src/Security/AdminLoginAuthenticator.php line 33

Open in your IDE?
  1. <?php
  3. /**
  4. * Created by PhpStorm.
  5. * User: zeldystern
  6. * Date: 2021-12-22
  7. * Time: 12:59
  8. */
  10. namespace App\Security;
  12. use App\Entity\Users;
  13. use App\Service\JwtService;
  14. use Doctrine\ORM\EntityManagerInterface;
  15. use Psr\Log\LoggerInterface;
  16. use Symfony\Component\Config\Definition\Exception\Exception;
  17. use Symfony\Component\HttpFoundation\Request;
  18. use Symfony\Component\HttpFoundation\Response;
  19. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  20. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  21. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  22. use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;
  23. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  24. use Symfony\Component\Security\Core\Exception\CustomUserMessageAuthenticationException;
  25. use Symfony\Component\Security\Core\Security;
  26. use Symfony\Component\Security\Core\User\UserInterface;
  27. use Symfony\Component\Security\Core\User\UserProviderInterface;
  28. use Symfony\Component\Security\Csrf\CsrfTokenManagerInterface;
  29. use Symfony\Component\Security\Guard\Authenticator\AbstractFormLoginAuthenticator;
  30. use Symfony\Component\Security\Guard\PasswordAuthenticatedInterface;
  31. use Symfony\Component\Security\Http\Util\TargetPathTrait;
  33. class AdminLoginAuthenticator extends AbstractFormLoginAuthenticator implements PasswordAuthenticatedInterface
  34. {
  35. use TargetPathTrait;
  37. public const LOGIN_ROUTE = 'app_admin_login';
  38. public const LOGIN_URL = '/admin/login';
  39. private $entityManager;
  40. private $urlGenerator;
  41. private $csrfTokenManager;
  42. private $passwordEncoder;
  43. private $logger;
  44. private $jwtService;
  46. public function __construct(
  47. EntityManagerInterface $entityManager,
  48. UrlGeneratorInterface $urlGenerator,
  49. CsrfTokenManagerInterface $csrfTokenManager,
  50. UserPasswordHasherInterface $passwordEncoder,
  51. LoggerInterface $logger,
  52. JwtService $jwtService
  53. ) {
  54. $this->entityManager = $entityManager;
  55. $this->urlGenerator = $urlGenerator;
  56. $this->csrfTokenManager = $csrfTokenManager;
  57. $this->passwordEncoder = $passwordEncoder;
  58. $this->logger = $logger;
  59. $this->jwtService = $jwtService;
  60. }
  62. public function supports(Request $request)
  63. {
  64. return self::LOGIN_ROUTE === $request->attributes->get('_route')
  65. && $request->isMethod('POST');
  66. }
  68. public function getCredentials(Request $request)
  69. {
  70. $content = $request->getContent();
  72. if (empty($content)) {
  73. throw new Exception("Content is empty");
  74. }
  76. $decoded = json_decode($content, true);
  78. $credentials = [
  79. 'loginName' => $decoded['loginName'],
  80. 'password' => $decoded['password']
  81. ];
  83. $request->getSession()->set(
  84. Security::LAST_USERNAME,
  85. $credentials['loginName']
  86. );
  88. return $credentials;
  89. }
  91. public function getUser($credentials, UserProviderInterface $userProvider)
  92. {
  93. $user = $this->entityManager->getRepository(Users::class)->findOneBy(['loginname' => $credentials['loginName'],'active'=>1]);
  95. if (!$user) {
  96. // fails authentication with a custom error
  97. throw new CustomUserMessageAuthenticationException('Please try again');
  98. }
  100. return $user;
  101. }
  103. public function checkCredentials($credentials, UserInterface $user)
  104. {
  105. $passwordValid = $this->passwordEncoder->isPasswordValid(
  106. $user,
  107. $credentials['password'],
  108. );
  110. if (!$passwordValid) {
  111. throw new CustomUserMessageAuthenticationException('Please try again - invalid password');
  112. }
  113. return $passwordValid;
  114. }
  116. /**
  117. * Used to upgrade (rehash) the user's password automatically over time.
  118. */
  119. public function getPassword($credentials): ?string
  120. {
  121. return $credentials['password'];
  122. }
  124. public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $providerKey)
  125. {
  126. $jwt = $this->jwtService->setNewToken(
  127. $token->getUser()->getUsername(),
  128. $token->getRoleNames()
  129. );
  130. $response = new Response(
  131. json_encode(array('id' => $token->getUser()->getId(),
  132. 'email' => $token->getUser()->getUsername(),
  133. 'firstName' => $token->getUser()->getName())),
  134. 200
  135. );
  136. setcookie('jwt', $jwt, time() + $_ENV['JWT_TIMEOUT'], '/', '', false, true);
  137. setcookie('role', implode(',', $token->getRoleNames()), time() + $_ENV['JWT_TIMEOUT'], '/', '', false, false);
  138. // setcookie('isAdmin',true,time()+60*60,'/','',false,false);
  139. // if(in_array('ROLE_SUPER_ADMIN', $token->getRoleNames())){
  140. // setcookie('isSuperAdmin',true,time()+60*60,'/','',false,false);
  141. // setcookie('role','ROLE_SUPER_ADMIN',time()+60*60,'/','',false,false);
  142. // }
  143. return $response;
  144. }
  146. public function onAuthenticationFailure(Request $request, AuthenticationException $exception)
  147. {
  148. return new Response(json_encode($exception->getMessage()), 500);
  149. }
  150. protected function getLoginUrl()
  151. {
  152. return self::LOGIN_URL;
  153. // return $this->urlGenerator->generate(self::LOGIN_ROUTE);
  154. }
  156. /**
  157. * Override to control what happens when the user hits a secure page
  158. * but isn't logged in yet.
  159. *
  160. *
  161. */
  162. public function start(Request $request, AuthenticationException $authException = null)
  163. {
  164. // $url = $this->getLoginUrl();
  166. return new Response($authException->getPrevious()->getMessage(), $authException->getPrevious()->getCode());
  167. }
  168. }