debianize-mobilizon/lib/eventos/actors/service/reset_password.ex

defmodule Eventos.Actors.Service.ResetPassword do
  @moduledoc false

  require Logger

  alias Eventos.{Mailer, Repo, Actors.User}
  alias Eventos.Email.User, as: UserEmail

  @doc """
  Check that the provided token is correct and update provided password
  """
  @spec check_reset_password_token(String.t(), String.t()) :: tuple
  def check_reset_password_token(password, token) do
    with %User{} = user <- Repo.get_by(User, reset_password_token: token) do
      Repo.update(
        User.password_reset_changeset(user, %{
          "password" => password,
          "reset_password_sent_at" => nil,
          "reset_password_token" => nil
        })
      )
    else
      _err ->
        {:error, :invalid_token}
    end
  end

  @doc """
  Send the email reset password, if it's not too soon since the last send
  """
  @spec send_password_reset_email(User.t(), String.t()) :: tuple
  def send_password_reset_email(%User{} = user, locale \\ "en") do
    with :ok <- we_can_send_email(user),
         {:ok, %User{} = user_updated} <-
           Repo.update(
             User.send_password_reset_changeset(user, %{
               "reset_password_token" => random_string(30),
               "reset_password_sent_at" => DateTime.utc_now()
             })
           ) do
      mail =
        user_updated
        |> UserEmail.reset_password_email(locale)
        |> Mailer.deliver_later()

      {:ok, mail}
    else
      {:error, reason} -> {:error, reason}
    end
  end

  @spec random_string(integer) :: String.t()
  defp random_string(length) do
    length
    |> :crypto.strong_rand_bytes()
    |> Base.url_encode64()
  end

  @spec we_can_send_email(User.t()) :: boolean
  defp we_can_send_email(%User{} = user) do
    case user.reset_password_sent_at do
      nil ->
        :ok

      _ ->
        case Timex.before?(Timex.shift(user.reset_password_sent_at, hours: 1), DateTime.utc_now()) do
          true ->
            :ok

          false ->
            {:error, :email_too_soon}
        end
    end
  end
end