passwordResetToken.dao.php

Aller à la documentation de ce fichier.

<?php
 
class PasswordResetTokenDAO
{
    private ?PDO $pdo;
 
    public function __construct(?PDO $pdo)
    {
        $this->pdo = $pdo;
    }
 
    public function create(string $email): ?PasswordResetToken
    {
        // Invalider tous les tokens existants pour cet utilisateur
        $this->invalidateTokensForUser($email);
 
        // Générer un nouveau token
        $tokenValue = PasswordResetToken::genererToken();
        $dateCreation = new DateTime();
        $dateExpiration = (clone $dateCreation)->modify('+1 hour');
 
        $sql = "INSERT INTO passwordResetToken (token, emailUtilisateur, dateCreation, dateExpiration, estUtilise)
                VALUES (:token, :email, :dateCreation, :dateExpiration, 0)";
 
        $stmt = $this->pdo->prepare($sql);
        $result = $stmt->execute([
            ':token' => $tokenValue,
            ':email' => $email,
            ':dateCreation' => $dateCreation->format('Y-m-d H:i:s'),
            ':dateExpiration' => $dateExpiration->format('Y-m-d H:i:s')
        ]);
 
        if ($result) {
            return new PasswordResetToken(
                (int)$this->pdo->lastInsertId(),
                $tokenValue,
                $email,
                $dateCreation,
                $dateExpiration,
                false
            );
        }
 
        return null;
    }
 
    public function findByToken(string $token): ?PasswordResetToken
    {
        $sql = "SELECT * FROM passwordResetToken WHERE token = :token";
        $stmt = $this->pdo->prepare($sql);
        $stmt->execute([':token' => $token]);
        $row = $stmt->fetch(PDO::FETCH_ASSOC);
 
        if ($row) {
            return $this->hydrate($row);
        }
 
        return null;
    }
 
    public function findValidToken(string $token): ?PasswordResetToken
    {
        $sql = "SELECT * FROM passwordResetToken 
                WHERE token = :token 
                AND estUtilise = 0 
                AND dateExpiration > NOW()";
        $stmt = $this->pdo->prepare($sql);
        $stmt->execute([':token' => $token]);
        $row = $stmt->fetch(PDO::FETCH_ASSOC);
 
        if ($row) {
            return $this->hydrate($row);
        }
 
        return null;
    }
 
    public function findActiveTokensByEmail(string $email): array
    {
        $sql = "SELECT * FROM passwordResetToken 
                WHERE emailUtilisateur = :email 
                AND estUtilise = 0 
                AND dateExpiration > NOW()
                ORDER BY dateCreation DESC";
        $stmt = $this->pdo->prepare($sql);
        $stmt->execute([':email' => $email]);
        $rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
 
        return $this->hydrateAll($rows);
    }
 
    public function markAsUsed(string $token): bool
    {
        $sql = "UPDATE passwordResetToken SET estUtilise = 1 WHERE token = :token";
        $stmt = $this->pdo->prepare($sql);
        return $stmt->execute([':token' => $token]);
    }
 
    public function invalidateTokensForUser(string $email): bool
    {
        $sql = "UPDATE passwordResetToken SET estUtilise = 1 
                WHERE emailUtilisateur = :email AND estUtilise = 0";
        $stmt = $this->pdo->prepare($sql);
        return $stmt->execute([':email' => $email]);
    }
 
    public function deleteExpiredTokens(): int
    {
        $sql = "DELETE FROM passwordResetToken WHERE dateExpiration < NOW()";
        $stmt = $this->pdo->prepare($sql);
        $stmt->execute();
        return $stmt->rowCount();
    }
 
    public function updatePassword(string $email, string $nouveauMotDePasse): bool
    {
        $hashedPassword = password_hash($nouveauMotDePasse, PASSWORD_ARGON2ID);
 
        $sql = "UPDATE utilisateur SET motDePasseUtilisateur = :password 
                WHERE emailUtilisateur = :email";
        $stmt = $this->pdo->prepare($sql);
        return $stmt->execute([
            ':password' => $hashedPassword,
            ':email' => $email
        ]);
    }
 
    private function hydrate(array $row): PasswordResetToken
    {
        return new PasswordResetToken(
            (int)$row['idToken'],
            $row['token'],
            $row['emailUtilisateur'],
            new DateTime($row['dateCreation']),
            new DateTime($row['dateExpiration']),
            (bool)$row['estUtilise']
        );
    }
 
    private function hydrateAll(array $rows): array
    {
        $tokens = [];
        foreach ($rows as $row) {
            $tokens[] = $this->hydrate($row);
        }
        return $tokens;
    }
 
    public function getPdo(): ?PDO
    {
        return $this->pdo;
    }
 
    public function setPdo(?PDO $pdo): void
    {
        $this->pdo = $pdo;
    }
}