public function LogintobogganController::logintobogganValidateEmail in LoginToboggan 8

This will return the output of the page.

1 string reference to 'LogintobogganController::logintobogganValidateEmail'

logintoboggan.routing.yml in ./logintoboggan.routing.yml

logintoboggan.routing.yml

File

src/Controller/LogintobogganController.php, line 29

Class

LogintobogganController

Class LogintobogganController.

Namespace

Drupal\logintoboggan\Controller

Code

public function logintobogganValidateEmail($user, $timestamp, $hashed_pass, $operation) {
  $account = user::load($user);

  // $cur_account = \Drupal::currentUser();
  $cur_account = $this
    ->currentUser();
  $hash_2 = user_pass_rehash($account, $timestamp);

  // If you don't need to verify email (i.e. can set password), that's
  // effectively ok for immediate login.
  $must_verify = $this
    ->config('user.settings')
    ->get('verify_mail');

  // Does have to verify but has not logged in previously OR
  // the user can login without verifying email first
  // - the hashed password is correct.
  $stop = '';
  if ($must_verify && !$account
    ->getLastLoginTime() || !$must_verify && $hashed_pass == user_pass_rehash($account, $timestamp)) {
    $this
      ->getLogger('user')
      ->notice('E-mail validation URL used for %name with
      timestamp @timestamp.', [
      '%name' => $account
        ->getAccountName(),
      '@timestamp' => $timestamp,
    ]);

    // Add trusted role.
    LogintobogganUtility::processValidation($account);

    // Where do we redirect after confirming the account?
    $redirect_setting = $this
      ->config('logintoboggan.settings')
      ->get('redirect_on_confirm');
    $redirect_on_register = !empty($redirect_setting) ? $redirect_setting : '/';
    $redirect = LogintobogganUtility::processRedirect($redirect_on_register, $account);
    switch ($operation) {

      // Proceed with normal user login, as long as it's open registration and
      // account hasn't been blocked.
      case 'login':

        // Only show the validated message if there's a valid trusted role.
        if (!$must_verify) {
          $this
            ->messenger()
            ->addMessage($this
            ->t('You have successfully validated your e-mail address.'), 'status');
        }
        if ($account
          ->isBlocked()) {
          $this
            ->messenger()
            ->addMessage($this
            ->t('Your account is currently blocked -- login cancelled.'), 'error');
          return new RedirectResponse(Url::fromRoute('<front>')
            ->toString());
        }
        else {
          $redirect = logintoboggan_process_login($account, $redirect);
          return new RedirectResponse($redirect
            ->toString());
        }
        break;

      // Admin validation.
      case 'admin':
        if (!$must_verify) {
          _user_mail_notify('status_activated', $account);
        }
        $this
          ->messenger()
          ->addMessage($this
          ->t('You have successfully validated %user.', [
          '%user' => $account
            ->getUsername(),
        ]));
        if ($cur_account
          ->isAnonymous()) {
          return new RedirectResponse(Url::fromRoute('<front>', [
            'user' => $user,
          ])
            ->toString());
        }
        else {
          return new RedirectResponse(Url::fromRoute('entity.user.edit_form', [
            'user' => $user,
          ])
            ->toString());
        }
        break;

      // Catch all.
      default:
        $this
          ->messenger()
          ->addMessage($this
          ->t('You have successfully validated %user.', [
          '%user' => $account
            ->getUsername(),
        ]));
        return new RedirectResponse(Url::fromRoute('<front>')
          ->toString());
    }
  }
  else {
    $message = $this
      ->t('Sorry, you can only use your validation link once for security reasons.');

    // No one currently logged in, go straight to user login page.
    if ($cur_account
      ->isAnonymous()) {
      $message .= $this
        ->t('Please log in with your username and password instead now.');
      $goto = 'user.login';
    }
    else {
      $goto = 'user.page';
    }
    $this
      ->messenger()
      ->addMessage($message, 'error');
    return new RedirectResponse(Url::fromRoute($goto)
      ->toString());
  }
}