diff --git a/app/Http/Middleware/AddContentSecurityPolicy.php b/app/Http/Middleware/AddContentSecurityPolicy.php index 92be6a6..8c911a5 100644 --- a/app/Http/Middleware/AddContentSecurityPolicy.php +++ b/app/Http/Middleware/AddContentSecurityPolicy.php @@ -24,8 +24,9 @@ class AddContentSecurityPolicy "style-src 'self' 'unsafe-inline' http: https:; " . "connect-src 'self' ws: http: https:;"; } else { - // Production CSP - Livewire v3 requires unsafe-eval - $csp = "script-src 'self' 'unsafe-eval' https:; " . + // Production CSP - Livewire v3 requires unsafe-eval and nonce for inline scripts + $nonce = csp_nonce(); + $csp = "script-src 'self' 'unsafe-eval' 'nonce-{$nonce}' https:; " . "style-src 'self' 'unsafe-inline' https:; " . "connect-src 'self' https:;"; } diff --git a/app/Livewire/Auth/PasswordReset.php b/app/Livewire/Auth/PasswordReset.php index 5b5834a..dd92005 100644 --- a/app/Livewire/Auth/PasswordReset.php +++ b/app/Livewire/Auth/PasswordReset.php @@ -29,12 +29,8 @@ class PasswordReset extends Component #[Layout('components.layouts.auth')] public function resetPassword() { - logger()->info("Validating password reset..."); - logger()->info($this->form); $validated = $this->form->validate(); - logger()->info("Validated password reset", $validated); - $status = Password::reset(array_merge($validated, ['token' => $this->token]), function (User $user, string $password) { $user->forceFill([ @@ -47,7 +43,6 @@ class PasswordReset extends Component return redirect()->route('login'); } - logger()->error("Password reset failed", $status); $this->addError('email', 'The provided credentials do not match our records.'); } diff --git a/app/Livewire/Auth/RegisterUser.php b/app/Livewire/Auth/RegisterUser.php index 505c642..3312d9e 100644 --- a/app/Livewire/Auth/RegisterUser.php +++ b/app/Livewire/Auth/RegisterUser.php @@ -18,16 +18,10 @@ class RegisterUser extends Component public function register() { - logger()->info("Validating..."); - logger()->info($this->form->toArray()); - $validated = $this->form->validate(); - - logger()->info("Validated", $validated); $user = User::create($this->form->all()); UserProfile::create(["user_id" => $user->id]); Mail::to($user->email)->send(new PasswordResetNewUser($user)); - logger()->info("New user registered: " . $user->email); return redirect()->route('login'); } diff --git a/app/Mail/PasswordResetNewUser.php b/app/Mail/PasswordResetNewUser.php index 0c64bc8..f59bc0c 100644 --- a/app/Mail/PasswordResetNewUser.php +++ b/app/Mail/PasswordResetNewUser.php @@ -24,9 +24,7 @@ class PasswordResetNewUser extends Mailable */ public function __construct(private User $user) { - logger()->debug("\n==============================\n User email is $user->email. Username is $user->username \n====================================="); $this->token = Password::createToken($this->user); - logger()->debug("Password reset token is $this->token"); } /**