4b4d8ba2a1
During review of #4560. - Simplified command to share as much log as possible across different run options. - Extracted out user handling to share with MFA command. - Added specific handling for disabled avatar fetching. - Added mention of avatar endpoint, to make it clear where these avatars are coming from (Protect against user expectation of LDAP avatar sync). - Simplified a range of the testing. - Tweaked wording and code formatting.
53 lines
1.5 KiB
PHP
53 lines
1.5 KiB
PHP
<?php
|
|
|
|
namespace BookStack\Console\Commands;
|
|
|
|
use Exception;
|
|
use Illuminate\Console\Command;
|
|
|
|
class ResetMfaCommand extends Command
|
|
{
|
|
use HandlesSingleUser;
|
|
|
|
/**
|
|
* The name and signature of the console command.
|
|
*
|
|
* @var string
|
|
*/
|
|
protected $signature = 'bookstack:reset-mfa
|
|
{--id= : Numeric ID of the user to reset MFA for}
|
|
{--email= : Email address of the user to reset MFA for}
|
|
';
|
|
|
|
/**
|
|
* The console command description.
|
|
*
|
|
* @var string
|
|
*/
|
|
protected $description = 'Reset & Clear any configured MFA methods for the given user';
|
|
|
|
/**
|
|
* Execute the console command.
|
|
*/
|
|
public function handle(): int
|
|
{
|
|
try {
|
|
$user = $this->fetchProvidedUser();
|
|
} catch (Exception $exception) {
|
|
$this->error($exception->getMessage());
|
|
return 1;
|
|
}
|
|
|
|
$this->info("This will delete any configure multi-factor authentication methods for user: \n- ID: {$user->id}\n- Name: {$user->name}\n- Email: {$user->email}\n");
|
|
$this->info('If multi-factor authentication is required for this user they will be asked to reconfigure their methods on next login.');
|
|
$confirm = $this->confirm('Are you sure you want to proceed?');
|
|
if (!$confirm) {
|
|
return 1;
|
|
}
|
|
|
|
$user->mfaValues()->delete();
|
|
$this->info('User MFA methods have been reset.');
|
|
|
|
return 0;
|
|
}
|
|
}
|