tbianchini/shopit-back
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(auth): expire stale password reset codes

Browse Source
This commit is contained in:
ncoronel
2026-08-25 14:10:33 -03:00
parent 99808c1053
commit 733064c0dc
4 changed files with 49 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
app/Domains/Auth/Controllers/ValidateResetPasswordAttemptController.php
View File

@@ -22,10 +22,18 @@ class ValidateResetPasswordAttemptController extends Controller
{
$data = $request->validated();
if (! $this->resetPasswordAttemptService->validateCode(
$result = $this->resetPasswordAttemptService->validateCode(
$data['email'],
$data['codigo'],
)) {
);
if ($result === ResetPasswordAttemptService::CODE_EXPIRED) {
throw ValidationException::withMessages([
'codigo' => __('api.auth.reset_code_expired'),
]);
}
if ($result !== ResetPasswordAttemptService::CODE_VALID) {
throw ValidationException::withMessages([
'codigo' => __('api.auth.reset_code_invalid'),
]);