Sign.php

<?php defined('SYSPATH') or die('No direct script access.');

class Controller_Handler_Sign extends Controller_Handler {
        
        public function before() {
            parent::before();
        }

        public function action_in()
        {
            $this->post->rule('login', 'email')->rule('login', 'not_empty');
            $checkLogin = true;
            $response['success'] = false;
            if(!$this->post->check())
            {
                $this->post = Validation::factory($this->post->data());
                $this->post->rule('login', 'alpha_dash')->rule('login', 'not_empty');
                if(!$this->post->check())
                {
                    // Data is not safe, don't even try to authorize
                    $checkLogin = false;
                }
            }
            if($checkLogin)
            {
                $response['success'] = User::instance()
                        ->signIn($this->post['login'],
                                $this->post['password']);
            }
            $this->response->body(json_encode($response));
        }
      
        public function action_up()
        {
            $config = Kohana::$config->load('security.securityPolicy');
            $response['success'] = false;
            $this->post->rule('activation_code', 'alpha_numeric')
                ->rule('login', $config['login']['allowedSymbols'])
                ->rule('login', 'not_empty')
                ->rule('password', 'min_length', array(':value', $config['password']['length']))
                ->rule('confirm_password', 'matches', array(':validation', 'confirm_password', 'password'))
                ->rule('email', 'not_empty')
                ->rule('email', 'email'); 
            if($this->post->check())
            {
                list($response['success'], $attempt) = User::instance()
                        ->signUp($this->post['activation_code'],
                                $this->post['email'],
                                $this->post['login'],
                                $this->post['password']);
                if(!$response['success'])
                {
                    switch ($attempt)
                    {
                        case 'login_exists':
                            $this->post->error('login', 'already_exists');
                        break;
                        case 'mail_exists':
                            $this->post->error('email', 'already_exists');
                        break;
                        case 'invalid_code':
                            $this->post->error('activation_code', 'invalid_code');
                        break;
                    }
                }
            }
            if(!$response['success'])
            {
                $response['errors'] = $this->post->errors ('signin');
            }
            $this->response->body(json_encode($response));
        }        
        
        public function action_remindPassword()
        {
            $response['success'] = false;
            $this->post->rule('email', 'not_empty')->rule('email', 'email');
            if($this->post->check())
            {
                $email = $this->post['email'];
                if(Account::isMailValid($email))
                {
                    Account::createRecoveryRequest($this->post['email']);
                    $response['success'] = true;
                }
                else
                    $response['error'] = 'Пользователь с таким e-mail адресом не зарегистрирован в системе!';
            }
            else
                $response['error'] = 'Введенная строка не является e-mail адресом!';

            $this->response->body(json_encode($response));
        }
        
        public function action_changePassword()
        {
            $config = Kohana::$config->load('security.securityPolicy');
            $response['success'] = false;
            $this->post->rule('token', 'alpha_numeric')
                ->rule('password', 'min_length', array(':value', $config['password']['length']))
                ->rule('confirm_password', 'matches', array(':validation', 'confirm_password', 'password'));
            if($this->post->check())
            {
                $token = $this->post['token'];
                if(Account::checkToken($token))
                {
                    Account::changePasswordByToken($token, $this->post['password']);
                    $response['success'] = true;
                }
            }
            if(!$response['success'])
            {
                $response['errors'] = $this->post->errors ('signin');
            }
            $this->response->body(json_encode($response));
        }
}