PasswordRecoveryController
class PasswordRecoveryController extends Controller (View source)
Class PasswordRecoveryController.
Handles secure password recovery via email-based code validation. Implements rate limiting, expiration control, and session verification to ensure safe password reset flows.
Traits
Trait JsonResponseTrait.
Provides standardized and safe error logging with UTF-8 encoding, sensitive data masking, and controlled stack traces.
Constants
| private EXPIRATION_MINUTES |
|
| private MAX_ATTEMPTS |
|
| private ATTEMPT_TTL_SECONDS |
|
Properties
| protected EmailService | $emailService |
Methods
Return a 200 OK JSON response.
Return a 201 Created JSON response.
Return a 202 Accepted JSON response (request accepted for processing).
Return a 205 Reset Content JSON response.
Return a 400 Bad Request JSON response.
Return a 401 Unauthorized JSON response.
Return a 403 Forbidden JSON response.
Return a 404 Not Found JSON response.
Return a 409 Conflict JSON response.
Return a 422 Unprocessable Entity JSON response for validation errors.
Return a 429 Too Many Requests JSON response.
Return a 500 Internal Server Error JSON response.
Logs an error with consistent formatting and context.
Masks common sensitive fields (e.g., passwords, tokens) in the given context array.
Recursively converts all string values to UTF-8.
Returns a string representation of the exception trace, limited to the given number of lines.
Initializes the controller with the email service dependency.
Resends a new recovery code using the stored session email.
Validates the recovery code and allows password reset if successful.
Resets the user's password after successful code validation.
Details
protected JsonResponse
successResponse(array $data = [])
Return a 200 OK JSON response.
protected JsonResponse
createdResponse(array $data = [])
Return a 201 Created JSON response.
protected JsonResponse
acceptedResponse()
Return a 202 Accepted JSON response (request accepted for processing).
protected JsonResponse
noContentResponse()
Return a 204 No Content JSON response.
protected JsonResponse
resetContentResponse()
Return a 205 Reset Content JSON response.
protected JsonResponse
badRequestResponse(array $errors)
Return a 400 Bad Request JSON response.
protected JsonResponse
unauthorizedResponse(string $message = 'Não autorizado.')
Return a 401 Unauthorized JSON response.
protected JsonResponse
forbiddenResponse(string $message = 'Acesso negado.')
Return a 403 Forbidden JSON response.
protected JsonResponse
notFoundResponse(string $message = 'Recurso não encontrado.')
Return a 404 Not Found JSON response.
protected JsonResponse
conflictResponse(array $errors)
Return a 409 Conflict JSON response.
protected JsonResponse
validationErrorResponse(array $errors)
Return a 422 Unprocessable Entity JSON response for validation errors.
protected JsonResponse
tooManyRequestsResponse(string $message = 'Muitas requisições. Tente novamente mais tarde.')
Return a 429 Too Many Requests JSON response.
protected JsonResponse
internalErrorResponse(Throwable $e, string $message = 'Erro interno.')
Return a 500 Internal Server Error JSON response.
Logs the exception and returns a standardized JSON error message.
protected void
logError(string $message, Throwable $exception, array $context = [], string|null $channel = null)
Logs an error with consistent formatting and context.
protected array
sanitizeSensitiveData(array $data)
Masks common sensitive fields (e.g., passwords, tokens) in the given context array.
protected array
encodeStringsUtf8(array $data)
Recursively converts all string values to UTF-8.
protected string
getLimitedTrace(Throwable $exception, int $maxLines = 10)
Returns a string representation of the exception trace, limited to the given number of lines.
__construct(EmailService $emailService)
Initializes the controller with the email service dependency.
JsonResponse
sendCode(SendCodeRequest $request)
Sends a password recovery code to the user's email.
Starts a new recovery session.
JsonResponse
resendCode(Request $request)
Resends a new recovery code using the stored session email.
JsonResponse
validateCode(ValidateCodeRequest $request)
Validates the recovery code and allows password reset if successful.
JsonResponse
resetPassword(ResetPasswordRequest $request)
Resets the user's password after successful code validation.