mirror/FreshRSS
0
0
Fork 0
mirror of https://github.com/FreshRSS/FreshRSS.git synced 2026-05-24 16:25:00 -04:00
Code Issues Packages Projects Releases Wiki Activity

Separate the update API password endpoint (#2675)

Browse Source 
* Extract hashPassword method from userController

* Extract and refactor fever key-related methods

* Move update of API password to dedicated action

* Simplify the controller by refactoring feverUtil

* Add locales
This commit is contained in:
Marien Fressinaud
2019-12-03 23:11:06 +01:00
committed by Alexandre Alapetite
parent 15b8ef8f40
commit d0f1f9f141
40 changed files with 292 additions and 73 deletions
Download Patch File Download Diff File Expand all files Collapse all files

47
app/Controllers/apiController.php Normal file
View File

@@ -0,0 +1,47 @@
<?php
/**
* This controller manage API-related features.
*/
class FreshRSS_api_Controller extends Minz_ActionController {
/**
* This action updates the user API password.
*
* Parameter is:
* - apiPasswordPlain: the new user password
*/
public function updatePasswordAction() {
if (!FreshRSS_Auth::hasAccess()) {
Minz_Error::error(403);
}
$return_url = array('c' => 'user', 'a' => 'profile');
if (!Minz_Request::isPost()) {
Minz_Request::forward($return_url, true);
}
$apiPasswordPlain = Minz_Request::param('apiPasswordPlain', '', true);
if ($apiPasswordPlain == '') {
Minz_Request::forward($return_url, true);
}
$username = Minz_Session::param('currentUser');
$userConfig = FreshRSS_Context::$user_conf;
$apiPasswordHash = FreshRSS_password_Util::hash($apiPasswordPlain);
$userConfig->apiPasswordHash = $apiPasswordHash;
$feverKey = FreshRSS_fever_Util::updateKey($username, $apiPasswordPlain);
if (!$feverKey) {
Minz_Request::bad(_t('feedback.api.password.failed'), $return_url);
}
$userConfig->feverKey = $feverKey;
if ($userConfig->save()) {
Minz_Request::good(_t('feedback.api.password.updated'), $return_url);
} else {
Minz_Request::bad(_t('feedback.api.password.failed'), $return_url);
}
}
}