update
This commit is contained in:
@@ -29,6 +29,7 @@ final class AuthController
|
||||
'title' => $this->translator->get('auth.login.title'),
|
||||
'errorMessage' => Flash::get('error'),
|
||||
'oldEmail' => (string) Flash::get('old_email', ''),
|
||||
'oldRemember' => (bool) Flash::get('old_remember', false),
|
||||
'csrfToken' => Csrf::token(),
|
||||
], 'layouts/auth');
|
||||
|
||||
@@ -38,9 +39,12 @@ final class AuthController
|
||||
public function login(Request $request): Response
|
||||
{
|
||||
$csrfToken = (string) $request->input('_token', '');
|
||||
$remember = (bool) $request->input('remember', false);
|
||||
|
||||
if (!Csrf::validate($csrfToken)) {
|
||||
Flash::set('error', $this->translator->get('auth.errors.csrf_expired'));
|
||||
Flash::set('old_email', (string) $request->input('email', ''));
|
||||
Flash::set('old_remember', $remember);
|
||||
return Response::redirect('/login');
|
||||
}
|
||||
|
||||
@@ -50,15 +54,24 @@ final class AuthController
|
||||
if (!filter_var($email, FILTER_VALIDATE_EMAIL) || $password === '') {
|
||||
Flash::set('error', $this->translator->get('auth.errors.invalid_credentials_format'));
|
||||
Flash::set('old_email', $email);
|
||||
Flash::set('old_remember', $remember);
|
||||
return Response::redirect('/login');
|
||||
}
|
||||
|
||||
if (!$this->auth->attempt($email, $password)) {
|
||||
Flash::set('error', $this->translator->get('auth.errors.invalid_credentials'));
|
||||
Flash::set('old_email', $email);
|
||||
Flash::set('old_remember', $remember);
|
||||
return Response::redirect('/login');
|
||||
}
|
||||
|
||||
if ($remember) {
|
||||
$user = $this->auth->user();
|
||||
if ($user !== null) {
|
||||
$this->auth->createRememberToken((int) $user['id']);
|
||||
}
|
||||
}
|
||||
|
||||
return Response::redirect('/settings/users');
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user