From 52a9c6ba1acb22f4197c7f89116b0e0e3fd8152f Mon Sep 17 00:00:00 2001
From: Anders <anders164a@gmail.com>
Date: Mon, 27 Jul 2020 13:09:51 +0200
Subject: [PATCH] User can now change password

---
 .../app/Http/Controllers/UserController.php   | 29 ++++++++++++++-----
 1 file changed, 21 insertions(+), 8 deletions(-)

diff --git a/skolehjem/app/Http/Controllers/UserController.php b/skolehjem/app/Http/Controllers/UserController.php
index 1a5bf7b..f76b2d1 100644
--- a/skolehjem/app/Http/Controllers/UserController.php
+++ b/skolehjem/app/Http/Controllers/UserController.php
@@ -7,6 +7,7 @@ use Illuminate\Http\Request;
 use Illuminate\Http\Response;
 use App\User;
 use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Hash;
 use Illuminate\Support\Facades\Log;
 use Spatie\Permission\Models\Role;
 
@@ -151,26 +152,38 @@ class UserController extends Controller
 //        else if(Auth::user()->hasPermissionTo("user.edit")) {
             $user = User::find($id);
 
-            /** @var User $user */
-            $user->update($data);
-
             if ($request->roles != null) {
+                /** @var User $user */
+                $user->update($data);
                 $user->roles()->detach();
                 $user->forgetCachedPermissions();
 
                 foreach ($request->roles as $role){
                     $user->assignRole($role);
                 }
+
+                //$user->save();
+            } else {
+                if ($request->input('password') != $request->input('confirmpassword')) {
+                    return Response::detect("users.editpass");
+                } elseif (!Hash::check($request->input('oldpassword'), $user->password)) {
+                    return Response::detect("users.editpass");
+                } else {
+                    /** @var User $user */
+                    $user->update($data);
+                    Auth::logout();
+
+                    return redirect()->route("users.login");
+                }
             }
 
-            $user->save();
 //        }
 
-        $users = User::query()->paginate(20);
+        //$users = User::query()->paginate(20);
 
-        return Response::detect("users.index", [
-            "users" => $users
-        ]);
+        //return Response::detect("users.index", [
+        //    "users" => $users
+        //]);
     }
 
     /**