Initial commit

2026-03-23 21:37:59 +01:00
commit 2547717edb
2193 changed files with 972171 additions and 0 deletions
--- a/app/Http/Controllers/UserLoginController.php
+++ b/app/Http/Controllers/UserLoginController.php
@@ -0,0 +1,112 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Models\User;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Mcamara\LaravelLocalization\Facades\LaravelLocalization;
+
+class UserLoginController extends Controller
+{
+    /**
+     * Direct link to user login - can be used in emails
+     * Handles the authentication flow:
+     * 1. If user not authenticated -> redirect to user login with intended URL
+     * 2. If user authenticated but wrong user -> 403 forbidden
+     * 3. If correct user -> redirect to intended URL or main page
+     * 4. Supports custom intended URL via query parameter
+     */
+    public function directLogin(Request $request, $userId)
+    {
+        \Log::info('UserLoginController: directLogin called', [
+            'user_id' => $userId,
+            'request_url' => $request->fullUrl(),
+            'all_params' => $request->all(),
+        ]);
+
+        // Validate user exists
+        $user = User::find($userId);
+        if (!$user) {
+            abort(404, __('User not found'));
+        }
+
+        // Get optional intended destination after successful login
+        // Default to main page if not specified
+        $intendedUrl = $request->query('intended');
+        if (!$intendedUrl) {
+            $intendedUrl = LaravelLocalization::localizeURL(
+                route('main'),
+                $user->lang_preference ?? config('app.fallback_locale')
+            );
+        }
+
+        // Check if user is authenticated on web guard
+        \Log::info('UserLoginController: Checking authentication', [
+            'is_authenticated' => Auth::guard('web')->check(),
+        ]);
+
+        if (!Auth::guard('web')->check()) {
+            // User not logged in - redirect to user login with return URL
+            $returnUrl = LaravelLocalization::localizeURL(
+                route('user.direct-login', ['userId' => $userId]),
+                $user->lang_preference ?? config('app.fallback_locale')
+            );
+            if ($intendedUrl) {
+                $returnUrl .= '?intended=' . urlencode($intendedUrl);
+            }
+
+            // Get the name parameter from the current request to pass along
+            $nameParam = $request->query('name', $user->name);
+
+            \Log::info('UserLoginController: Redirecting to login', [
+                'return_url' => $returnUrl,
+                'intended_url' => $intendedUrl,
+                'prefill_username' => $nameParam,
+            ]);
+
+            // Store in session for Laravel to redirect after login
+            session()->put('url.intended', $returnUrl);
+
+            // Pass username as URL parameter to pre-fill login form
+            // Use LaravelLocalization to ensure the parameter is preserved through localization
+            $loginUrl = LaravelLocalization::localizeURL(
+                route('login'),
+                $user->lang_preference ?? config('app.fallback_locale')
+            );
+            $loginUrl .= '?name=' . urlencode($nameParam);
+
+            \Log::info('UserLoginController: Redirecting to login with name parameter', [
+                'login_url' => $loginUrl,
+                'username' => $nameParam,
+            ]);
+
+            return redirect()->to($loginUrl, 302, [], false);
+        }
+
+        // User is authenticated - verify they are the correct user
+        $authenticatedUser = Auth::guard('web')->user();
+
+        if ($authenticatedUser->id !== $user->id) {
+            abort(403, __('You do not have access to this profile'));
+        }
+
+        // Re-activate profile if inactive
+        if (timebank_config('profile_inactive.re-activate_at_login')) {
+            if (!$user->isActive()) {
+                $user->inactive_at = null;
+                $user->save();
+                info('User re-activated: ' . $user->name);
+            }
+        }
+
+        \Log::info('UserLoginController: Authenticated user verified, redirecting', [
+            'user_id' => $authenticatedUser->id,
+            'target_user_id' => $user->id,
+            'intended_url' => $intendedUrl,
+        ]);
+
+        // Redirect to intended URL
+        return redirect($intendedUrl);
+    }
+}