chore: commit current workspace changes

app/Http/Controllers/Auth/RegisteredUserController.php

@@ -6,6 +6,7 @@ use App\Jobs\SendVerificationEmailJob;
 use App\Http\Controllers\Controller;
 use App\Models\EmailSendEvent;
 use App\Models\User;
+use App\Services\Auth\AuthAuditLogger;
 use App\Services\Auth\DisposableEmailService;
 use App\Services\Auth\RegistrationVerificationTokenService;
 use App\Services\Security\CaptchaVerifier;
@@ -15,6 +16,7 @@ use Illuminate\Http\RedirectResponse;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Hash;
 use Illuminate\Support\Facades\RateLimiter;
+use Illuminate\Support\Facades\Validator;
 use Illuminate\Support\Str;
 use Illuminate\View\View;
 
@@ -25,6 +27,7 @@ class RegisteredUserController extends Controller
         private readonly TurnstileVerifier $turnstileVerifier,
         private readonly DisposableEmailService $disposableEmailService,
         private readonly RegistrationVerificationTokenService $verificationTokenService,
+        private readonly AuthAuditLogger $authAuditLogger,
     )
     {
     }
@@ -65,7 +68,22 @@ class RegisteredUserController extends Controller
         ];
         $rules[$this->captchaVerifier->inputName()] = ['nullable', 'string'];
 
-        $validated = $request->validate($rules);
+        $validator = Validator::make($request->all(), $rules);
+
+        if ($validator->fails()) {
+            $this->authAuditLogger->log(
+                eventType: 'register',
+                request: $request,
+                status: 'failed',
+                reason: 'validation_failed',
+                identifier: (string) $request->input('email'),
+                metadata: ['fields' => array_keys($validator->errors()->toArray())],
+            );
+
+            $validator->validate();
+        }
+
+        $validated = $validator->validated();
 
         $email = strtolower(trim((string) $validated['email']));
         $ip = $request->ip();
@@ -86,6 +104,14 @@ class RegisteredUserController extends Controller
             }
 
             if (! $verified) {
+                $this->authAuditLogger->log(
+                    eventType: 'register',
+                    request: $request,
+                    status: 'failed',
+                    reason: 'captcha_failed',
+                    identifier: $email,
+                );
+
                 return back()
                     ->withInput($request->except('website'))
                     ->withErrors(['captcha' => 'Captcha verification failed. Please try again.']);
@@ -94,6 +120,13 @@ class RegisteredUserController extends Controller
 
         if ($this->disposableEmailService->isDisposableEmail($email)) {
             $this->logEmailEvent($email, $ip, null, 'blocked', 'disposable');
+            $this->authAuditLogger->log(
+                eventType: 'register',
+                request: $request,
+                status: 'failed',
+                reason: 'disposable_email',
+                identifier: $email,
+            );
 
             return back()
                 ->withInput($request->except('website'))
@@ -103,6 +136,15 @@ class RegisteredUserController extends Controller
         $user = User::query()->where('email', $email)->first();
 
         if ($user && $user->hasCompletedOnboarding()) {
+            $this->authAuditLogger->log(
+                eventType: 'register',
+                request: $request,
+                status: 'failed',
+                reason: 'email_exists',
+                identifier: $email,
+                user: $user,
+            );
+
             return back()
                 ->withInput($request->except('website'))
                 ->withErrors(['email' => 'An account with this email already exists.']);
@@ -136,6 +178,15 @@ class RegisteredUserController extends Controller
 
         Auth::login($user);
 
+        $this->authAuditLogger->log(
+            eventType: 'register',
+            request: $request,
+            status: 'success',
+            reason: $user->wasRecentlyCreated ? 'user_created' : 'resume_onboarding',
+            identifier: $email,
+            user: $user,
+        );
+
         $needsPasswordSetup = strtolower((string) ($user->onboarding_step ?? '')) !== 'password'
             || (bool) $user->needs_password_reset;