icingaweb2/application/forms/Account/ChangePasswordForm.php

<?php
/* Icinga Web 2 | (c) 2016 Icinga Development Team | GPLv2+ */

namespace Icinga\Forms\Account;

use Icinga\Application\Config;
use Icinga\Application\Hook\PasswordPolicyHook;
use Icinga\Application\ProvidedHook\DefaultPasswordPolicy;
use Icinga\Authentication\PasswordValidator;
use Icinga\Authentication\User\DbUserBackend;
use Icinga\Data\Filter\Filter;
use Icinga\User;
use Icinga\Web\Form;
use Icinga\Web\Notification;

/**
 * Form for changing user passwords
 */
class ChangePasswordForm extends Form
{
    /**
     * The user backend
     *
     * @var DbUserBackend
     */
    protected $backend;

    /**
     *  The password policy object
     *
     * @var PasswordPolicyHook
     */
    protected ?PasswordPolicyHook $passwordPolicyObject = null;

    /**
     * {@inheritdoc}
     */
    public function init()
    {
        $this->setSubmitLabel($this->translate('Update Account'));
    }

    /**
     * {@inheritdoc}
     */
    public function createElements(array $formData)
    {
        $passwordPolicy = Config::app()->get(
            'global',
            'password_policy'
        );
        $this->passwordPolicyObject = new $passwordPolicy();
        $passwordPolicyDescription = $this->passwordPolicyObject->displayPasswordPolicy();

        if ($passwordPolicyDescription != '') {
            $this->addDescription($passwordPolicyDescription);
        }

        $this->addElement(
            'password',
            'old_password',
            array(
                'label'         => $this->translate('Old Password'),
                'required'      => true
            )
        );
        $this->addElement(
            'password',
            'new_password',
            array(
                'label'         => $this->translate('New Password'),
                'required'      => true,
                'validators' =>
                    $this->passwordPolicyObject !== null ?
                        [new PasswordValidator($this->passwordPolicyObject)] : [],
            )
        );
        $this->addElement(
            'password',
            'new_password_confirmation',
            array(
                'label'         => $this->translate('Confirm New Password'),
                'required'      => true,
                'validators'        => array(
                    array('identical', false, array('new_password'))
                )
            )
        );
    }

    /**
     * {@inheritdoc}
     */
    public function onSuccess()
    {
        $backend = $this->getBackend();
        $backend->update(
            $backend->getBaseTable(),
            array('password' => $this->getElement('new_password')->getValue()),
            Filter::where('user_name', $this->Auth()->getUser()->getUsername())
        );
        Notification::success($this->translate('Account updated'));
    }

    /**
     * {@inheritdoc}
     */
    public function isValid($formData)
    {
        $valid = parent::isValid($formData);
        if (! $valid) {
            return false;
        }

        $oldPasswordEl = $this->getElement('old_password');

        if (! $this->backend->authenticate($this->Auth()->getUser(), $oldPasswordEl->getValue())) {
            $oldPasswordEl->addError($this->translate('Old password is invalid'));
            $this->markAsError();
            return false;
        }

        return true;
    }

    /**
     * Get the user backend
     *
     * @return  DbUserBackend
     */
    public function getBackend()
    {
        return $this->backend;
    }

    /**
     * Set the user backend
     *
     * @param   DbUserBackend $backend
     *
     * @return  $this
     */
    public function setBackend(DbUserBackend $backend)
    {
        $this->backend = $backend;
        return $this;
    }
}