Files
espocrm/application/Espo/Tools/UserSecurity/Api/PostChangePasswordByRequest.php
2023-02-20 17:19:10 +02:00

62 lines
2.2 KiB
PHP

<?php
/************************************************************************
* This file is part of EspoCRM.
*
* EspoCRM - Open Source CRM application.
* Copyright (C) 2014-2023 Yurii Kuznietsov, Taras Machyshyn, Oleksii Avramenko
* Website: https://www.espocrm.com
*
* EspoCRM is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* EspoCRM is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with EspoCRM. If not, see http://www.gnu.org/licenses/.
*
* The interactive user interfaces in modified source and object code versions
* of this program must display Appropriate Legal Notices, as required under
* Section 5 of the GNU General Public License version 3.
*
* In accordance with Section 7(b) of the GNU General Public License version 3,
* these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
************************************************************************/
namespace Espo\Tools\UserSecurity\Api;
use Espo\Core\Api\Action;
use Espo\Core\Api\Request;
use Espo\Core\Api\Response;
use Espo\Core\Api\ResponseComposer;
use Espo\Core\Exceptions\BadRequest;
use Espo\Tools\UserSecurity\Password\Service;
/**
* Changes a password in a recovery process.
*/
class PostChangePasswordByRequest implements Action
{
public function __construct(private Service $service) {}
public function process(Request $request): Response
{
$data = $request->getParsedBody();
$requestId = $data->requestId ?? null;
$password = $data->password ?? null;
if (!$requestId || $password === null) {
throw new BadRequest();
}
$url = $this->service->changePasswordByRecovery($requestId, $password);
return ResponseComposer::json(['url' => $url]);
}
}