Make sure a user has a unique email + save and encrypt password

Author: pH-7

src/Dal/UserDal.php

@@ -18,6 +18,7 @@ public static function create(UserEntity $userEntity): int|string|false
         $userBean->last_name = $userEntity->getLastName();
         $userBean->email = $userEntity->getEmail();
         $userBean->phone = $userEntity->getPhone();
+        $userBean->password = $userEntity->getPassword();
         $userBean->created_date = $userEntity->getCreationDate();
 
         try {
@@ -89,4 +90,10 @@ public static function remove(string $userUuid): bool
 
         return false;
     }
+
+    public static function doesEmailExist(string $email): bool
+    {
+        // If R::findOne doesn't find any rows, it returns NULL (meaning, the email address doesn't exist)
+        return R::findOne(self::TABLE_NAME, 'email = :email', ['email' => $email]) !== null;
+    }
 }

src/Route/user.routes.php

@@ -2,6 +2,7 @@
 namespace PH7\ApiSimpleMenu\Route;
 
 use PH7\ApiSimpleMenu\Route\Exception\NotFoundException;
+use PH7\ApiSimpleMenu\Service\Exception\EmailExistsException;
 use PH7\ApiSimpleMenu\Service\User;
 use PH7\ApiSimpleMenu\Validation\Exception\InvalidValidationException;
 
@@ -59,6 +60,14 @@ public function getResponse(): string
                     'code' => $e->getCode()
                 ]
             ];
+        } catch (EmailExistsException $e) {
+            HttpResponse::setHeadersByCode(StatusCode::BAD_REQUEST);
+
+            $response = [
+                'errors' => [
+                    'message' => $e->getMessage()
+                ]
+            ];
         }
 
         return json_encode($response);

src/Service/Exception/EmailExistsException.php

@@ -0,0 +1,9 @@
+<?php
+
+namespace PH7\ApiSimpleMenu\Service\Exception;
+
+use RuntimeException;
+
+class EmailExistsException extends RuntimeException
+{
+}

src/Service/User.php

@@ -2,6 +2,7 @@
 namespace PH7\ApiSimpleMenu\Service;
 
 use PH7\ApiSimpleMenu\Dal\UserDal;
+use PH7\ApiSimpleMenu\Service\Exception\EmailExistsException;
 use PH7\ApiSimpleMenu\Validation\Exception\InvalidValidationException;
 use PH7\ApiSimpleMenu\Validation\UserValidation;
 use PH7\JustHttp\StatusCode;
@@ -27,8 +28,15 @@ public function create(mixed $data): array|object
                 ->setLastName($data->last)
                 ->setEmail($data->email)
                 ->setPhone($data->phone)
+                ->setPassword(password_hash($data->password, PASSWORD_ARGON2I))
                 ->setCreationDate(date(self::DATE_TIME_FORMAT));
 
+            $email = $userEntity->getEmail();
+            if (UserDal::doesEmailExist($email)) {
+                throw new EmailExistsException(
+                    sprintf('Email address %s already exists', $email)
+                );
+            }
 
             if (UserDal::create($userEntity) === false) {
                 // Set an internal error 500 when we cannot add an entry to the database

src/Validation/UserValidation.php

@@ -10,13 +10,16 @@ class UserValidation
     private const MINIMUM_NAME_LENGTH = 2;
     private const MAXIMUM_NAME_LENGTH = 40;
 
+    private const MINIMUM_PASSWORD_LENGTH = 5;
+
     public function __construct(private readonly mixed $data) {}
 
     public function isCreationSchemaValid(): bool
     {
         $schemaValidation =
             v::attribute('first', v::stringType()->length(self::MINIMUM_NAME_LENGTH, self::MAXIMUM_NAME_LENGTH))
             ->attribute('last', v::stringType()->length(self::MINIMUM_NAME_LENGTH, self::MAXIMUM_NAME_LENGTH))
+            ->attribute('password', v::stringType()->length(self::MINIMUM_PASSWORD_LENGTH))
             ->attribute('email', v::email())
             ->attribute('phone', v::phone());