Add domain status notifications & login alerts

Introduce richer notifications and domain status handling across the app.

- NotificationService: Add domain status alert formatting/sending, in-app notifications for available/registered/redemption/pending_delete, richer session_new and session_failed notifications (geolocation + UA parsing) and helpers for human-readable status labels.
- Auth/TwoFactor: Emit notifications for successful logins (including remember-me and 2FA) and failed login attempts; update last-login timestamp on various flows.
- DomainController: Wrap bulk domain create in try/catch to handle duplicate race conditions and log failures.
- WhoisService: Detect redemption_period and pending_delete statuses from WHOIS/EPP statuses.
- Settings/Setting: Add settings support for notification status triggers and bump default app_version to 1.1.2; persist/update status trigger values.
- Views/Layout/View helpers: Add parsing/formatting for login notification data, add new status labels/classes (available, redemption_period, pending_delete), update notification icons/colors mapping.
- Top-nav & Notifications UI: Enhance dropdown with rich login/failed-login display (flags, device icons), clickable domain redirects when marking read, badge IDs for dynamic updates.
- Error admin UI: Add copy error report button with robust clipboard fallback and toast UI reused from messages; improved copy UX in admin index/detail.
- Installer: Add new migration 024 to installer migration lists and adjust detected toVersion to 1.1.2.
- DB: Add migration file 024_add_status_notifications_v1.1.2.sql (new file).

These changes add user-facing alerts for domain lifecycle events and stronger login/security notifications while improving UI feedback and robustness during bulk operations.
This commit is contained in:
Hosteroid
2026-02-08 22:58:59 +02:00
parent f32de0a848
commit e334f7c9d6
24 changed files with 1597 additions and 200 deletions

View File

@@ -119,6 +119,95 @@ class NotificationService
return $results;
}
/**
* Send domain status change notification via external channels
*/
public function sendDomainStatusAlert(array $domain, array $notificationChannels, string $newStatus, string $oldStatus): array
{
$message = $this->formatStatusChangeMessage($domain, $newStatus, $oldStatus);
$results = [];
foreach ($notificationChannels as $channel) {
$config = json_decode($channel['channel_config'], true);
$success = $this->send(
$channel['channel_type'],
$config,
$message,
[
'domain' => $domain['domain_name'],
'domain_id' => $domain['id'],
'new_status' => $newStatus,
'old_status' => $oldStatus,
'registrar' => $domain['registrar'] ?? 'Unknown'
]
);
$results[] = [
'channel' => $channel['channel_type'],
'success' => $success
];
}
return $results;
}
/**
* Format status change notification message
*/
private function formatStatusChangeMessage(array $domain, string $newStatus, string $oldStatus): string
{
$domainName = $domain['domain_name'];
$registrar = $domain['registrar'] ?? 'Unknown';
$oldStatusLabel = self::getStatusLabel($oldStatus);
$newStatusLabel = self::getStatusLabel($newStatus);
return match($newStatus) {
'available' => "🟢 AVAILABLE: Domain '$domainName' is now available for registration!\n\n" .
"Previous status: $oldStatusLabel\n" .
"This domain can now be registered.",
'active' => "✅ REGISTERED: Domain '$domainName' is now registered and active.\n\n" .
"Previous status: $oldStatusLabel\n" .
"Registrar: $registrar",
'expired' => "🚨 EXPIRED: Domain '$domainName' has expired!\n\n" .
"Previous status: $oldStatusLabel\n" .
"Registrar: $registrar\n" .
"Please renew immediately to avoid losing your domain.",
'redemption_period' => "⚠️ REDEMPTION PERIOD: Domain '$domainName' has entered the redemption period!\n\n" .
"Previous status: $oldStatusLabel\n" .
"Registrar: $registrar\n" .
"The domain can still be recovered, but additional fees may apply. Act quickly!",
'pending_delete' => "🔴 PENDING DELETE: Domain '$domainName' is scheduled for deletion!\n\n" .
"Previous status: $oldStatusLabel\n" .
"Registrar: $registrar\n" .
"The domain will be released for public registration soon.",
default => " STATUS CHANGE: Domain '$domainName' status changed from $oldStatusLabel to $newStatusLabel.\n\n" .
"Registrar: $registrar"
};
}
/**
* Get human-readable status label
*/
public static function getStatusLabel(string $status): string
{
return match($status) {
'active' => 'Active',
'expiring_soon' => 'Expiring Soon',
'expired' => 'Expired',
'available' => 'Available',
'redemption_period' => 'Redemption Period',
'pending_delete' => 'Pending Delete',
'error' => 'Error',
default => ucfirst(str_replace('_', ' ', $status))
};
}
/**
* Format expiration message
*/
@@ -195,6 +284,67 @@ class NotificationService
);
}
/**
* Create a domain available notification (in-app)
*/
public function notifyDomainAvailable(int $userId, string $domainName, int $domainId): void
{
$notificationModel = new \App\Models\Notification();
$notificationModel->createNotification(
$userId,
'domain_available',
'Domain Available',
"{$domainName} is now available for registration",
$domainId
);
}
/**
* Create a domain registered notification (in-app)
* Triggered when a domain transitions from available/expired/pending_delete to active
*/
public function notifyDomainRegistered(int $userId, string $domainName, int $domainId): void
{
$notificationModel = new \App\Models\Notification();
$notificationModel->createNotification(
$userId,
'domain_registered',
'Domain Registered',
"{$domainName} has been registered and is now active",
$domainId
);
}
/**
* Create a domain redemption period notification (in-app)
*/
public function notifyDomainRedemption(int $userId, string $domainName, int $domainId): void
{
$notificationModel = new \App\Models\Notification();
$notificationModel->createNotification(
$userId,
'domain_redemption',
'Domain in Redemption Period',
"{$domainName} has entered the redemption period - recovery fees may apply",
$domainId
);
}
/**
* Create a domain pending delete notification (in-app)
*/
public function notifyDomainPendingDelete(int $userId, string $domainName, int $domainId): void
{
$notificationModel = new \App\Models\Notification();
$notificationModel->createNotification(
$userId,
'domain_pending_delete',
'Domain Pending Deletion',
"{$domainName} is scheduled for deletion and will be available soon",
$domainId
);
}
/**
* Create a domain WHOIS updated notification (in-app)
*/
@@ -234,20 +384,174 @@ class NotificationService
}
/**
* Create a new login notification (in-app)
* Create a new login notification (in-app) with rich geolocation data
*/
public function notifyNewLogin(int $userId, string $location, string $ipAddress): void
public function notifyNewLogin(int $userId, string $method, string $ipAddress, ?string $userAgent = null): void
{
// Get geolocation data
$geo = \App\Models\SessionManager::getGeolocationData($ipAddress);
// Parse browser/device from user agent
$browser = 'Unknown Browser';
$device = 'Desktop';
$deviceIcon = 'desktop';
if ($userAgent) {
$ua = strtolower($userAgent);
// Browser detection
if (strpos($ua, 'edg') !== false) {
$browser = 'Edge';
} elseif (strpos($ua, 'opr') !== false || strpos($ua, 'opera') !== false) {
$browser = 'Opera';
} elseif (strpos($ua, 'chrome') !== false) {
$browser = 'Chrome';
} elseif (strpos($ua, 'safari') !== false) {
$browser = 'Safari';
} elseif (strpos($ua, 'firefox') !== false) {
$browser = 'Firefox';
}
// Device detection
if (strpos($ua, 'mobile') !== false || strpos($ua, 'android') !== false || strpos($ua, 'iphone') !== false) {
$device = 'Mobile';
$deviceIcon = 'mobile-alt';
} elseif (strpos($ua, 'tablet') !== false || strpos($ua, 'ipad') !== false) {
$device = 'Tablet';
$deviceIcon = 'tablet-alt';
}
// OS detection
$os = 'Unknown';
if (strpos($ua, 'windows') !== false) $os = 'Windows';
elseif (strpos($ua, 'macintosh') !== false || strpos($ua, 'mac os') !== false) $os = 'macOS';
elseif (strpos($ua, 'linux') !== false) $os = 'Linux';
elseif (strpos($ua, 'android') !== false) $os = 'Android';
elseif (strpos($ua, 'iphone') !== false || strpos($ua, 'ipad') !== false) $os = 'iOS';
}
// Build location string
$locationParts = [];
if ($geo['city'] !== 'Unknown' && $geo['city'] !== 'Local') {
$locationParts[] = $geo['city'];
}
if ($geo['country'] !== 'Unknown' && $geo['country'] !== 'Local') {
$locationParts[] = $geo['country'];
}
$locationStr = !empty($locationParts) ? implode(', ', $locationParts) : 'Unknown location';
// Store rich data as JSON in message field
$messageData = json_encode([
'method' => $method,
'ip' => $ipAddress,
'country' => $geo['country'],
'country_code' => $geo['country_code'],
'city' => $geo['city'],
'region' => $geo['region'],
'isp' => $geo['isp'],
'browser' => $browser,
'device' => $device,
'device_icon' => $deviceIcon,
'os' => $os ?? 'Unknown',
'location' => $locationStr,
]);
$notificationModel = new \App\Models\Notification();
$notificationModel->createNotification(
$userId,
'session_new',
'New Login Detected',
"Login from {$location} ({$ipAddress})",
$messageData,
null
);
}
/**
* Create a failed login notification (in-app) with rich geolocation data
*/
public function notifyFailedLogin(int $userId, string $reason, string $ipAddress, ?string $userAgent = null, ?string $attemptedUsername = null): void
{
// Get geolocation data
$geo = \App\Models\SessionManager::getGeolocationData($ipAddress);
// Parse browser/device from user agent
$browser = 'Unknown Browser';
$device = 'Desktop';
$deviceIcon = 'desktop';
if ($userAgent) {
$ua = strtolower($userAgent);
// Browser detection
if (strpos($ua, 'edg') !== false) {
$browser = 'Edge';
} elseif (strpos($ua, 'opr') !== false || strpos($ua, 'opera') !== false) {
$browser = 'Opera';
} elseif (strpos($ua, 'chrome') !== false) {
$browser = 'Chrome';
} elseif (strpos($ua, 'safari') !== false) {
$browser = 'Safari';
} elseif (strpos($ua, 'firefox') !== false) {
$browser = 'Firefox';
}
// Device detection
if (strpos($ua, 'mobile') !== false || strpos($ua, 'android') !== false || strpos($ua, 'iphone') !== false) {
$device = 'Mobile';
$deviceIcon = 'mobile-alt';
} elseif (strpos($ua, 'tablet') !== false || strpos($ua, 'ipad') !== false) {
$device = 'Tablet';
$deviceIcon = 'tablet-alt';
}
// OS detection
$os = 'Unknown';
if (strpos($ua, 'windows') !== false) $os = 'Windows';
elseif (strpos($ua, 'macintosh') !== false || strpos($ua, 'mac os') !== false) $os = 'macOS';
elseif (strpos($ua, 'linux') !== false) $os = 'Linux';
elseif (strpos($ua, 'android') !== false) $os = 'Android';
elseif (strpos($ua, 'iphone') !== false || strpos($ua, 'ipad') !== false) $os = 'iOS';
}
// Build location string
$locationParts = [];
if ($geo['city'] !== 'Unknown' && $geo['city'] !== 'Local') {
$locationParts[] = $geo['city'];
}
if ($geo['country'] !== 'Unknown' && $geo['country'] !== 'Local') {
$locationParts[] = $geo['country'];
}
$locationStr = !empty($locationParts) ? implode(', ', $locationParts) : 'Unknown location';
// Store rich data as JSON in message field
$messageData = json_encode([
'reason' => $reason,
'attempted_username' => $attemptedUsername,
'ip' => $ipAddress,
'country' => $geo['country'],
'country_code' => $geo['country_code'],
'city' => $geo['city'],
'region' => $geo['region'],
'isp' => $geo['isp'],
'browser' => $browser,
'device' => $device,
'device_icon' => $deviceIcon,
'os' => $os ?? 'Unknown',
'location' => $locationStr,
]);
$notificationModel = new \App\Models\Notification();
$notificationModel->createNotification(
$userId,
'session_failed',
'Failed Login Attempt',
$messageData,
null
);
}
// Future improvement: Add notifyAdminsFailedLogin() to send in-app alerts to all admins on failed login attempts (e.g. unknown usernames, brute-force detection)
/**
* Create welcome notification for new users/fresh install (in-app)
*/

View File

@@ -1107,6 +1107,29 @@ class WhoisService
}
}
// Check for pending delete status (EPP: pendingDelete)
// Must check before active/registered indicators since a domain can have both
foreach ($statusArray as $status) {
if (stripos($status, 'pendingDelete') !== false ||
stripos($status, 'pending delete') !== false ||
stripos($status, 'pending_delete') !== false ||
stripos($status, 'PENDING-DELETE') !== false) {
return 'pending_delete';
}
}
// Check for redemption period status (EPP: redemptionPeriod)
// Must check before active/registered indicators
foreach ($statusArray as $status) {
if (stripos($status, 'redemptionPeriod') !== false ||
stripos($status, 'redemption period') !== false ||
stripos($status, 'redemption_period') !== false ||
stripos($status, 'REDEMPTION-PERIOD') !== false ||
stripos($status, 'pendingRestore') !== false) {
return 'redemption_period';
}
}
// If domain has "active" status but no expiration date, consider it active
// This handles TLDs like .nl that don't provide expiration dates via RDAP
foreach ($statusArray as $status) {