Differential D3379 Diff 10093 src/app/Console/Commands/PasswordRetentionCommand.php

Changeset View

Standalone View

src/app/Console/Commands/PasswordRetentionCommand.php

This file was added.

				<?php

				namespace App\Console\Commands;

				use App\Console\Command;
				use Carbon\Carbon;
				use Illuminate\Support\Facades\DB;

				class PasswordRetentionCommand extends Command
				{
				/**
				* The name and signature of the console command.
				*
				* @var string
				*/
				protected $signature = 'password:retention';

				/**
				* The console command description.
				*
				* @var string
				*/
				protected $description = 'Notifies users about expected expiration of their password.';

				/**
				* Execute the console command.
				*
				* @return mixed
				*/
				public function handle()
				{
				// Get all users (accounts) with max_password_age set
				$accounts = \App\User::select('users.*', 'user_settings.value as max_age')
				->join('user_settings', 'users.id', '=', 'user_settings.user_id')
				->withEnvTenantContext('users')
				->where('user_settings.key', 'max_password_age')
				->cursor();

				foreach ($accounts as $account) {
				// For all users in the account (get the password update date)...
				$account->users(false)
				->addSelect(
				DB::raw("(select value from user_settings"
				. " where users.id = user_settings.user_id and user_settings.key = 'password_update'"
				. ") as password_update")
				)
				->get()
				->each(function ($user) use ($account) {
				// Skip incomplete or suspended users
				if (!$user->isImapReady() \|\| $user->isSuspended()) {
				mollekopfUnsubmitted Not Done Inline Actions I think skipping suspended users makes sense. I wouldn't skip degraded users. mollekopf: I think skipping suspended users makes sense. I wouldn't skip degraded users.
				return;
				}

				// If the password was never updated use the user creation time
				if (!empty($user->password_update)) {
				$lastUpdate = new Carbon($user->password_update);
				} else {
				$lastUpdate = $user->created_at;
				}

				$nextUpdate = $lastUpdate->copy()->addMonthsWithoutOverflow($account->max_age);
				$diff = Carbon::now()->diffInDays($nextUpdate, false);

				// The password already expired, do nothing
				if ($diff <= 0) {
				return;
				}

				if ($warnedOn = $user->getSetting('password_expiration_warning')) {
				$warnedOn = new Carbon($warnedOn);
				}

				// The password expires in 14 days or less
				if ($diff <= 14) {
				// Send a warning if it wasn't sent yet or 7 days passed since the last warning.
				// Which means that we send the email 14 and 7 days before the password expires.
				if (empty($warnedOn) \|\| $warnedOn->diffInDays(Carbon::now(), false) > 7) {
				\App\Jobs\Password\RetentionEmailJob::dispatch($user, $nextUpdate->toDateString());
				}
				}
				});
				}
				}
				}