Files
mesreleves-php/routes/web.php
T
yann64 07ab2a7063 Configuration SMTP et 2FA par code PIN e-mail
Paramètres du site :
- Nouvelle section "Serveur SMTP" avec host, port, chiffrement,
  identifiant, mot de passe, adresse/nom d'expéditeur
- Bouton "Envoyer un e-mail de test" (AJAX via Symfony EsmtpTransport) :
  tente la connexion + envoie un message réel à l'admin
- Badge "Configuré — 2FA actif" quand SMTP est en place
- Suppression de la configuration possible

Authentification 2FA :
- Si SMTP configuré : après validation identifiant/mot de passe,
  l'utilisateur est déconnecté, un PIN à 6 chiffres est généré,
  haché (bcrypt) et stocké en session, envoyé par e-mail (10 min)
- Page /2fa : saisie du PIN, bouton "Renvoyer le code", retour login
- Si l'envoi e-mail échoue : fallback sans 2FA (logue l'erreur)
- Si SMTP non configuré : login standard inchangé

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-04 18:59:18 +02:00

69 lines
3.7 KiB
PHP

<?php
use App\Http\Controllers\DashboardController;
use App\Http\Controllers\ExportController;
use App\Http\Controllers\LieuController;
use App\Http\Controllers\NotificationController;
use App\Http\Controllers\ProfileController;
use App\Http\Controllers\RechercheController;
use App\Http\Controllers\ReleveController;
use App\Http\Controllers\Auth\TwoFactorController;
use App\Http\Controllers\SetupController;
use App\Http\Controllers\SourceController;
use Illuminate\Support\Facades\Route;
// ── Assistant d'installation (accessible sans authentification) ───────────────
Route::prefix('setup')->name('setup.')->group(function () {
Route::get('/', [SetupController::class, 'index'])->name('index');
Route::get('/database', [SetupController::class, 'database'])->name('database');
Route::post('/database', [SetupController::class, 'saveDatabase'])->name('database.save');
Route::post('/test-database', [SetupController::class, 'testDatabase'])->name('testDatabase');
Route::get('/application', [SetupController::class, 'application'])->name('application');
Route::post('/application', [SetupController::class, 'saveApplication'])->name('application.save');
Route::get('/admin', [SetupController::class, 'admin'])->name('admin');
Route::post('/install', [SetupController::class, 'install'])->name('install');
});
// ── Authentification 2FA par code PIN ───────────────────────────────────────
Route::middleware('guest')->group(function () {
Route::get('2fa', [TwoFactorController::class, 'challenge'])->name('2fa.challenge');
Route::post('2fa', [TwoFactorController::class, 'verify'])->name('2fa.verify');
Route::post('2fa/resend', [TwoFactorController::class, 'resend'])->name('2fa.resend');
});
Route::get('/', function () {
return view('welcome');
});
Route::get('/dashboard', [DashboardController::class, 'index'])
->middleware(['auth', 'verified'])
->name('dashboard');
Route::middleware('auth')->group(function () {
Route::get('/profile', [ProfileController::class, 'edit'])->name('profile.edit');
Route::patch('/profile', [ProfileController::class, 'update'])->name('profile.update');
Route::delete('/profile', [ProfileController::class, 'destroy'])->name('profile.destroy');
Route::get('lieux/search', [LieuController::class, 'search'])->name('lieux.search');
Route::resource('lieux', LieuController::class)->parameters(['lieux' => 'lieu']);
Route::resource('sources', SourceController::class);
Route::post('sources/{source}/membres', [SourceController::class, 'addMembre'])->name('sources.membres.add');
Route::delete('sources/{source}/membres/{user}', [SourceController::class, 'removeMembre'])->name('sources.membres.remove');
Route::post('sources/{source}/transition', [SourceController::class, 'transition'])->name('sources.transition');
Route::resource('sources.releves', ReleveController::class)
->shallow()
->parameters(['releves' => 'releve']);
Route::get('recherche', [RechercheController::class, 'index'])->name('recherche');
Route::get('export/source/{source}', [ExportController::class, 'source'])->name('export.source');
Route::get('export/recherche', [ExportController::class, 'recherche'])->name('export.recherche');
Route::get('notifications', [NotificationController::class, 'index'])->name('notifications.index');
Route::post('notifications/{id}/read', [NotificationController::class, 'markAsRead'])->name('notifications.read');
Route::post('notifications/read-all', [NotificationController::class, 'markAllAsRead'])->name('notifications.read-all');
});
require __DIR__.'/auth.php';