src/Security/Account/AccountAuthenticator.php line 70

Open in your IDE?
  1. <?php
  3. namespace App\Security\Account;
  5. use Doctrine\ORM\EntityManagerInterface;
  6. use Symfony\Component\HttpFoundation\RedirectResponse;
  7. use Symfony\Component\HttpFoundation\Request;
  8. use Symfony\Component\HttpFoundation\Response;
  9. use Symfony\Component\Messenger\MessageBusInterface;
  10. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  11. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  12. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  13. use Symfony\Component\Security\Core\Exception\CustomUserMessageAuthenticationException;
  14. use Symfony\Component\Security\Core\Exception\InvalidCsrfTokenException;
  15. use Symfony\Component\Security\Core\Security;
  16. use Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface;
  17. use Nellapp\Bundle\SDKBundle\Auth\Entity\UserInterface as NellappUserInterface;
  18. use Nellapp\Bundle\SDKBundle\Auth\Messenger\Message\RefreshUserMessage;
  19. use Symfony\Component\Security\Core\User\UserInterface;
  20. use Symfony\Component\Security\Core\User\UserProviderInterface;
  21. use Symfony\Component\Security\Csrf\CsrfToken;
  22. use Symfony\Component\Security\Csrf\CsrfTokenManagerInterface;
  23. use Symfony\Component\Security\Guard\Authenticator\AbstractFormLoginAuthenticator;
  24. use Symfony\Component\Security\Http\Util\TargetPathTrait;
  26. class AccountAuthenticator extends AbstractFormLoginAuthenticator
  27. {
  28.     use TargetPathTrait;
  30.     public const LOGIN_ROUTE = 'app_login';
  32.     public function __construct(
  33.         private EntityManagerInterface      $em,
  34.         private UrlGeneratorInterface       $urlGenerator,
  35.         private CsrfTokenManagerInterface   $csrfTokenManager,
  36.         private UserPasswordHasherInterface $passwordHasher,
  37.         private MessageBusInterface         $bus,
  38.     )
  39.     {
  40.     }
  42.     public function supports(Request $request): bool
  43.     {
  44.         return
  45.             self::LOGIN_ROUTE === $request->attributes->get('_route')
  46.             && $request->isMethod('POST');
  47.     }
  49.     public function getCredentials(Request $request): array
  50.     {
  51.         $credentials = [
  52.             'email' => $request->request->get('email'),
  53.             'password' => $request->request->get('password'),
  54.             'csrf_token' => $request->request->get('_csrf_token'),
  55.         ];
  57.         $request->getSession()->set(
  58.             Security::LAST_USERNAME,
  59.             $credentials['email'],
  60.         );
  62.         return $credentials;
  63.     }
  65.     public function getUser($credentials, UserProviderInterface $userProvider): UserInterface
  66.     {
  67.         $token = new CsrfToken('authenticate', $credentials['csrf_token']);
  69.         if (!$this->csrfTokenManager->isTokenValid($token)) {
  70.             throw new InvalidCsrfTokenException();
  71.         }
  73.         $user = $userProvider->loadUserByIdentifier($credentials['email']);
  75.         if (!$user) {
  76.             // fail authentication with a custom error
  77.             throw new CustomUserMessageAuthenticationException('Email could not be found.');
  78.         }
  80.         return $user;
  81.     }
  83.     public function checkCredentials($credentials, UserInterface $user): bool
  84.     {
  85.         if (!$user instanceof PasswordAuthenticatedUserInterface) {
  86.             return false;
  87.         }
  89.         return $this->passwordHasher->isPasswordValid($user, $credentials['password']);
  90.     }
  92.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, $providerKey): Response
  93.     {
  94.         $user = $token->getUser();
  95.         if ($user instanceof NellappUserInterface) {
  96.             $this->bus->dispatch(new RefreshUserMessage($user->getId()));
  97.         }
  99.         if ($request->request->get('_target_path') !== null) {
  100.             return new RedirectResponse($request->request->get('_target_path'));
  101.         }
  103.         if ($targetPath = $this->getTargetPath($request->getSession(), $providerKey)) {
  104.             return new RedirectResponse($targetPath);
  105.         }
  107.         return new RedirectResponse('/');
  108.     }
  110.     protected function getLoginUrl(): string
  111.     {
  112.         return $this->urlGenerator->generate(self::LOGIN_ROUTE);
  113.     }
  114. }