1 files changed, 96 insertions, 0 deletions
diff --git a/perllib/FixMyStreet/App/Controller/Auth/Phone.pm b/perllib/FixMyStreet/App/Controller/Auth/Phone.pm
new file mode 100644
index 000000000..4f9a72594
--- /dev/null
+++ b/perllib/FixMyStreet/App/Controller/Auth/Phone.pm
@@ -0,0 +1,96 @@
+package FixMyStreet::App::Controller::Auth::Phone;
+use Moose;
+use namespace::autoclean;
+
+BEGIN { extends 'Catalyst::Controller'; }
+
+use FixMyStreet::SMS;
+
+=head1 NAME
+
+FixMyStreet::App::Controller::Auth::Phone - Catalyst Controller
+
+=head1 DESCRIPTION
+
+Controller for phone SMS based authentication
+
+=head1 METHODS
+
+=head2 code
+
+Handle the submission of a code sent by text to a mobile number.
+
+=cut
+
+sub code : Path('') {
+    my ( $self, $c ) = @_;
+    $c->stash->{template} = 'auth/smsform.html';
+
+    my $token = $c->stash->{token} = $c->get_param('token');
+    my $code = $c->get_param('code') || '';
+
+    my $data = $c->forward('/auth/get_token', [ $token, 'phone_sign_in' ]) || return;
+
+    $c->stash->{incorrect_code} = 1, return if $data->{code} ne $code;
+
+    $c->detach( '/auth/process_login', [ $data, 'phone' ] );
+}
+
+=head2 sign_in
+
+When signing in with a mobile phone number, we are sent here.
+This sends a text to that number with a confirmation code,
+and sets up the token/etc to deal with the response.
+
+=cut
+
+sub sign_in : Private {
+    my ( $self, $c, $phone ) = @_;
+
+    unless ($phone) {
+        $c->stash->{username_error} = 'other_phone';
+        return;
+    }
+
+    unless ($phone->is_mobile) {
+        $c->stash->{username} = $c->get_param('username'); # What was entered
+        $c->stash->{username_error} = 'nonmobile';
+        return;
+    }
+
+    (my $number = $phone->format) =~ s/\s+//g;
+
+    if ( FixMyStreet->config('SIGNUPS_DISABLED')
+         && !$c->model('DB::User')->find({ phone => $number })
+    ) {
+        $c->stash->{template} = 'auth/token.html';
+        return;
+    }
+
+    my $user_params = {};
+    $user_params->{password} = $c->get_param('password_register')
+        if $c->get_param('password_register');
+    my $user = $c->model('DB::User')->new( $user_params );
+
+    my $token_data = {
+        phone => $number,
+        r => $c->get_param('r'),
+        name => $c->get_param('name'),
+        password => $user->password,
+    };
+
+    $c->forward('send_token', [ $token_data, 'phone_sign_in', $number ]);
+}
+
+sub send_token : Private {
+    my ( $self, $c, $token_data, $token_scope, $to ) = @_;
+
+    my $result = FixMyStreet::SMS->send_token($token_data, $token_scope, $to);
+    $c->stash->{token} = $result->{token};
+    $c->log->debug("Sending text containing code *$result->{random}*");
+    $c->stash->{template} = 'auth/smsform.html';
+}
+
+__PACKAGE__->meta->make_immutable;
+
+1;