src/Security/LoginAuthenticator.php line 62

  1. <?php
  3. namespace App\Security;
  5. use App\Entity\User;
  6. use Exception;
  7. use GuzzleHttp\Client;
  8. use GuzzleHttp\Exception\GuzzleException;
  9. use Psr\Log\LoggerInterface;
  10. use Symfony\Component\DependencyInjection\ParameterBag\ParameterBagInterface;
  11. use Symfony\Component\HttpFoundation\RedirectResponse;
  12. use Symfony\Component\HttpFoundation\Request;
  13. use Symfony\Component\HttpFoundation\Response;
  14. use Symfony\Component\Routing\RouterInterface;
  15. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  16. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  17. use Symfony\Component\Security\Core\Exception\CustomUserMessageAuthenticationException;
  18. use Symfony\Component\Security\Http\Authenticator\AbstractAuthenticator;
  19. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\PreAuthenticatedUserBadge;
  20. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  21. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  22. use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
  23. use Symfony\Component\Security\Http\SecurityRequestAttributes;
  25. class LoginAuthenticator extends AbstractAuthenticator
  26. {
  28.     public function __construct(private readonly ParameterBagInterface $parameterBag, private readonly LoggerInterface $logger, private readonly RouterInterface $router)
  29.     {
  30.     }
  32.     public function supports(Request $request): ?bool
  33.     {
  34.         return 'login' === $request->attributes->get('_route') || 'index' === $request->attributes->get('_route')
  35.             && $request->isMethod('POST');
  36.     }
  38.     /**
  39.      * @throws GuzzleException
  40.      */
  41.     public function authenticate(Request $request): Passport
  42.     {
  43.         $username = $request->request->get('username');
  44.         $password = $request->request->get('password');
  46.         $request->getSession()->set(SecurityRequestAttributes::LAST_USERNAME, $username);
  48.         $client = new Client(['base_uri' => $this->parameterBag->get('api_url')]);
  50.         $apiToken = null;
  51.         try {
  52.             $response = $client->post('/login', [
  53.                 'json' => [
  54.                     'username' => $username,
  55.                     'password' => $password
  56.                 ]
  57.             ]);
  58.             $apiToken = json_decode($response->getBody()->getContents());
  60.         } catch (Exception $exception) {
  61.             $this->logger->error($exception->getMessage());
  62.             throw new CustomUserMessageAuthenticationException($exception->getMessage());
  64.         }
  66.         return new SelfValidatingPassport(new UserBadge($apiToken->token), [new PreAuthenticatedUserBadge()]);
  67.     }
  69.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
  70.     {
  71.         /** @var User $user */
  72.         $user = $token->getUser();
  74.         if (in_array(User::ROLE_CONTRACTOR, $user->getRoles())) {
  76.             $request->attributes->set(SecurityRequestAttributes::AUTHENTICATION_ERROR, new AuthenticationException('You don\'t have the right access for the admin side'));
  78.             return null;
  79.         }
  81.         if ($user->getPasswordToken()) {
  82.             $request->attributes->set(SecurityRequestAttributes::AUTHENTICATION_ERROR, new AuthenticationException('You have requested a password rest'));
  84.             return null;
  85.         }
  87.         return new RedirectResponse($this->router->generate('app_homepage'));
  89.     }
  91.     public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
  92.     {
  94.         if ($request->request->count() > 1) {
  95.             $request->attributes->set(SecurityRequestAttributes::AUTHENTICATION_ERROR, new AuthenticationException('The username or password you’ve entered doesn’t match any account information we have on record. Please try again.'));
  96.         }
  98.         return null;
  99.     }
  100. }