src/Security/SecurityAuthenticator.php line 31

  1. <?php
  3. namespace App\Security;
  5. use App\Entity\User;
  6. use App\Services\LogService;
  7. use Doctrine\ORM\EntityManagerInterface;
  8. use Symfony\Component\HttpFoundation\RedirectResponse;
  9. use Symfony\Component\HttpFoundation\Request;
  10. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  11. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  12. use Symfony\Component\Security\Core\Exception\CustomUserMessageAuthenticationException;
  13. use Symfony\Component\Security\Core\Exception\InvalidCsrfTokenException;
  14. use Symfony\Component\Security\Core\Security;
  15. use Symfony\Component\Security\Csrf\CsrfToken;
  16. use Symfony\Component\Security\Csrf\CsrfTokenManagerInterface;
  17. use Symfony\Component\Security\Http\Authenticator\AbstractAuthenticator;
  18. use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
  19. use Symfony\Component\Security\Http\Authenticator\Passport\Credentials\PasswordCredentials;
  20. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  21. use Symfony\Component\Security\Http\Util\TargetPathTrait;
  23. class SecurityAuthenticator extends AbstractAuthenticator
  24. {
  25.     use TargetPathTrait;
  27.     public const LOGIN_ROUTE = 'app_login';
  29.     private $entityManager;
  30.     private $urlGenerator;
  31.     private $csrfTokenManager;
  32.     private $logService;
  34.     public function __construct(
  35.         LogService $logService,
  36.         EntityManagerInterface $entityManager,
  37.         UrlGeneratorInterface $urlGenerator,
  38.         CsrfTokenManagerInterface $csrfTokenManager
  39.     ) {
  40.         $this->logService = $logService;
  41.         $this->entityManager = $entityManager;
  42.         $this->urlGenerator = $urlGenerator;
  43.         $this->csrfTokenManager = $csrfTokenManager;
  44.     }
  46.     public function supports(Request $request): bool
  47.     {
  48.         // Check if the request is a POST request to the login route
  49.         return $request->attributes->get('_route') === self::LOGIN_ROUTE
  50.             && $request->isMethod('POST');
  51.     }
  53.     public function authenticate(Request $request): \Symfony\Component\Security\Http\Authenticator\Passport\Passport
  54.     {
  55.         // Retrieve credentials from the request
  56.         $credentials = [
  57.             'email' => $request->request->get('email'),
  58.             'password' => $request->request->get('password'),
  59.             'csrf_token' => $request->request->get('_csrf_token'),
  60.         ];
  62.         // Store the last username in session for login page pre-fill
  63.         $request->getSession()->set(Security::LAST_USERNAME, $credentials['email']);
  65.         // Validate CSRF token
  66.         $token = new CsrfToken('authenticate', $credentials['csrf_token']);
  67.         if (!$this->csrfTokenManager->isTokenValid($token)) {
  68.             throw new InvalidCsrfTokenException();
  69.         }
  71.         // Find user by email
  72.         $user = $this->entityManager->getRepository(User::class)->findOneBy(['email' => $credentials['email']]);
  73.         if (!$user) {
  74.             throw new CustomUserMessageAuthenticationException('Email could not be found.');
  75.         }
  77.         // Return a Passport with user badge and password credentials
  78.         return new SelfValidatingPassport(
  79.             new UserBadge($credentials['email']),
  80.             [new PasswordCredentials($credentials['password'])]
  81.         );
  82.     }
  84.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $providerKey): RedirectResponse
  85.     {
  86.         // Check for a target path after successful authentication
  87.         if ($targetPath = $this->getTargetPath($request->getSession(), $providerKey)) {
  88.             return new RedirectResponse($targetPath);
  89.         }
  91.         /** @var User $user */
  92.         $user = $token->getUser();
  93.         // Log the user login action
  94.         $this->logService->userLoggedIn($user);
  96.         // Redirect to the home page after successful login
  97.         return new RedirectResponse($this->urlGenerator->generate('app_home'));
  98.     }
  100.     public function onAuthenticationFailure(Request $request, AuthenticationException|\Symfony\Component\Security\Core\Exception\AuthenticationException $exception): RedirectResponse
  101.     {
  102.         // Redirect back to login page on authentication failure
  103.         return new RedirectResponse($this->urlGenerator->generate(self::LOGIN_ROUTE));
  104.     }
  106.     protected function getLoginUrl(): string
  107.     {
  108.         // Return the login page URL
  109.         return $this->urlGenerator->generate(self::LOGIN_ROUTE);
  110.     }
  111. }