mirror of
https://github.com/flarum/framework.git
synced 2025-02-16 01:32:45 +08:00
5b0d0d9f0f
They will probably be refactored away at a later stage (when we get rid of the command bus). Until then, this lets us remove the Flarum\Core namespace and actually feels quite clean.
69 lines
1.7 KiB
PHP
69 lines
1.7 KiB
PHP
<?php
|
|
|
|
/*
|
|
* This file is part of Flarum.
|
|
*
|
|
* (c) Toby Zerner <toby.zerner@gmail.com>
|
|
*
|
|
* For the full copyright and license information, please view the LICENSE
|
|
* file that was distributed with this source code.
|
|
*/
|
|
|
|
namespace Flarum\Api\Controller;
|
|
|
|
use Flarum\User\Command\EditUser;
|
|
use Flarum\User\Exception\PermissionDeniedException;
|
|
use Illuminate\Contracts\Bus\Dispatcher;
|
|
use Psr\Http\Message\ServerRequestInterface;
|
|
use Tobscure\JsonApi\Document;
|
|
|
|
class UpdateUserController extends AbstractShowController
|
|
{
|
|
/**
|
|
* {@inheritdoc}
|
|
*/
|
|
public $serializer = 'Flarum\Api\Serializer\CurrentUserSerializer';
|
|
|
|
/**
|
|
* {@inheritdoc}
|
|
*/
|
|
public $include = ['groups'];
|
|
|
|
/**
|
|
* @var Dispatcher
|
|
*/
|
|
protected $bus;
|
|
|
|
/**
|
|
* @param Dispatcher $bus
|
|
*/
|
|
public function __construct(Dispatcher $bus)
|
|
{
|
|
$this->bus = $bus;
|
|
}
|
|
|
|
/**
|
|
* {@inheritdoc}
|
|
*/
|
|
protected function data(ServerRequestInterface $request, Document $document)
|
|
{
|
|
$id = array_get($request->getQueryParams(), 'id');
|
|
$actor = $request->getAttribute('actor');
|
|
$data = array_get($request->getParsedBody(), 'data', []);
|
|
|
|
// Require the user's current password if they are attempting to change
|
|
// their own email address.
|
|
if (isset($data['attributes']['email']) && $actor->id == $id) {
|
|
$password = array_get($request->getParsedBody(), 'meta.password');
|
|
|
|
if (! $actor->checkPassword($password)) {
|
|
throw new PermissionDeniedException;
|
|
}
|
|
}
|
|
|
|
return $this->bus->dispatch(
|
|
new EditUser($id, $actor, $data)
|
|
);
|
|
}
|
|
}
|