Initial commit

app/Http/Controllers/TwoFactorAuthController.php

@@ -0,0 +1,66 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Requests\EnableTwoFactorAuthRequest;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use PragmaRX\Google2FALaravel\Support\Authenticator;
+
+class TwoFactorAuthController extends Controller
+{
+    protected $twoFactor;
+    protected $authenticator;
+
+    public function __construct(Request $request)
+    {
+        $this->twoFactor = app('pragmarx.google2fa');
+        $this->authenticator = app(Authenticator::class)->boot($request);
+    }
+
+    public function store(EnableTwoFactorAuthRequest $request)
+    {
+        if (!$this->twoFactor->verifyKey(user()->two_factor_secret, $request->two_factor_token)) {
+            return back()->withErrors(['two_factor_token' => 'The token you entered was incorrect']);
+        }
+
+        user()->update(['two_factor_enabled' => true]);
+
+        $this->authenticator->login();
+
+        return back()->with(['status' => '2FA Enabled Successfully']);
+    }
+
+    public function update()
+    {
+        if (user()->two_factor_enabled) {
+            return back()->withErrors(['regenerate_2fa' => 'You must disable 2FA before you can regenerate your secret key']);
+        }
+
+        user()->update(['two_factor_secret' => $this->twoFactor->generateSecretKey()]);
+
+        return back()->with(['status' => '2FA Secret Successfully Regenerated']);
+    }
+
+    public function destroy(Request $request)
+    {
+        if (!Hash::check($request->current_password_2fa, user()->password)) {
+            return back()->withErrors(['current_password_2fa' => 'Current password incorrect']);
+        }
+
+        user()->update(['two_factor_enabled' => false]);
+
+        $this->authenticator->logout();
+
+        return back()->with(['status' => '2FA Disabled Successfully']);
+    }
+
+    public function authenticateTwoFactor(Request $request)
+    {
+        if ($request->session()->has('intended_path')) {
+            return redirect($request->session()->pull('intended_path'));
+        }
+
+        redirect()->intended($request->redirectPath);
+    }
+}