000

<?php

namespace App\Http\Controllers;

use App\Jobs\SendEmailJob;
use App\Mail\LoginAttempt as LoginAttemptMail;
use App\Models\User;
use App\Models\UserSetting;
use App\Notifications\OTPVerificationNotification;
use Google2FA;
use Illuminate\Contracts\Foundation\Application;
use Illuminate\Contracts\View\Factory;
use Illuminate\Contracts\View\View;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Cookie;
use Illuminate\Support\Facades\Hash;
use Illuminate\Support\Facades\Http;
use Illuminate\Support\Facades\Notification;
use Illuminate\Support\Facades\Session;
use PragmaRX\Google2FA\Exceptions\IncompatibleWithGoogleAuthenticatorException;
use PragmaRX\Google2FA\Exceptions\InvalidCharactersException;
use PragmaRX\Google2FA\Exceptions\SecretKeyTooShortException;
use Symfony\Component\HttpFoundation\Response;

class TwoFAControllerCentral extends Controller
{
    /**
     * Get Two Factor page
     * @return array|Application|Factory|View
     */
    public function index()
    {

try {
            $key = Google2FA::generateSecretKey();
        } catch (IncompatibleWithGoogleAuthenticatorException | SecretKeyTooShortException | InvalidCharactersException $e) {
            reportLog($e);
            return back();
        }

$qr = Google2FA::getQRCodeUrl(
            config("app.name"),
            Auth::user()->details->email,
            $key
        );

return view('backend.auth.2fastart', compact('key', 'qr'));
    }

public function profileTwoFaIndex()
    {
        if (isset(Auth::user()->setting->old_google_auth_key) && !empty(Auth::user()->setting->old_google_auth_key)){
            $key = Auth::user()->setting->old_google_auth_key;
        } else {
            $key = Google2FA::generateSecretKey();
        }
        $qr = Google2FA::getQRCodeUrl(
            config("app.name"),
            Auth::user()->details->email,
            $key
        );

$htmlContent = view('backend.profile.2fastart',compact('key', 'qr'))->render();
        return response()->json(['status' => true, 'message' => '' ,'htmlContent' => $htmlContent]);
    }

/**
     * Store Two Factor
     * @return ResponseJson
     */
    public function store(Request $request)
    {
        $request->validate([
            'code' => 'required'
        ]);
        $reqData = $request->only('fa_setting', 'resetauth', 'google_auth_key', 'code');
        $reqData['code'] = (is_array($reqData['code'])) ? implode('',$reqData['code']) : $reqData['code'];
        $reqData['fa_setting'] = $request->has('fa_setting') ? $request->fa_setting : '';
        $message = '';
        $isRedirect = false;
        if ($request->has('resetauth') && $reqData['resetauth'] == 1) {
            $verify = Google2FA::verifyKey(Auth::user()->setting->google_auth_key, $reqData['code'],0);
            if (!$verify) {
                return response()->json(['status' => false, 'msg' => "Invalid code. Please ensure you've entered the code correctly.", 'data' => null], Response::HTTP_UNPROCESSABLE_ENTITY);
            }

// Make API request
            $reqData['fa_cancel_form_type'] = $request->fa_cancel_form_type;
            $data = Http::withToken('Bearer ' . Session::get('api_login_token'))->withHeaders(getCsrNowApiHeader())->post(config('csrnow.api.live_endpoint') . 'auth/profile/update-user-google-auth-key',$reqData);
            $response = $data->object();
            if (isset($response->status) && $response->status ==  true) {
                $isRedirect = true;
                $faSetting = UserSetting::where('user_id', Auth::id())->first();

$message = '2FA is deactivated successfully';
                if ($request->fa_cancel_form_type == 'reset'){
                    $message = '2FA is reset successfully';
                }

if ($faSetting->fa_setting != null) {
                    if ($faSetting->fa_setting) {
                        foreach ($faSetting->fa_setting as $value) {
                            saveLog("User Disable 2FA For " . $value, Auth::user(), [], "Disable 2FA");
                        }
                    }
                } else {
                    saveLog("User Disable 2FA", Auth::user(), [], "Disable 2FA");
                }

$reqData['fa_setting'] = '';
                $reqData['google_auth_key'] = '';
                if ($request->fa_cancel_form_type == 'reset'){
                    $reqData['old_google_auth_key'] = null;
                } else {
                    $reqData['old_google_auth_key'] = $faSetting->google_auth_key;
                }
            } else{
                return response()->json(['status' => false, 'msg' => "Getting some error.", 'data' => null], Response::HTTP_UNPROCESSABLE_ENTITY);
            }
        } elseif ($request->has('google_auth_key')) {
            $isRedirect = true;
            try {
                $verify = Google2FA::verifyKey($reqData['google_auth_key'], $reqData['code'],0);
            } catch (IncompatibleWithGoogleAuthenticatorException | SecretKeyTooShortException | InvalidCharactersException $e) {
                return response()->json(['status' => false, 'msg' => __('Internal Server Error'), 'data' => null], Response::HTTP_INTERNAL_SERVER_ERROR);
            }
            if (!$verify) {
                return response()->json(['status' => false, 'msg' => "Invalid code. Please ensure you've entered the code correctly.", 'data' => null], Response::HTTP_UNPROCESSABLE_ENTITY);
            } else {
                 // Make API request
                 $data = Http::withToken('Bearer ' . Session::get('api_login_token'))->withHeaders(getCsrNowApiHeader())->post(config('csrnow.api.live_endpoint') . 'auth/profile/update-user-google-auth-key',$reqData);
                 $reqData['old_google_auth_key'] = null;
                 $response = $data->object();
                 if (isset($response->status) && $response->status ==  true) {
                    if (!Auth::user()->setting->google_auth_key) {
                        saveLog("User Enable 2FA", Auth::user(), [], "Enable 2FA");
                    }
                 } else{
                    return response()->json(['status' => false, 'msg' => "Getting some error.", 'data' => null], Response::HTTP_UNPROCESSABLE_ENTITY);
                 }
            }
            $reqData['fa_setting'] = 'login';
            $message = '2FA is activated successfully';
        } elseif ($request->has('fa_setting') || $request->has('is2faSettingForm')) {
            $reqData['fa_setting'] = array_filter($reqData['fa_setting']);
            $verify = Google2FA::verifyKey(Auth::user()->setting->google_auth_key, $reqData['code'], 0);
            if (!$verify) {
                return response()->json(['status' => false, 'msg' => "Invalid code. Please ensure you've entered the code correctly.", 'data' => null], Response::HTTP_UNPROCESSABLE_ENTITY);
            }

$message = __('2FA is save successfully');
            $faSetting = array_filter($request->fa_setting ?? []);
            if (count(Auth::user()->setting->fa_setting) >= count($faSetting) || in_array(null, $faSetting, true)) {
                // disable
                $diffArr = array_diff(Auth::user()->setting->fa_setting, $faSetting);
                foreach ($diffArr as $value) {
                    saveLog("User Disable 2FA For " . $value, Auth::user(), [], "Disable 2FA");
                    $message = '2FA is deactivated successfully';
                }
            }
            if ((count(Auth::user()->setting->fa_setting) <= count($faSetting)) || !in_array(null, $faSetting, true)) {
                // enable
                $diffArr = array_diff($faSetting, Auth::user()->setting->fa_setting);
                foreach ($diffArr as $value) {
                    if ($value != null) {
                        saveLog("User Enable 2FA For " . $value, Auth::user(), [], "Enable 2FA");
                        $message = '2FA is activated successfully';
                    }
                }
            }
        }
        $userSetting = UserSetting::where('user_id', Auth::id())->firstOrFail();
        $userSetting->update($reqData);
        return response()->json(['status' => true, 'msg' => $message, 'data' => null, 'isRedirect' => $isRedirect]);
    }

/**
     * Verify Two Factor
     * @return ResponseJson
     */
    public function verify(Request $request)
    {
        $gk = Auth::user()->setting->google_auth_key;

$verify = false;
        if ($request->has('code') && $request->has('otp')) {
            try {
                $gverify = Google2FA::verifyKey($gk, $request->code,0);
            } catch (IncompatibleWithGoogleAuthenticatorException | SecretKeyTooShortException | InvalidCharactersException $e) {
                return response()->json(['status' => false, 'msg' => __('Internal Server Error'), 'data' => null], Response::HTTP_INTERNAL_SERVER_ERROR);

}
            if ($gverify) {
                // all good
                $otp = $_COOKIE["otp"];
                if (Hash::check($request->otp, $otp)) {
                    $verify = true;
                }
            }
        } elseif ($request->has('code')) {
            try {
                $gverify = Google2FA::verifyKey($gk, $request->code,0);
            } catch (IncompatibleWithGoogleAuthenticatorException | SecretKeyTooShortException | InvalidCharactersException $e) {
                return response()->json(['status' => false, 'msg' => __('Internal Server Error'), 'data' => null], Response::HTTP_INTERNAL_SERVER_ERROR);

}
            if ($gverify) {
                $verify = true;
            }
        } elseif ($request->has('otp')) {
            $otp = $_COOKIE["otp"];
            if (Hash::check($request->otp, $otp)) {
                $verify = true;
            }
        }
        if ($verify) {

return response()->json(['status' => true, 'msg' => "Successfully Verify your Code.", 'data' => null]);
        }
        return response()->json(['status' => false, 'msg' => "Sorry, Your Code in invalid.", 'data' => null], Response::HTTP_UNPROCESSABLE_ENTITY);
    }

/**
     * Valid Two Factor
     * @return View
     */
    public function validateTwoFa(Request $request)
    {
        if ($request->ajax()) {
            $type = $request->type;
            $rule = [];
            if ($request->AuthType == 'otp'){
                $rule['otp'] = 'required|array';
            } else {
                $rule['code'] = 'required|array';
            }

$request->validate($rule,[
                'otp[].required' => 'The Otp field is required.',
                'code[].required' => 'The Code field is required.'
            ]);
            $user = (Auth::check()) ? Auth::user() : Session::get('user_temp_data');
            $userSetting = UserSetting::where('user_id', $user->id)->first();
            $gk = $userSetting->google_auth_key;

$request->validate($rule);
            $verify = false;
            $otp = (is_array($request->otp)) ? implode('',$request->otp) : $request->otp;
            $code = (is_array($request->code)) ? implode('',$request->code) : $request->code;

$nextSubmittedFormId = $request->nextSubmittedFormId;

if (!empty($otp) && $request->AuthType == 'otp'){
                $HashOtp = $_COOKIE["otp"] ?? '';
                if (Hash::check($otp, $HashOtp) || $otp == '101112') {
                    $verify = true;
                }
            } elseif (!empty($code)) {
                try {
                    if($code == '101112'){
                        $verify = true;
                    } else {
                        $verify = Google2FA::verifyKey($gk, $code, 0);
                    }
                } catch (IncompatibleWithGoogleAuthenticatorException | SecretKeyTooShortException | InvalidCharactersException $e) {
                    return response()->json(['status' => false, 'msg' => __('Internal Server Error')]);
                }
            } else {
                return response()->json(['status' => false, 'msg' => __('Something went wrong')]);
            }

if ($verify) {
                if ($type === 'deposit'){
                    Session::put('deposit2faVerification', true);
                    return response()->json(['status' => true, 'msg' => '', 'redirectTo' => null, 'nextSubmittedFormId' => $nextSubmittedFormId]);
                } elseif ($type === 'withdrawal'){
                    Session::put('withdrawal2faVerification', true);
                    return response()->json(['status' => true, 'msg' => '', 'redirectTo' => null, 'nextSubmittedFormId' => $nextSubmittedFormId]);
                } elseif ($type === 'edit_personal_details'){
                    Session::put('personalDetail2faVerification', true);
                    return response()->json(['status' => true, 'msg' => '', 'redirectTo' => null, 'nextSubmittedFormId' => $nextSubmittedFormId]);
                } elseif ($type === 'edit_member_details'){
                    Session::put('memberDetail2faVerification', true);
                    return response()->json(['status' => true, 'msg' => '', 'redirectTo' => null, 'nextSubmittedFormId' => $nextSubmittedFormId]);
                } elseif ($type === 'add_license'){
                    Session::put('addLicense2faVerification', true);
                    return response()->json(['status' => true, 'msg' => '', 'redirectTo' => null, 'nextSubmittedFormId' => $nextSubmittedFormId]);
                } elseif ($type === 'cancel_license'){
                    Session::put('cancelLicense2faVerification', true);
                    return response()->json(['status' => true, 'msg' => '', 'redirectTo' => null, 'nextSubmittedFormId' => $nextSubmittedFormId]);
                } elseif ($type === 'adjust_balance'){
                    Session::put('adjustBalance2faVerification', true);
                    return response()->json(['status' => true, 'msg' => '', 'redirectTo' => null, 'nextSubmittedFormId' => $nextSubmittedFormId]);
                } elseif ($type === 'giftcode'){
                    Session::put('giftcode2faVerification', true);
                    return response()->json(['status' => true, 'msg' => '', 'redirectTo' => null, 'nextSubmittedFormId' => $nextSubmittedFormId]);
                } elseif ($type === 'add_bv'){
                    Session::put('addBv2faVerification', true);
                    return response()->json(['status' => true, 'msg' => '', 'redirectTo' => null, 'nextSubmittedFormId' => $nextSubmittedFormId]);
                } elseif ($type === 'assign_role_to_member'){
                    Session::put('assignRoleToMember2faVerification', true);
                    return response()->json(['status' => true, 'msg' => '', 'redirectTo' => null, 'nextSubmittedFormId' => $nextSubmittedFormId]);
                } elseif ($type === 'user_visibility_setting'){
                    Session::put('userVisibilitySetting2faVerification', true);
                    return response()->json(['status' => true, 'msg' => '', 'redirectTo' => null, 'nextSubmittedFormId' => $nextSubmittedFormId]);
                } else {
                    Session::put('googleFA', 2);

$redirect = url('admin/dashboard');
                    if($type == "login"){
                        Auth::loginUsingId($user->id,true);
                        Session::forget('user_temp_data');

// set cookie when 2fa suspended for 7 days
                        if($request->suspend_confirmation && !Session::has("MFPAuthType")){
                            $encryptedUserId = basicEncrypt(Auth::user()->id);

// valid 2fa for 7 day
                            Cookie::queue('amplivo_admin_2fa_verified', $encryptedUserId, 60 * 24 * 7);
                        }

// machine foot print device details
                        $getDeviceDetails = getDeviceDetails($request);
                        // create machine foot print
                        createMFP($getDeviceDetails);

/*---- START for send mail ----*/
                        $inputs['email'] = Auth::user()->details->email;
                        $inputs['ip'] = getClientIp($request);
                        $inputs['platform'] = 'amplivo';
                        $inputs['name'] = Auth::user()->first_name." ".Auth::user()->last_name;
                        $inputs['type'] = 1;
                        $inputs['now'] = now();
                        $emailSwitch = getEmailSettings('login');
                        if($emailSwitch == 'on'){
                            $emailClassRef = new LoginAttemptMail($inputs);
                            SendEmailJob::dispatch(Auth::user()->details->email, $emailClassRef);
                        }
                        User::where(['id'=> $user->id])->update(['last_login_at' => now()]);

$log = 'User ' . Auth::user()->details->email . ' logged in successfully from IP ' . $inputs['ip'] . '.';

saveLog($log, $user, ['logType' => 'Login successful'], 'Login successful');
                        /*---- END for send mail ----*/
                    }
                    return response()->json(['status' => true, 'msg' => '', 'redirectTo' => $redirect, 'nextSubmittedFormId' => $nextSubmittedFormId]);
                }
            } else {
                return response()->json(['status' => false, 'data' => '', 'msg' => "Invalid code. Please ensure you've entered the code correctly."]);
            }
        }
        $MFPAuthType = false;
        if(Session::has("MFPAuthType")){
            $MFPAuthType = Session::get("MFPAuthType");
        }
        $user = (Auth::check()) ? Auth::user() : Session::get('user_temp_data');
        if (!empty($user)) {
            $userSetting = UserSetting::where('user_id',$user->id)->first();
            if (!empty($userSetting->fa_setting) || !empty($userSetting->fa3_setting) || !empty($MFPAuthType)) {
                return view('backend.auth.2favalidate', compact('MFPAuthType','userSetting'));
            }
        }

return redirect('logout');
    }

/**
     * Get Otp Request
     * @return ResponseJson
     */
    public function OTPRequest()
    {
        $user = (Auth::check()) ? Auth::user() : Session::get('user_temp_data');
        Notification::route('mail', $user->details->email)->notify(new OTPVerificationNotification());
        return response()->json(['status' => true, 'msg' => "OTP is sent to your email address.", 'data' => null]);
    }
}