src\Security\LoginFormAuthenticator.php line 29

Open in your IDE?
  1. <?php
  3. namespace App\Security;
  5. use App\Entity\User;
  6. use Doctrine\ORM\EntityManagerInterface;
  7. use http\Message;
  8. use Symfony\Component\HttpFoundation\RedirectResponse;
  9. use Symfony\Component\HttpFoundation\Request;
  10. use Symfony\Component\HttpFoundation\Response;
  11. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  12. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  13. use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;
  14. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  15. use Symfony\Component\Security\Core\Exception\CustomUserMessageAccountStatusException;
  16. use Symfony\Component\Security\Core\Exception\UserNotFoundException;
  17. use Symfony\Component\Security\Core\Security;
  18. use Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface;
  19. use Symfony\Component\Security\Csrf\CsrfTokenManagerInterface;
  20. use Symfony\Component\Security\Http\Authenticator\AbstractLoginFormAuthenticator;
  21. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\CsrfTokenBadge;
  22. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\PasswordUpgradeBadge;
  23. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  24. use Symfony\Component\Security\Http\Authenticator\Passport\Credentials\PasswordCredentials;
  25. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  26. use Symfony\Component\Security\Http\Authenticator\Passport\PassportInterface;
  27. use Symfony\Component\Security\Http\Util\TargetPathTrait;
  29. class LoginFormAuthenticator extends AbstractLoginFormAuthenticator implements PasswordAuthenticatedUserInterface{
  30.     use TargetPathTrait;
  32.     public const LOGIN_ROUTE = 'app_login';
  33.     private UrlGeneratorInterface $urlGenerator;
  34.     private EntityManagerInterface  $entityManager;
  35.     private CsrfTokenManagerInterface $csrfTokenManager;
  36.     private UserPasswordEncoderInterface   $passwordEncoder;
  37.     private Security $security;
  39.     public function __construct(UrlGeneratorInterface $urlGenerator, EntityManagerInterface $entityManager, CsrfTokenManagerInterface $csrfTokenManager, UserPasswordEncoderInterface $userPasswordEncoder, Security $security)
  40.     {
  41.         $this->urlGenerator = $urlGenerator;
  42.         $this->entityManager = $entityManager;
  43.         $this->csrfTokenManager = $csrfTokenManager;
  44.         $this->passwordEncoder = $userPasswordEncoder;
  45.         $this->security = $security;
  46.     }
  48.     public function supports(Request $request): bool
  49.     {
  50.         return self::LOGIN_ROUTE === $request->attributes->get('_route') && $request->isMethod('POST');
  51.     }
  52.     
  53.     public function authenticate(Request $request): PassportInterface
  54.     {
  55.         $phone = $request->request->get('phone', '');
  57.         $request->getSession()->set(Security::LAST_USERNAME, $phone);
  59.         $user = $this->entityManager->getRepository(User::class)->findOneBy([
  60.             'phone' => $phone
  61.         ]);
  63.         if (!$user){
  64.             throw new CustomUserMessageAccountStatusException("Wrong username or password");
  65.         }
  68.         if(!$user->getIsACtive()){
  69.             throw new CustomUserMessageAccountStatusException("deactivated user! contact admin");
  70.         }
  72.         if(!in_array('ROLE_WEB', $user->getRoles())){
  73.             throw new CustomUserMessageAccountStatusException("you can not access this data");
  74.         }
  76.         if(in_array('ROLE_WEB_BRANCH', $user->getRoles())){
  77.             $branch = $user->getBranch();
  78.             $request->getSession()->set('branch', $branch->getId());
  79.         }
  81. //        dd($user);
  83.         return new Passport(
  84.             new UserBadge($user),
  85.             new PasswordCredentials($request->request->get('password', '')),
  86.             [
  87.                 new CsrfTokenBadge('authenticate', $request->get('_csrf_token')),
  88.             ]
  89.         );
  91.     }
  93.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
  94.     {
  96.         /** @var User $user */
  97.         $user = $token->getUser();
  99.         $request->getSession()->set('branch_name', 'NEEMA OPTICIANS '.$user->getBranch()->getBranchName());
  100.         // For example:
  102. //        return new RedirectResponse($this->urlGenerator->generate('some_route'));
  103. //        throw new \Exception('TODO: provide a valid redirect inside '.__FILE__);
  105. //        if(in_array('ROLE_WEB', $token->getUser()->getRoles(), true)){
  106. //
  107. //            return new RedirectResponse($this->urlGenerator->generate('homeRoute'));
  108. //        }
  110.         return new RedirectResponse($this->urlGenerator->generate('homeRoute'));
  111.     }
  113.     protected function getLoginUrl(Request $request): string
  114.     {
  115.         return $this->urlGenerator->generate(self::LOGIN_ROUTE);
  116.     }
  119.     public function getPassword(): ?string
  120.     {
  121.         // TODO: Implement getPassword() method.
  123.         return '';
  124.     }
  125. }