willpower232/TOTPBTF3

<?php
namespace App\Models;

use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;
use Hash;
use Defuse\Crypto\KeyProtectedByPassword;

/**
 *  * @property \Illuminate\Database\Eloquent\Collection $tokens
 */
class User extends Authenticatable
{
    use Notifiable;

    /** @var array<string> */
    protected $fillable = array(
        'name',
        'email',
        'password',
        'protected_key_encoded',
    );

    /** @var array<string> */
    protected $hidden = array(
        'password',
        'remember_token',
    );

    /**
     * Hash the password value when it is set
     *
     * WARNING: the existence of this method means that Auth::logoutOtherDevices will break your user record
     * because you will end up hashing a hash
     */
    public function setPasswordAttribute(string $value) : void
    {
        $this->attributes['password'] = Hash::make($value);
    }

    public function tokens() : \Illuminate\Database\Eloquent\Relations\HasMany
    {
        return $this->hasMany(Token::class);
    }

    /**
     * generate an encryption key for the user
     *
     * @param string $password the users plaintext password
     *
     * @return string the unlocked user key
     */
    public function getEncryptionKey(string $password) : string
    {
        $protected_key = KeyProtectedByPassword::loadFromAsciiSafeString($this->protected_key_encoded);
        $user_key = $protected_key->unlockKey($password);

        return $user_key->saveToAsciiSafeString();
    }

    /**
     * store the encryption key in the session
     *
     * @param string $password whatever was input
     *
     * @return void
     */
    public function putEncryptionKeyInSession(string $password) : void
    {
        session()->put('encryptionkey', $this->getEncryptionKey($password));
    }

    /**
     * Return the validation rules for a given circumstance
     *
     * @param string $for the circumstances of validation
     *
     * @return array<string, string> the compiled list of rules
     */
    public static function getValidationRules(string $for = '')
    {
        $rules = array();

        if ($for == 'login' || $for == 'create' || $for == 'update') {
            array_merge_by_reference($rules, array(
                'email' => 'required|string|email',
            ));

            if ($for == 'login') {
                array_merge_by_reference($rules, array(
                    'password' => 'required|string',
                ));
            }

            if ($for == 'create' || $for == 'update') {
                array_merge_by_reference($rules, array(
                    'name' => 'required|string',
                ));
            }

            if ($for == 'create') {
                array_merge_by_reference($rules, array(
                    'password' => 'required|string',
                ));
            }

            if ($for == 'update') {
                array_merge_by_reference($rules, array(
                    'currentpassword' => 'required|string',
                    'newpassword' => 'confirmed',
                ));
            }
        }

        return $rules;
    }
}