src/Controller/SecurityController.php line 48

  1. <?php
  3. namespace App\Controller;
  5. use Doctrine\Persistence\ManagerRegistry;
  6. use Ivory\CKEditorBundle\Exception\Exception;
  7. use Symfony\Component\Routing\Annotation\Route;
  8. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  9. use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
  10. use Symfony\Component\Routing\RouterInterface;
  11. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  12. use Symfony\Component\HttpFoundation\Request;
  13. use Symfony\Component\HttpFoundation\Response;
  14. use Symfony\Component\Security\Core\Exception\AccessDeniedException;
  15. use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
  16. use Symfony\Component\HttpFoundation\JsonResponse;
  17. use Doctrine\ORM\EntityManager;
  18. use App\Manager\UserManager;
  19. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  20. use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;
  21. use App\Entity\Users;
  23. use BeSimple\I18nRoutingBundle\Routing\Annotation\I18nRoute;
  24. use Symfony\Contracts\Translation\TranslatorInterface;
  26. class SecurityController extends AbstractController
  27. {
  28.     public TranslatorInterface $translator;
  30.     public function __construct(TranslatorInterface $translator, private ManagerRegistry $managerRegistry)
  31.     {
  32.         $this->translator = $translator;
  33.     }
  35.     /**
  36.      * @param Request $request
  37.      * @param AuthenticationUtils $authUtils
  38.      * @param TokenStorageInterface $tokenStorage
  39.      * @return Response|null
  40.      * @throws \Exception
  41.      */
  42.     #[Route(path: '/login', name: 'login', methods: ['GET', 'POST'])]
  43.     public function loginAction(Request $request, AuthenticationUtils $authUtils, TokenStorageInterface $tokenStorage, RouterInterface $router)
  44.     {
  45.         // get the login error if there is one
  46.         $error = $authUtils->getLastAuthenticationError();
  48.         $socialConnectionEmailExistsOtherAccount = $request->getSession()->get('socialConnectionEmailExistsOtherAccount', 0);
  49.         if ($socialConnectionEmailExistsOtherAccount) {
  50.             $this->container->get('request_stack')->getSession()->remove('socialConnectionEmailExistsOtherAccount');
  51.             $this->addFlashMessage('error', $this->trans('social_login.alert.email_already_exists', [], 'messages'));
  52.         }
  54.         $socialOfferConnection = $request->getSession()->get('socialOfferConnection', 0);
  55.         if ($socialOfferConnection) {
  56.             // pokud stranka pro potvrzeni, tak presmeruj pote na homepage
  57.             $request->getSession()->set('_security.main.target_path', $router->generate('homepage'));
  58.             $request->getSession()->set('socialOfferConnection', 0);
  59.             return $this->redirectToRoute('confirm_social_login');
  60.         }
  62.         if ($disabled = $request->getSession()->get('disabled', false)) {
  63.             $request->getSession()->remove('disabled');
  64.         }
  66.         return $this->render('security/login.html.twig', array(
  67. //            'last_username' => $lastUsername,
  68.               'error'         => $error,
  69.               'disabled'      => $disabled
  70.         ));
  71.     }
  73.     /**
  74.      * @param Request $request
  75.      * @return Response|null
  76.      * @throws \Exception
  77.      */
  78.     #[Route(path: '/reset-password', name: 'reset-password', methods: ['GET', 'POST'])]
  79.     public function resetPasswordAction(Request $request, UserManager $userManager)
  80.     {
  81.         $em = $this->managerRegistry->getManager();
  82.         $submit = $request->get('reset-submit', false);
  84.         if ($submit) {
  85.             $email = $request->get('password-reset-email', '');
  86.             $user = $em->getRepository(Users::class)->findOneBy(['email' => $email, 'isDeleted' => false]);
  87.             if (!$user) {
  88.                 $user = $em->getRepository(Users::class)->findOneBy(['email' => $email]);
  89.             }
  90.             if ($user && $user->isIsDeleted() == false) {
  91.                 $restoreUrl = $this->generateUrl('set-password', array('token' => '__TOKEN__'), UrlGeneratorInterface::ABSOLUTE_URL);
  92.                 $userManager->sendResetLinkTo($user, $restoreUrl);
  94.                 if ($request->isXmlHttpRequest()) {
  95.                     return new JsonResponse(array('message' => $this->trans('reset_password.email_sent', [], 'login')));
  96.                 } else {
  97.                     $this->addFlashMessage('notice', 'reset_password.email_sent', [], 'login');
  98.                 }
  100.             } elseif ($user && $user->isIsDeleted() == true){
  101.                 if ($request->isXmlHttpRequest()) {
  102.                     return new JsonResponse(array('message' => $this->trans('reset_password.user_disabled', [], 'login')));
  103.                 } else {
  104.                     $this->addFlashMessage('notice', 'reset_password.user_disabled', [], 'login');
  105.                 }
  106.             } else {
  107.                 if ($request->isXmlHttpRequest()) {
  108.                     return new JsonResponse(array('message' => $this->trans('reset_password.user_not_found', [], 'login')));
  109.                 } else {
  110.                     $this->addFlashMessage('notice', 'reset_password.user_not_found', [], 'login');
  111.                 }
  112.             }
  114.         }
  116.         return $this->render('security/reset_password.html.twig', array(
  117.         ));
  118.     }
  120.     /**
  121.      * @param Request $request
  122.      * @param UserManager $userManager
  123.      * @return Response|null
  124.      * @throws \Exception
  125.      */
  126.     #[Route(path: '/set-password', name: 'set-password', methods: ['GET', 'POST'])]
  127.     public function setPasswordAction(Request $request, UserManager $userManager): Response
  128.     {
  129.         $em = $this->managerRegistry->getManager();
  130.         $passwordUpdated = false;
  131.         $token = $request->get('token', '');
  132.         $user = $em->getRepository(Users::class)->findOneBy(['passwordResetHash' => $token]);
  134.         if (!$user) {
  135.             throw new NotFoundHttpException($this->trans('set_password.user_not_found', [], 'login'));
  136.         }
  138.         // check hash valid
  139.         $today = new \DateTime();
  140.         $tokenExpiration = $user->getHashValidUntil();
  141.         if ($today > $tokenExpiration) {
  142.             // token expired
  143.             $this->addFlashMessage('error', $this->trans('set_password.alert.token_expired', [], 'login'));
  144.         }
  146.         if ($request->getMethod() == 'POST') {
  147.             $formData = $request->request->all();
  148.             $password = $formData['new_password'];
  150.             if (!$password || $formData['new_password'] != $formData['repeat_password']) {
  151.                 $this->addFlashMessage('error', $this->trans('set_password.alert.not_match', [], 'login'));
  152.             } else {
  153.                 $checkResult = $userManager->isPasswordStrength($password, $user->getUserName(), $user->getEmail(), $user->getFirstName().$user->getLastName());
  155.                 if (!$checkResult) {
  156.                     $this->addFlashMessage('error', 'profile_weak_psswd', [], 'controller');
  157.                 } else {
  158.                     $this->updatePassword($user, $password, $userManager, $em);
  159.                     $this->addFlashMessage('success', $this->trans('set_password.new_set', [], 'login'));
  160.                     $passwordUpdated = true;
  161.                 }
  162.             }
  163.         }
  165.         return $this->render('security/set_password.html.twig', array(
  166.             'token' => $token,
  167.             'passwordUpdated' => $passwordUpdated,
  168.             'user' => $user,
  169.         ));
  171.     }
  173.     /**
  174.      * @param Request $request
  175.      */
  176.     #[Route(path: '/logout', name: 'logout')]
  177.     public function logoutAction()
  178.     {
  179.     }
  181.     /**
  182.      * Methods enable translation of error|notice flash messages.
  183.      *
  184.      * @param $key
  185.      * @param array $params
  186.      * @param null $domain
  187.      * @return mixed
  188.      */
  189.     public function trans($key, array $params = [], $domain = null)
  190.     {
  191.         return $this->translator->trans($key, $params, $domain);
  192.     }
  194.     public function addFlashMessage($type, $key, array $params = [], $domain = null){
  195.         $this->addFlash($type, $this->trans($key, $params, $domain));
  196.     }
  198.     /**
  199.      * @param Users $user
  200.      * @param string $password
  201.      * @param UserManager $userManager
  202.      */
  203.     protected function updatePassword(Users $user, $password, UserManager $userManager) {
  204.         $em = $this->managerRegistry->getManager();
  205.         $userManager->setUserPassword($user, $password);
  206.         $user->setHashValidUntil(null);
  207.         $user->setPasswordResetHash('');
  208.         $em->flush();
  210.     }
  211. }