diff --git a/app/Http/Middleware/AddContentSecurityPolicy.php b/app/Http/Middleware/AddContentSecurityPolicy.php index 8c911a5..92be6a6 100644 --- a/app/Http/Middleware/AddContentSecurityPolicy.php +++ b/app/Http/Middleware/AddContentSecurityPolicy.php @@ -24,9 +24,8 @@ class AddContentSecurityPolicy "style-src 'self' 'unsafe-inline' http: https:; " . "connect-src 'self' ws: http: https:;"; } else { - // Production CSP - Livewire v3 requires unsafe-eval and nonce for inline scripts - $nonce = csp_nonce(); - $csp = "script-src 'self' 'unsafe-eval' 'nonce-{$nonce}' https:; " . + // Production CSP - Livewire v3 requires unsafe-eval + $csp = "script-src 'self' 'unsafe-eval' https:; " . "style-src 'self' 'unsafe-inline' https:; " . "connect-src 'self' https:;"; } diff --git a/app/Livewire/Auth/PasswordReset.php b/app/Livewire/Auth/PasswordReset.php index dd92005..5b5834a 100644 --- a/app/Livewire/Auth/PasswordReset.php +++ b/app/Livewire/Auth/PasswordReset.php @@ -29,8 +29,12 @@ class PasswordReset extends Component #[Layout('components.layouts.auth')] public function resetPassword() { + logger()->info("Validating password reset..."); + logger()->info($this->form); $validated = $this->form->validate(); + logger()->info("Validated password reset", $validated); + $status = Password::reset(array_merge($validated, ['token' => $this->token]), function (User $user, string $password) { $user->forceFill([ @@ -43,6 +47,7 @@ class PasswordReset extends Component return redirect()->route('login'); } + logger()->error("Password reset failed", $status); $this->addError('email', 'The provided credentials do not match our records.'); } diff --git a/app/Livewire/Auth/RegisterUser.php b/app/Livewire/Auth/RegisterUser.php index 3312d9e..505c642 100644 --- a/app/Livewire/Auth/RegisterUser.php +++ b/app/Livewire/Auth/RegisterUser.php @@ -18,10 +18,16 @@ class RegisterUser extends Component public function register() { + logger()->info("Validating..."); + logger()->info($this->form->toArray()); + $validated = $this->form->validate(); + + logger()->info("Validated", $validated); $user = User::create($this->form->all()); UserProfile::create(["user_id" => $user->id]); Mail::to($user->email)->send(new PasswordResetNewUser($user)); + logger()->info("New user registered: " . $user->email); return redirect()->route('login'); } diff --git a/app/Mail/PasswordResetNewUser.php b/app/Mail/PasswordResetNewUser.php index f59bc0c..0c64bc8 100644 --- a/app/Mail/PasswordResetNewUser.php +++ b/app/Mail/PasswordResetNewUser.php @@ -24,7 +24,9 @@ class PasswordResetNewUser extends Mailable */ public function __construct(private User $user) { + logger()->debug("\n==============================\n User email is $user->email. Username is $user->username \n====================================="); $this->token = Password::createToken($this->user); + logger()->debug("Password reset token is $this->token"); } /**