12 |
13 |
14 |
20 |
21 |
38 |
39 |
--------------------------------------------------------------------------------
/app/Models/User.php:
--------------------------------------------------------------------------------
1 | 'datetime',
51 | ];
52 |
53 | /**
54 | * The accessors to append to the model's array form.
55 | *
56 | * @var array
57 | */
58 | protected $appends = [
59 | 'profile_photo_url',
60 | ];
61 | }
62 |
--------------------------------------------------------------------------------
/app/Providers/RouteServiceProvider.php:
--------------------------------------------------------------------------------
1 | configureRateLimiting();
30 |
31 | $this->routes(function () {
32 | Route::middleware('api')
33 | ->prefix('api')
34 | ->group(base_path('routes/api.php'));
35 |
36 | Route::middleware('web')
37 | ->group(base_path('routes/web.php'));
38 | });
39 | }
40 |
41 | /**
42 | * Configure the rate limiters for the application.
43 | *
44 | * @return void
45 | */
46 | protected function configureRateLimiting()
47 | {
48 | RateLimiter::for('api', function (Request $request) {
49 | return Limit::perMinute(60)->by($request->user()?->id ?: $request->ip());
50 | });
51 | }
52 | }
53 |
--------------------------------------------------------------------------------
/app/Providers/FortifyServiceProvider.php:
--------------------------------------------------------------------------------
1 | email;
41 |
42 | return Limit::perMinute(5)->by($email.$request->ip());
43 | });
44 |
45 | RateLimiter::for('two-factor', function (Request $request) {
46 | return Limit::perMinute(5)->by($request->session()->get('login.id'));
47 | });
48 | }
49 | }
50 |
--------------------------------------------------------------------------------
/database/migrations/2014_10_12_200000_add_two_factor_columns_to_users_table.php:
--------------------------------------------------------------------------------
1 | text('two_factor_secret')
19 | ->after('password')
20 | ->nullable();
21 |
22 | $table->text('two_factor_recovery_codes')
23 | ->after('two_factor_secret')
24 | ->nullable();
25 |
26 | if (Fortify::confirmsTwoFactorAuthentication()) {
27 | $table->timestamp('two_factor_confirmed_at')
28 | ->after('two_factor_recovery_codes')
29 | ->nullable();
30 | }
31 | });
32 | }
33 |
34 | /**
35 | * Reverse the migrations.
36 | *
37 | * @return void
38 | */
39 | public function down()
40 | {
41 | Schema::table('users', function (Blueprint $table) {
42 | $table->dropColumn(array_merge([
43 | 'two_factor_secret',
44 | 'two_factor_recovery_codes',
45 | ], Fortify::confirmsTwoFactorAuthentication() ? [
46 | 'two_factor_confirmed_at',
47 | ] : []));
48 | });
49 | }
50 | };
51 |
--------------------------------------------------------------------------------
/tests/Feature/RegistrationTest.php:
--------------------------------------------------------------------------------
1 | markTestSkipped('Registration support is not enabled.');
19 | }
20 |
21 | $response = $this->get('/register');
22 |
23 | $response->assertStatus(200);
24 | }
25 |
26 | public function test_registration_screen_cannot_be_rendered_if_support_is_disabled()
27 | {
28 | if (Features::enabled(Features::registration())) {
29 | return $this->markTestSkipped('Registration support is enabled.');
30 | }
31 |
32 | $response = $this->get('/register');
33 |
34 | $response->assertStatus(404);
35 | }
36 |
37 | public function test_new_users_can_register()
38 | {
39 | if (! Features::enabled(Features::registration())) {
40 | return $this->markTestSkipped('Registration support is not enabled.');
41 | }
42 |
43 | $response = $this->post('/register', [
44 | 'name' => 'Test User',
45 | 'email' => 'test@example.com',
46 | 'password' => 'password',
47 | 'password_confirmation' => 'password',
48 | 'terms' => Jetstream::hasTermsAndPrivacyPolicyFeature(),
49 | ]);
50 |
51 | $this->assertAuthenticated();
52 | $response->assertRedirect(RouteServiceProvider::HOME);
53 | }
54 | }
55 |
--------------------------------------------------------------------------------
/config/hashing.php:
--------------------------------------------------------------------------------
1 | 'bcrypt',
19 |
20 | /*
21 | |--------------------------------------------------------------------------
22 | | Bcrypt Options
23 | |--------------------------------------------------------------------------
24 | |
25 | | Here you may specify the configuration options that should be used when
26 | | passwords are hashed using the Bcrypt algorithm. This will allow you
27 | | to control the amount of time it takes to hash the given password.
28 | |
29 | */
30 |
31 | 'bcrypt' => [
32 | 'rounds' => env('BCRYPT_ROUNDS', 10),
33 | ],
34 |
35 | /*
36 | |--------------------------------------------------------------------------
37 | | Argon Options
38 | |--------------------------------------------------------------------------
39 | |
40 | | Here you may specify the configuration options that should be used when
41 | | passwords are hashed using the Argon algorithm. These will allow you
42 | | to control the amount of time it takes to hash the given password.
43 | |
44 | */
45 |
46 | 'argon' => [
47 | 'memory' => 65536,
48 | 'threads' => 1,
49 | 'time' => 4,
50 | ],
51 |
52 | ];
53 |
--------------------------------------------------------------------------------
/tests/Feature/UpdatePasswordTest.php:
--------------------------------------------------------------------------------
1 | actingAs($user = User::factory()->create());
17 |
18 | $response = $this->put('/user/password', [
19 | 'current_password' => 'password',
20 | 'password' => 'new-password',
21 | 'password_confirmation' => 'new-password',
22 | ]);
23 |
24 | $this->assertTrue(Hash::check('new-password', $user->fresh()->password));
25 | }
26 |
27 | public function test_current_password_must_be_correct()
28 | {
29 | $this->actingAs($user = User::factory()->create());
30 |
31 | $response = $this->put('/user/password', [
32 | 'current_password' => 'wrong-password',
33 | 'password' => 'new-password',
34 | 'password_confirmation' => 'new-password',
35 | ]);
36 |
37 | $response->assertSessionHasErrors();
38 |
39 | $this->assertTrue(Hash::check('password', $user->fresh()->password));
40 | }
41 |
42 | public function test_new_passwords_must_match()
43 | {
44 | $this->actingAs($user = User::factory()->create());
45 |
46 | $response = $this->put('/user/password', [
47 | 'current_password' => 'password',
48 | 'password' => 'new-password',
49 | 'password_confirmation' => 'wrong-password',
50 | ]);
51 |
52 | $response->assertSessionHasErrors();
53 |
54 | $this->assertTrue(Hash::check('password', $user->fresh()->password));
55 | }
56 | }
57 |
--------------------------------------------------------------------------------
/bootstrap/app.php:
--------------------------------------------------------------------------------
1 | singleton(
30 | Illuminate\Contracts\Http\Kernel::class,
31 | App\Http\Kernel::class
32 | );
33 |
34 | $app->singleton(
35 | Illuminate\Contracts\Console\Kernel::class,
36 | App\Console\Kernel::class
37 | );
38 |
39 | $app->singleton(
40 | Illuminate\Contracts\Debug\ExceptionHandler::class,
41 | App\Exceptions\Handler::class
42 | );
43 |
44 | /*
45 | |--------------------------------------------------------------------------
46 | | Return The Application
47 | |--------------------------------------------------------------------------
48 | |
49 | | This script returns the application instance. The instance is given to
50 | | the calling script so we can separate the building of the instances
51 | | from the actual running of the application and sending responses.
52 | |
53 | */
54 |
55 | return $app;
56 |
--------------------------------------------------------------------------------
/artisan:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env php
2 | make(Illuminate\Contracts\Console\Kernel::class);
34 |
35 | $status = $kernel->handle(
36 | $input = new Symfony\Component\Console\Input\ArgvInput,
37 | new Symfony\Component\Console\Output\ConsoleOutput
38 | );
39 |
40 | /*
41 | |--------------------------------------------------------------------------
42 | | Shutdown The Application
43 | |--------------------------------------------------------------------------
44 | |
45 | | Once Artisan has finished running, we will fire off the shutdown events
46 | | so that any final work may be done by the application before we shut
47 | | down the process. This is the last thing to happen to the request.
48 | |
49 | */
50 |
51 | $kernel->terminate($input, $status);
52 |
53 | exit($status);
54 |
--------------------------------------------------------------------------------
/tests/Feature/TwoFactorAuthenticationSettingsTest.php:
--------------------------------------------------------------------------------
1 | actingAs($user = User::factory()->create());
16 |
17 | $this->withSession(['auth.password_confirmed_at' => time()]);
18 |
19 | $response = $this->post('/user/two-factor-authentication');
20 |
21 | $this->assertNotNull($user->fresh()->two_factor_secret);
22 | $this->assertCount(8, $user->fresh()->recoveryCodes());
23 | }
24 |
25 | public function test_recovery_codes_can_be_regenerated()
26 | {
27 | $this->actingAs($user = User::factory()->create());
28 |
29 | $this->withSession(['auth.password_confirmed_at' => time()]);
30 |
31 | $this->post('/user/two-factor-authentication');
32 | $this->post('/user/two-factor-recovery-codes');
33 |
34 | $user = $user->fresh();
35 |
36 | $this->post('/user/two-factor-recovery-codes');
37 |
38 | $this->assertCount(8, $user->recoveryCodes());
39 | $this->assertCount(8, array_diff($user->recoveryCodes(), $user->fresh()->recoveryCodes()));
40 | }
41 |
42 | public function test_two_factor_authentication_can_be_disabled()
43 | {
44 | $this->actingAs($user = User::factory()->create());
45 |
46 | $this->withSession(['auth.password_confirmed_at' => time()]);
47 |
48 | $this->post('/user/two-factor-authentication');
49 |
50 | $this->assertNotNull($user->fresh()->two_factor_secret);
51 |
52 | $this->delete('/user/two-factor-authentication');
53 |
54 | $this->assertNull($user->fresh()->two_factor_secret);
55 | }
56 | }
57 |
--------------------------------------------------------------------------------
/public/index.php:
--------------------------------------------------------------------------------
1 | make(Kernel::class);
50 |
51 | $response = $kernel->handle(
52 | $request = Request::capture()
53 | )->send();
54 |
55 | $kernel->terminate($request, $response);
56 |
--------------------------------------------------------------------------------
/app/Actions/Fortify/UpdateUserProfileInformation.php:
--------------------------------------------------------------------------------
1 | ['required', 'string', 'max:255'],
23 | 'email' => ['required', 'email', 'max:255', Rule::unique('users')->ignore($user->id)],
24 | 'photo' => ['nullable', 'mimes:jpg,jpeg,png', 'max:1024'],
25 | ])->validateWithBag('updateProfileInformation');
26 |
27 | if (isset($input['photo'])) {
28 | $user->updateProfilePhoto($input['photo']);
29 | }
30 |
31 | if ($input['email'] !== $user->email &&
32 | $user instanceof MustVerifyEmail) {
33 | $this->updateVerifiedUser($user, $input);
34 | } else {
35 | $user->forceFill([
36 | 'name' => $input['name'],
37 | 'email' => $input['email'],
38 | ])->save();
39 | }
40 | }
41 |
42 | /**
43 | * Update the given verified user's profile information.
44 | *
45 | * @param mixed $user
46 | * @param array $input
47 | * @return void
48 | */
49 | protected function updateVerifiedUser($user, array $input)
50 | {
51 | $user->forceFill([
52 | 'name' => $input['name'],
53 | 'email' => $input['email'],
54 | 'email_verified_at' => null,
55 | ])->save();
56 |
57 | $user->sendEmailVerificationNotification();
58 | }
59 | }
60 |
--------------------------------------------------------------------------------
/database/factories/UserFactory.php:
--------------------------------------------------------------------------------
1 | $this->faker->name(),
29 | 'email' => $this->faker->unique()->safeEmail(),
30 | 'email_verified_at' => now(),
31 | 'password' => '$2y$10$92IXUNpkjO0rOQ5byMi.Ye4oKoEa3Ro9llC/.og/at2.uheWG/igi', // password
32 | 'remember_token' => Str::random(10),
33 | ];
34 | }
35 |
36 | /**
37 | * Indicate that the model's email address should be unverified.
38 | *
39 | * @return \Illuminate\Database\Eloquent\Factories\Factory
40 | */
41 | public function unverified()
42 | {
43 | return $this->state(function (array $attributes) {
44 | return [
45 | 'email_verified_at' => null,
46 | ];
47 | });
48 | }
49 |
50 | /**
51 | * Indicate that the user should have a personal team.
52 | *
53 | * @return $this
54 | */
55 | public function withPersonalTeam()
56 | {
57 | if (! Features::hasTeamFeatures()) {
58 | return $this->state([]);
59 | }
60 |
61 | return $this->has(
62 | Team::factory()
63 | ->state(function (array $attributes, User $user) {
64 | return ['name' => $user->name.'\'s Team', 'user_id' => $user->id, 'personal_team' => true];
65 | }),
66 | 'ownedTeams'
67 | );
68 | }
69 | }
70 |
--------------------------------------------------------------------------------
/resources/js/Pages/Auth/VerifyEmail.vue:
--------------------------------------------------------------------------------
1 |
20 |
21 |
22 |
23 |
24 |
22 |
36 |
37 |
30 | Thanks for signing up! Before getting started, could you verify your email address by clicking on the link we just emailed to you? If you didn't receive the email, we will gladly send you another.
31 |
32 |
33 |
34 | A new verification link has been sent to the email address you provided during registration.
35 |
36 |
37 |
53 |
32 | Forgot your password? No problem. Just let us know your email address and we will email you a password reset link that will allow you to choose a new one.
33 |
34 |
35 |
36 | {{ status }}
37 |
38 |
39 |
37 | This is a secure area of the application. Please confirm your password before continuing.
38 |
39 |
40 |
34 |
62 |
63 |
35 |
61 |
36 |
49 |
50 |
51 |
52 |
53 |
55 |
56 |
60 |
53 |
55 |
56 |
57 |
59 |
64 |
66 | 20 | Profile 21 |
22 | 23 | 24 |
25 |
56 |
26 |
55 |
27 |
31 |
32 |
33 |
37 |
38 |
39 |
46 |
47 |
51 |
66 |
77 |
78 |
79 |
80 |
--------------------------------------------------------------------------------
/tests/Feature/EmailVerificationTest.php:
--------------------------------------------------------------------------------
1 | markTestSkipped('Email verification not enabled.');
22 | }
23 |
24 | $user = User::factory()->withPersonalTeam()->unverified()->create();
25 |
26 | $response = $this->actingAs($user)->get('/email/verify');
27 |
28 | $response->assertStatus(200);
29 | }
30 |
31 | public function test_email_can_be_verified()
32 | {
33 | if (! Features::enabled(Features::emailVerification())) {
34 | return $this->markTestSkipped('Email verification not enabled.');
35 | }
36 |
37 | Event::fake();
38 |
39 | $user = User::factory()->unverified()->create();
40 |
41 | $verificationUrl = URL::temporarySignedRoute(
42 | 'verification.verify',
43 | now()->addMinutes(60),
44 | ['id' => $user->id, 'hash' => sha1($user->email)]
45 | );
46 |
47 | $response = $this->actingAs($user)->get($verificationUrl);
48 |
49 | Event::assertDispatched(Verified::class);
50 |
51 | $this->assertTrue($user->fresh()->hasVerifiedEmail());
52 | $response->assertRedirect(RouteServiceProvider::HOME.'?verified=1');
53 | }
54 |
55 | public function test_email_can_not_verified_with_invalid_hash()
56 | {
57 | if (! Features::enabled(Features::emailVerification())) {
58 | return $this->markTestSkipped('Email verification not enabled.');
59 | }
60 |
61 | $user = User::factory()->unverified()->create();
62 |
63 | $verificationUrl = URL::temporarySignedRoute(
64 | 'verification.verify',
65 | now()->addMinutes(60),
66 | ['id' => $user->id, 'hash' => sha1('wrong-email')]
67 | );
68 |
69 | $this->actingAs($user)->get($verificationUrl);
70 |
71 | $this->assertFalse($user->fresh()->hasVerifiedEmail());
72 | }
73 | }
74 |
--------------------------------------------------------------------------------
/config/sanctum.php:
--------------------------------------------------------------------------------
1 | explode(',', env('SANCTUM_STATEFUL_DOMAINS', sprintf(
19 | '%s%s',
20 | 'localhost,localhost:3000,127.0.0.1,127.0.0.1:8000,::1',
21 | Sanctum::currentApplicationUrlWithPort()
22 | ))),
23 |
24 | /*
25 | |--------------------------------------------------------------------------
26 | | Sanctum Guards
27 | |--------------------------------------------------------------------------
28 | |
29 | | This array contains the authentication guards that will be checked when
30 | | Sanctum is trying to authenticate a request. If none of these guards
31 | | are able to authenticate the request, Sanctum will use the bearer
32 | | token that's present on an incoming request for authentication.
33 | |
34 | */
35 |
36 | 'guard' => ['web'],
37 |
38 | /*
39 | |--------------------------------------------------------------------------
40 | | Expiration Minutes
41 | |--------------------------------------------------------------------------
42 | |
43 | | This value controls the number of minutes until an issued token will be
44 | | considered expired. If this value is null, personal access tokens do
45 | | not expire. This won't tweak the lifetime of first-party sessions.
46 | |
47 | */
48 |
49 | 'expiration' => null,
50 |
51 | /*
52 | |--------------------------------------------------------------------------
53 | | Sanctum Middleware
54 | |--------------------------------------------------------------------------
55 | |
56 | | When authenticating your first-party SPA with Sanctum you may need to
57 | | customize some of the middleware Sanctum uses while processing the
58 | | request. You may change the middleware listed below as required.
59 | |
60 | */
61 |
62 | 'middleware' => [
63 | 'verify_csrf_token' => App\Http\Middleware\VerifyCsrfToken::class,
64 | 'encrypt_cookies' => App\Http\Middleware\EncryptCookies::class,
65 | ],
66 |
67 | ];
68 |
--------------------------------------------------------------------------------
/config/filesystems.php:
--------------------------------------------------------------------------------
1 | env('FILESYSTEM_DISK', 'local'),
17 |
18 | /*
19 | |--------------------------------------------------------------------------
20 | | Filesystem Disks
21 | |--------------------------------------------------------------------------
22 | |
23 | | Here you may configure as many filesystem "disks" as you wish, and you
24 | | may even configure multiple disks of the same driver. Defaults have
25 | | been set up for each driver as an example of the required values.
26 | |
27 | | Supported Drivers: "local", "ftp", "sftp", "s3"
28 | |
29 | */
30 |
31 | 'disks' => [
32 |
33 | 'local' => [
34 | 'driver' => 'local',
35 | 'root' => storage_path('app'),
36 | 'throw' => false,
37 | ],
38 |
39 | 'public' => [
40 | 'driver' => 'local',
41 | 'root' => storage_path('app/public'),
42 | 'url' => env('APP_URL').'/storage',
43 | 'visibility' => 'public',
44 | 'throw' => false,
45 | ],
46 |
47 | 's3' => [
48 | 'driver' => 's3',
49 | 'key' => env('AWS_ACCESS_KEY_ID'),
50 | 'secret' => env('AWS_SECRET_ACCESS_KEY'),
51 | 'region' => env('AWS_DEFAULT_REGION'),
52 | 'bucket' => env('AWS_BUCKET'),
53 | 'url' => env('AWS_URL'),
54 | 'endpoint' => env('AWS_ENDPOINT'),
55 | 'use_path_style_endpoint' => env('AWS_USE_PATH_STYLE_ENDPOINT', false),
56 | 'throw' => false,
57 | ],
58 |
59 | ],
60 |
61 | /*
62 | |--------------------------------------------------------------------------
63 | | Symbolic Links
64 | |--------------------------------------------------------------------------
65 | |
66 | | Here you may configure the symbolic links that will be created when the
67 | | `storage:link` Artisan command is executed. The array keys should be
68 | | the locations of the links and the values should be their targets.
69 | |
70 | */
71 |
72 | 'links' => [
73 | public_path('storage') => storage_path('app/public'),
74 | ],
75 |
76 | ];
77 |
--------------------------------------------------------------------------------
/resources/js/Pages/Auth/ResetPassword.vue:
--------------------------------------------------------------------------------
1 |
28 |
29 |
30 |
31 |
32 |
52 |
54 |
55 |
56 |
57 |
58 |
43 | {{ status }}
44 |
45 |
46 |
88 |
63 |
71 |
75 |
76 |
84 |
88 |
89 |
72 |
73 |
74 |
85 |
87 |
88 |
99 |
100 |
101 |
102 |
49 |
50 | Please confirm access to your account by entering the authentication code provided by your authenticator application.
51 |
52 |
53 |
54 | Please confirm access to your account by entering one of your emergency recovery codes.
55 |
56 |
57 |
58 |
52 |
63 |
64 |
65 |
76 |
77 |
78 |
88 |
89 |
90 |
91 |
52 | Once your account is deleted, all of its resources and data will be permanently deleted. Before deleting your account, please download any data or information that you wish to retain.
53 |
54 |
55 |
56 |
57 | Delete Account
58 |
59 |
60 |
61 |
62 |
71 |
82 |
83 |
84 |
85 |
12 |
83 |
84 |
--------------------------------------------------------------------------------
/resources/js/Pages/Auth/Register.vue:
--------------------------------------------------------------------------------
1 |
25 |
26 |
27 |
28 |
29 |
13 |
82 |
14 |
81 |
15 |
80 |
16 |
17 |
32 |
33 |
48 |
49 |
50 |
54 |
55 | 51 | {{ message }} 52 |
53 |
56 |
78 |
79 |
87 |
88 |
94 |
95 |
111 | Select A New Photo
112 |
113 |
114 |
120 | Remove Photo
121 |
122 |
123 |
125 |
126 |
127 |
99 | ![]()
100 |
101 |
102 |
103 |
104 |
108 |
109 |
110 |
128 |
138 |
139 |
140 |
141 |
150 |
151 |
152 |
153 |