$/'
+            ],
+            'birthday' => 'nullable|date',
+            'role_id' => 'exists:roles,id',
+            'country_id' => 'exists:countries,id',
+            'status' => Rule::in(array_keys(UserStatus::lists())),
+        ];
+    }
+
+    public function messages(): array
+    {
+        return [
+            'password.regex' => __('The password must be at least 8 characters long and contain at least one number and one special character (@$!%*?&).'),
+        ];
+    }
+}

app/Http/Requests/User/UploadAvatarRawRequest.php

@@ -0,0 +1,15 @@
+<?php
+
+namespace Vanguard\Http\Requests\User;
+
+use Vanguard\Http\Requests\Request;
+
+class UploadAvatarRawRequest extends Request
+{
+    public function rules(): array
+    {
+        return [
+            'file' => 'required|image',
+        ];
+    }
+}