src/Controller/UserAuthenticatorController.php line 29

  1. <?php
  3. namespace App\Controller;
  5. use App\Email\LostMyPasswordEmail;
  6. use App\Entity\UserEmail;
  7. use App\Entity\ResetPassword;
  8. use App\Entity\User;
  9. use App\Form\UserEmailType;
  10. use App\Form\ResetPasswordType;
  11. use App\Repository\UserRepository;
  12. use Symfony\Component\HttpFoundation\JsonResponse;
  13. use Symfony\Component\HttpFoundation\RedirectResponse;
  14. use Symfony\Component\HttpFoundation\Request;
  15. use Symfony\Component\HttpFoundation\Response;
  16. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  17. use Symfony\Component\Routing\Annotation\Route;
  18. use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken;
  19. use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
  21. class UserAuthenticatorController extends BaseController
  22. {
  23.     public function __construct(
  24.         private UserRepository $userRepository,
  25.         private LostMyPasswordEmail $lostMyPasswordEmail
  26.     ) {}
  28.     #[Route(path: '/', name: 'app_index')]
  29.     public function index()
  30.     {
  31.         return new RedirectResponse('/login');
  32.     }
  34.     #[Route('/oquncskjhaijqwlkca/{id}', name: 'app_auto_login', methods: ['GET'])]
  35.     public function autoLogin(User $user)
  36.     {
  37.         if (!$user) {
  38.             throw $this->createNotFoundException('Utilisateur non trouvé');
  39.         }
  40.         $token = new UsernamePasswordToken($user, 'main', $user->getRoles());
  41.         $this->container->get('security.token_storage')->setToken($token);
  42.         return $this->redirectToRoute('app_dashboard');
  43.     }
  45.     #[Route(path: '/login', name: 'app_login')]
  46.     public function login(AuthenticationUtils $authenticationUtils): Response
  47.     {
  48.         if ($this->getUser()) {
  49.             $user = $this->getUser();
  51.             if (!$this->isGranted('ROLE_SUPER_ADMIN') && $user->getEndValidityDate() && $user->getEndValidityDate() < (new \DateTime())->sub(new \DateInterval('P1D'))) {
  52.                 $lastUsername = $authenticationUtils->getLastUsername();
  53.                 $this->lostMyPasswordEmail->sendAccountExpired($user);
  54.                 return $this->render('security/login.html.twig', ['last_username' => $lastUsername, 'expire' => true]);
  55.             }
  57.             /** @legacy */
  58.             // if ($this->isGranted('ROLE_USER') || $this->isGranted('ROLE_ADMIN') || $this->isGranted('ROLE_SUPER_ADMIN')) {
  59.             //     return $this->redirectToRoute('app_dashboard');
  60.             // }
  62.             return $this->redirectToRoute('app_dashboard');
  63.         }
  65.         // get the login error if there is one
  66.         $error = $authenticationUtils->getLastAuthenticationError();
  67.         if ($error) {
  68.             $error = $error->getMessage();
  69.         }
  70.         // last username entered by the user
  71.         $lastUsername = $authenticationUtils->getLastUsername();
  73.         return $this->render('security/login.html.twig', ['last_username' => $lastUsername, 'error' => $error]);
  74.     }
  76.     #[Route(path: '/lost-my-password', name: 'app_lost_my_password')]
  77.     public function lostMyPassword(Request $request): Response
  78.     {
  79.         if ($this->getUser()) {
  80.             return $this->redirectToRoute('app_dashboard');
  81.         }
  83.         $lostMyPassword = new UserEmail();
  84.         $form = $this->createForm(UserEmailType::class, $lostMyPassword);
  85.         $form->handleRequest($request);
  87.         $showMessage = false;
  88.         if ($form->isSubmitted() && $form->isValid()) {
  89.             $user = $this->userRepository->findOneBy(['email' => $form->get('email')->getData()]);
  90.             if ($user) {
  91.                 $user->setResetToken(md5(time() + rand()));
  92.                 $this->userRepository->save($user, true);
  93.                 $this->lostMyPasswordEmail->send($user);
  94.             }
  95.             $showMessage = true;
  96.         }
  98.         return $this->render('security/lost-my-password.html.twig', [
  99.             'showMessage' => $showMessage,
  100.             'form' => $form,
  101.         ]);
  102.     }
  104.     #[Route(path: "/get-reset-password/azedazzcsdksjlgfha/{id}", env: 'dev')]
  105.     public function setResetPassword(Request $request, UserRepository $userRepository)
  106.     {
  107.         $user = $userRepository->findOneById($request->get('id'));
  108.         if ($user) {
  109.             $url = $user->getResetToken() ? "https://appli.preprod.neocognition.ai/reset-password/" . $user->getResetToken() : null;
  110.             return new JsonResponse(["redirect" => $url]);
  111.         }
  112.         return new JsonResponse(["redirect" => null]);
  113.     }
  115.     #[Route(path: '/reset-password/{resetToken}', name: 'app_reset_password')]
  116.     public function resetPassword(Request $request, string $resetToken, AuthenticationUtils $authenticationUtils, UserPasswordHasherInterface $passwordHasher): Response
  117.     {
  118.         if (!$resetToken || $resetToken == '') {
  119.             return $this->redirectToRoute('app_login', [], Response::HTTP_SEE_OTHER);
  120.         }
  122.         $user = $this->userRepository->findOneBy(['resetToken' => $resetToken]);
  124.         if (!$user) {
  125.             return $this->redirectToRoute('app_login', [], Response::HTTP_SEE_OTHER);
  126.         }
  128.         $showMessage = false;
  129.         $resetPassword = new ResetPassword();
  130.         $form = $this->createForm(ResetPasswordType::class, $resetPassword);
  131.         $form->handleRequest($request);
  132.         if ($form->isSubmitted() && $form->isValid()) {
  133.             $user->setPassword(
  134.                 $passwordHasher->hashPassword(
  135.                     $user,
  136.                     $form->get('plainPassword')->getData()
  137.                 )
  138.             );
  139.             $user->setResetToken(null);
  140.             $this->userRepository->save($user, true);
  141.             $showMessage = true;
  142.         }
  144.         return $this->render('security/reset-password.html.twig', [
  145.             'showMessage' => $showMessage,
  146.             'form' => $form,
  147.         ]);
  148.     }
  150.     #[Route(path: '/logout', name: 'app_logout')]
  151.     public function logout(): void
  152.     {
  153.         throw new \LogicException('This method can be blank - it will be intercepted by the logout key on your firewall.');
  154.     }
  155. }