fix: change password api route and controller

Author: EllaiSys

app/Http/Controllers/ApiAuthController.php

@@ -7,6 +7,8 @@
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Log;
 
+use App\Models\User;
+
 use Ellaisys\Cognito\AwsCognitoClaim;
 use Ellaisys\Cognito\Auth\AuthenticatesUsers;
 use Ellaisys\Cognito\Auth\ChangePasswords;
@@ -32,33 +34,6 @@ class ApiAuthController extends BaseController
     use AuthenticatesUsers;
     use ChangePasswords;
     use RegistersUsers;
-    //use RegisterMFA;
-    
-
-    // public function register(Request $request)
-    // {
-    //     $this->validator($request->all())->validate();
-
-    //     $attributes = [];
-
-    //     $userFields = ['name', 'email'];
-
-    //     foreach($userFields as $userField) {
-
-    //         if ($request->$userField === null) {
-    //             throw new \Exception("The configured user field $userField is not provided in the request.");
-    //         }
-
-    //         $attributes[$userField] = $request->$userField;
-    //     }
-
-    //     app()->make(CognitoClient::class)->register($request->email, $request->password, $attributes);
-
-    //     event(new Registered($user = $this->create($request->all())));
-
-    //     return $this->registered($request, $user)
-    //         ?: redirect($this->redirectPath());
-    // } //Function ends
 
 
     /**
@@ -69,6 +44,11 @@ public function actionRegister(Request $request)
         return $this->register($request);
     } //Function ends
 
+    public function create (array $data)
+    {
+        return User::create($data);
+    } //Function ends
+
 
     /**
      * Login action for the API based approach.
@@ -127,29 +107,19 @@ public function actionChangePassword(Request $request)
             ]);
             $validator->validate();
 
-            // Get Current User
-            $userCurrent = auth()->guard('web')->user();
-
             if ($this->reset($request)) {
-                return redirect(route('login'))->with('success', true);
+                return response()->json([
+                    'status' => 'success',
+                    'message' => 'Password updated successfully'
+                ], 200);
             } else {
-				return redirect()->back()
-					->with('status', 'error')
-					->with('message', 'Password updated failed');
+				return response()->json([
+					'status' => 'error',
+					'message' => 'Password update failed'
+				], 400);
 			} //End if
         } catch(Exception $e) {
-			$message = 'Error sending the reset mail.';
-			if ($e instanceof ValidationException) {
-                $message = $e->errors();
-            } else if ($e instanceof CognitoIdentityProviderException) {
-				$message = $e->getAwsErrorMessage();
-			} else {
-                //Do nothing
-            } //End if
-
-			return redirect()->back()
-				->with('status', 'error')
-				->with('message', $message);
+            throw $e;
         } //Try-catch ends
     } //Function ends
 

routes/api.php

@@ -24,6 +24,7 @@
     Route::post('login', [App\Http\Controllers\ApiAuthController::class, 'actionLogin']);
     Route::post('register', [App\Http\Controllers\ApiAuthController::class, 'actionRegister']);
     Route::post('/login/mfa', [App\Http\Controllers\ApiMFAController::class, 'actionValidateMFA']);
+    Route::post('changepassword', [App\Http\Controllers\ApiAuthController::class, 'actionChangePassword']);
 
     Route::group(['middleware' => 'aws-cognito'], function() {
         Route::get('profile', [App\Http\Controllers\AuthController::class, 'getRemoteUser']);