106 lines
4.8 KiB
PHP
106 lines
4.8 KiB
PHP
<?php
|
|
declare(strict_types=1);
|
|
|
|
$app = app();
|
|
$flash = $app->flash()->get();
|
|
$error = '';
|
|
$info = '';
|
|
$email = '';
|
|
|
|
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
|
|
$action = $_POST['action'] ?? 'request';
|
|
$email = strtolower(trim((string)($_POST['email'] ?? '')));
|
|
$code = strtoupper(trim((string)($_POST['code'] ?? '')));
|
|
$password = (string)($_POST['password'] ?? '');
|
|
$password2 = (string)($_POST['password_confirm'] ?? '');
|
|
|
|
$auth = new \App\Auth($app);
|
|
$mailer = new \App\Mailer($app);
|
|
|
|
try {
|
|
if ($action === 'request') {
|
|
$data = $auth->createResetCode($email);
|
|
$mailer->sendTemplate('password_reset', $email, [
|
|
'code' => $data['code'],
|
|
'display_name' => $data['display_name'] ?? $email,
|
|
]);
|
|
$info = 'Reset-Code wurde gesendet. Bitte prüfe dein Postfach (und Spam).';
|
|
} else {
|
|
if ($password !== $password2) {
|
|
throw new \RuntimeException('Passwörter stimmen nicht überein.');
|
|
}
|
|
if (strlen($password) < 8) {
|
|
throw new \RuntimeException('Passwort muss mindestens 8 Zeichen haben.');
|
|
}
|
|
$userId = $auth->verifyResetCode($email, $code);
|
|
$auth->resetPassword($userId, $password);
|
|
$app->flash()->set('success', 'Passwort wurde aktualisiert. Bitte melde dich an.');
|
|
redirect('/login');
|
|
}
|
|
} catch (\Throwable $e) {
|
|
$error = $e->getMessage();
|
|
}
|
|
}
|
|
?>
|
|
<main class="auth-wrap">
|
|
<div class="container auth-grid">
|
|
<section class="card auth-card">
|
|
<div class="badge">Passwort zurücksetzen</div>
|
|
<h1 class="mt-1" style="margin: 12px 0;">Neues Passwort anfordern</h1>
|
|
<p class="muted">Fordere einen Reset-Code an und setze dein Passwort zurück.</p>
|
|
<?php if ($flash): ?>
|
|
<div class="toast-bar" style="margin-top: 10px;"><?= htmlspecialchars($flash['message'], ENT_QUOTES) ?></div>
|
|
<?php endif; ?>
|
|
<?php if ($info): ?>
|
|
<div class="toast-bar" style="margin-top: 10px;"><?= htmlspecialchars($info, ENT_QUOTES) ?></div>
|
|
<?php endif; ?>
|
|
<?php if ($error): ?>
|
|
<div class="toast-bar" style="margin-top: 10px; border-color:#f87171; color:#991b1b;">Fehler: <?= htmlspecialchars($error, ENT_QUOTES) ?></div>
|
|
<?php endif; ?>
|
|
<form class="stack gap-12" style="margin-top: 14px;" method="post" action="/reset">
|
|
<div class="stack gap-6">
|
|
<label class="label" for="resetEmail">E-Mail</label>
|
|
<input id="resetEmail" name="email" class="input" type="email" required placeholder="du@example.com" value="<?= htmlspecialchars($email, ENT_QUOTES) ?>">
|
|
</div>
|
|
<input type="hidden" name="action" value="request">
|
|
<button class="btn block" type="submit">Reset-Code senden</button>
|
|
</form>
|
|
<hr style="margin:18px 0; border:none; border-top:1px solid #e5e7eb;">
|
|
<h3>Code eingeben</h3>
|
|
<form class="stack gap-12" style="margin-top: 10px;" method="post" action="/reset">
|
|
<input type="hidden" name="action" value="reset">
|
|
<div class="stack gap-6">
|
|
<label class="label" for="resetEmail2">E-Mail</label>
|
|
<input id="resetEmail2" name="email" class="input" type="email" required placeholder="du@example.com" value="<?= htmlspecialchars($email, ENT_QUOTES) ?>">
|
|
</div>
|
|
<div class="stack gap-6">
|
|
<label class="label" for="resetCode">Reset-Code</label>
|
|
<input id="resetCode" name="code" class="input" maxlength="6" required placeholder="ABC123">
|
|
</div>
|
|
<div class="form-grid">
|
|
<div class="stack gap-6">
|
|
<label class="label" for="newPassword">Neues Passwort</label>
|
|
<input id="newPassword" name="password" class="input" type="password" required placeholder="********" autocomplete="new-password">
|
|
</div>
|
|
<div class="stack gap-6">
|
|
<label class="label" for="newPassword2">Neues Passwort bestätigen</label>
|
|
<input id="newPassword2" name="password_confirm" class="input" type="password" required placeholder="********" autocomplete="new-password">
|
|
</div>
|
|
</div>
|
|
<button class="btn block" type="submit">Passwort setzen</button>
|
|
</form>
|
|
<p class="muted small" style="margin-top: 12px;"><a href="/login">Zurück zum Login</a></p>
|
|
</section>
|
|
|
|
<aside class="auth-aside">
|
|
<img class="auth-logo" src="/assets/bilder/logo_female.png" alt="Papa-Kind-Treff Logo">
|
|
<h3>Tipps</h3>
|
|
<p class="auth-meta">Schau im Spam nach, wenn die Mail nicht ankommt. Codes sind 2 Stunden gültig.</p>
|
|
<div class="stack gap-12" style="margin-top: 12px;">
|
|
<a class="btn block" href="/register">Neu registrieren</a>
|
|
<a class="btn ghost block" href="/">Zur Startseite</a>
|
|
</div>
|
|
</aside>
|
|
</div>
|
|
</main>
|