Password hashing

Author: binaryk

src/Http/Controllers/ProfileUpdateController.php

@@ -3,6 +3,7 @@
 namespace Binaryk\LaravelRestify\Http\Controllers;
 
 use Binaryk\LaravelRestify\Http\Requests\RestifyRequest;
+use Illuminate\Support\Facades\Hash;
 
 class ProfileUpdateController extends RepositoryController
 {
@@ -12,8 +13,15 @@ public function __invoke(RestifyRequest $request)
 
         $request->validate([
             'email' => 'sometimes|required|unique:users,email,except,'.$user->id,
+            'password' => 'sometimes|required|min:5|confirmed',
         ]);
 
+        if ($request->has('password')) {
+            $request->merge([
+                'password' => Hash::make($request->get('password')),
+            ]);
+        }
+
         $user->update($request->only($user->getFillable()));
 
         return $this->response()->data($user->fresh());

tests/Controllers/ProfileControllerTest.php

@@ -5,6 +5,7 @@
 use Binaryk\LaravelRestify\Tests\Fixtures\User\User;
 use Binaryk\LaravelRestify\Tests\IntegrationTest;
 use Illuminate\Http\UploadedFile;
+use Illuminate\Support\Facades\Hash;
 use Illuminate\Support\Facades\Storage;
 
 class ProfileControllerTest extends IntegrationTest
@@ -46,6 +47,20 @@ public function test_profile_update()
         ]);
     }
 
+    public function test_profile_update_password()
+    {
+        $this->putJson('restify-api/profile', [
+            'email' => '[email protected]',
+            'name' => 'Eduard',
+            'password' => 'secret',
+            'password_confirmation' => 'secret',
+        ])
+            ->assertStatus(200);
+
+        $this->assertTrue(Hash::check('secret', $this->authenticatedAs->password));
+
+    }
+
     public function test_profile_update_unique_email()
     {
         factory(User::class)->create([