mirror of
https://github.com/FreshRSS/FreshRSS.git
synced 2026-01-15 16:57:53 -05:00
5f898dcc5e
* Modernize Constants and use new constant 'currentUser' * Add FreshRSS_Context::currentUser() function and use * Add FreshRSS_Context::currentUser() function and use * Add FreshRSS_Context::currentUser() function and use * Add FreshRSS_Context::currentUser() function and use * Add FreshRSS_Context::currentUser() function and use * Update app/Controllers/userController.php * Update app/Controllers/userController.php * Update app/Controllers/userController.php * Update app/Models/Auth.php * Update p/api/greader.php * Update p/api/greader.php * Update p/api/greader.php * Update app/Models/Context.php * Update app/Models/LogDAO.php * Update lib/Minz/Log.php * Update p/api/greader.php * Update app/layout/header.phtml * Update app/views/helpers/export/articles.phtml * Update cli/do-install.php * Remarque's from Alkarex * Remarque's from Alkarex * Refactor using new Minz_User class * Consistent naming of public constants --------- Co-authored-by: Luc <sanchezluc+freshrss@gmail.com> Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr>
64 lines
1.6 KiB
PHP
64 lines
1.6 KiB
PHP
<?php
|
|
|
|
/**
|
|
* This controller manage API-related features.
|
|
*/
|
|
class FreshRSS_api_Controller extends FreshRSS_ActionController {
|
|
|
|
/**
|
|
* Update the user API password.
|
|
* Return an error message, or `false` if no error.
|
|
* @return false|string
|
|
*/
|
|
public static function updatePassword(string $apiPasswordPlain) {
|
|
$username = Minz_User::name();
|
|
$userConfig = FreshRSS_Context::$user_conf;
|
|
|
|
$apiPasswordHash = FreshRSS_password_Util::hash($apiPasswordPlain);
|
|
$userConfig->apiPasswordHash = $apiPasswordHash;
|
|
|
|
$feverKey = FreshRSS_fever_Util::updateKey($username, $apiPasswordPlain);
|
|
if (!$feverKey) {
|
|
return _t('feedback.api.password.failed');
|
|
}
|
|
|
|
$userConfig->feverKey = $feverKey;
|
|
if ($userConfig->save()) {
|
|
return false;
|
|
} else {
|
|
return _t('feedback.api.password.failed');
|
|
}
|
|
}
|
|
|
|
/**
|
|
* This action updates the user API password.
|
|
*
|
|
* Parameter is:
|
|
* - apiPasswordPlain: the new user password
|
|
*/
|
|
public function updatePasswordAction(): void {
|
|
if (!FreshRSS_Auth::hasAccess()) {
|
|
Minz_Error::error(403);
|
|
}
|
|
|
|
$return_url = ['c' => 'user', 'a' => 'profile'];
|
|
|
|
if (!Minz_Request::isPost()) {
|
|
Minz_Request::forward($return_url, true);
|
|
}
|
|
|
|
$apiPasswordPlain = Minz_Request::param('apiPasswordPlain', '', true);
|
|
$apiPasswordPlain = trim($apiPasswordPlain);
|
|
if ($apiPasswordPlain == '') {
|
|
Minz_Request::forward($return_url, true);
|
|
}
|
|
|
|
$error = self::updatePassword($apiPasswordPlain);
|
|
if ($error) {
|
|
Minz_Request::bad($error, $return_url);
|
|
} else {
|
|
Minz_Request::good(_t('feedback.api.password.updated'), $return_url);
|
|
}
|
|
}
|
|
}
|