openvk/Web/Models/Entities/PasswordReset.php

<?php

declare(strict_types=1);

namespace openvk\Web\Models\Entities;

use openvk\Web\Models\Repositories\Users;
use openvk\Web\Models\RowModel;
use openvk\Web\Util\DateTime;

class PasswordReset extends RowModel
{
    protected $tableName = "password_resets";

    public function getUser(): User
    {
        return (new Users())->get($this->getRecord()->profile);
    }

    public function getKey(): string
    {
        return $this->getRecord()->key;
    }

    public function getToken(): string
    {
        return $this->getKey();
    }

    public function getCreationTime(): DateTime
    {
        return new DateTime($this->getRecord()->timestamp);
    }

    /**
     * User can request password reset only if he does not have any "new" password resets.
     * Password reset becomes "old" after 5 minutes and one second.
     */
    public function isNew(): bool
    {
        return $this->getRecord()->timestamp > (time() - (5 * MINUTE));
    }

    /**
     * Token is valid only for 3 days.
     */
    public function isStillValid(): bool
    {
        return $this->getRecord()->timestamp > (time() - (3 * DAY));
    }

    public function verify(string $token): bool
    {
        try {
            return $this->isStillValid() ? sodium_memcmp($this->getKey(), $token) : false;
        } catch (\SodiumException $ex) {
            return false;
        }
    }

    public function save(?bool $log = false): void
    {
        $this->stateChanges("key", base64_encode(openssl_random_pseudo_bytes(46)));
        $this->stateChanges("timestamp", time());

        parent::save($log);
    }
}