src/Controller/UsersControllerFrontend.php line 59

  1. <?php
  3. namespace App\Controller;
  5. use App\Form\UsersEditType;
  6. use App\Form\UsersRegisterType;
  7. use App\Entity\Users;
  8. use Doctrine\ORM\OptimisticLockException;
  9. use Doctrine\Persistence\ManagerRegistry;
  10. use Exception;
  11. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  12. use Symfony\Component\Routing\Annotation\Route;
  13. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  14. use Symfony\Component\HttpFoundation\JsonResponse;
  15. use Symfony\Component\HttpFoundation\RedirectResponse;
  16. use Symfony\Component\HttpFoundation\Request;
  17. use Symfony\Component\HttpFoundation\Response;
  18. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  19. use App\Manager\UserManager;
  21. use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken;
  23. use BeSimple\I18nRoutingBundle\Routing\Annotation\I18nRoute;
  24. use Symfony\Contracts\Translation\TranslatorInterface;
  26. class UsersControllerFrontend extends AbstractController
  27. {
  28.     public TranslatorInterface $translator;
  30.     public function __construct(TranslatorInterface $translator, private ManagerRegistry $managerRegistry, private TokenStorageInterface $usageTrackingTokenStorage)
  31.     {
  32.         $this->translator = $translator;
  33.     }
  35.     /**
  36.      * Methods enable translation of error|notice flash messages.
  37.      *
  38.      * @param $key
  39.      * @param array $params
  40.      * @param null $domain
  41.      * @return mixed
  42.      */
  43.     public function trans($key, array $params = [], $domain = null)
  44.     {
  45.         return $this->translator->trans($key, $params, $domain);
  46.     }
  48.     public function addFlashMessage($type, $key, array $params = [], $domain = null){
  49.         $this->addFlash($type, $this->trans($key, $params, $domain));
  50.     }
  52.     /**
  53.      * @param Request $request
  54.      * @param UserPasswordHasherInterface $passwordEncoder
  55.      * @return RedirectResponse|Response
  56.      * @throws Exception
  57.      */
  58.     #[Route(path: '/register', name: 'user_registration', methods: ['GET', 'POST'])]
  59.     public function registerAction(Request $request, UserPasswordHasherInterface $passwordEncoder, UserManager $userManager)
  60.     {
  62.         // 1) build the form
  63.         $user = new Users();
  64.         $form = $this->createForm(UsersRegisterType::class, $user);
  66.         // 2) handle the submit (will only happen on POST)
  67.         $form->handleRequest($request);
  69.         if ($form->isSubmitted() && $form->isValid()) {
  71.             $randomBytes = random_bytes(32);
  72.             $user->setSalt(bin2hex($randomBytes));
  74.             //check for passwd length
  75.             $psswdErr = FALSE;
  76.             if(!$userManager->hasPasswordMinimalLength($user->getPlainPassword())) {
  77.                 $this->addFlashMessage('error', 'profile_short_psswd', [], 'controller');
  78.                 $psswdErr = TRUE;
  79.             }
  81.             if(!$userManager->isPasswordStrength($user->getPlainPassword(), $user->getUserIdentifier(), $user->getEmail(), $user->getFirstName().$user->getLastName())) {
  82.                 $this->addFlashMessage('error', 'profile_weak_psswd', [], 'controller');
  83.                 $psswdErr = TRUE;
  84.             }
  86.             if($psswdErr){
  87.                 return $this->render(
  88.                     'frontend/registration.html.twig',
  89.                     array('form' => $form)
  90.                 );
  91.             }
  93.             //check for strength of password
  94.             // 3) Encode the password (you could also do this via Doctrine listener)
  95.             $password = $passwordEncoder->hashPassword($user, $user->getPlainPassword());
  96.             $user->setPassword($password);
  97.             //      $user->setUsername($user->getEmail());
  98.             //$user->setUsername($user->getEmail());
  99.             $user->setAuthRole('ROLE_USER');
  100.             $user->setCreatedAt(new \DateTime());
  101.             $user->setLastvisitAt(new \DateTime());
  102.             //$user->setLastmodAt(new \DateTime());  // nevim proc ale nefunguje auto current
  103.             $user->setUsers($user);
  105.             // 4) save the User!
  106.             $em = $this->managerRegistry->getManager();
  107.             $em->persist($user);
  108.             $em->flush();
  110.             // ... do any other work - like sending them an email, etc
  111.             // maybe set a "flash" success message for the user
  112.             $this->addFlashMessage('notice', 'profile_created', [], 'controller');
  114.             // autologin https://stackoverflow.com/questions/5886713/automatic-post-registration-user-authentication
  115.             $token = new UsernamePasswordToken($user, 'main', $user->getRoles());
  116.             $this->usageTrackingTokenStorage->setToken($token);
  117.             $request->getSession()->set('_security_main', serialize($token));
  118.             $request->getSession()->set('player_id', $user->getId());
  120.             return $this->redirectToRoute('homepage');
  122.         } else {
  123.             $form->getErrors();
  124.         }
  126.         return $this->render(
  127.             'frontend/registration.html.twig',
  128.             array('form' => $form)
  129.         );
  130.     }
  132.     /**
  133.      * @param Request $request
  134.      * @param UserPasswordHasherInterface $passwordEncoder
  135.      * @return Response
  136.      * @throws OptimisticLockException
  137.      */
  138.     #[Route(path: '/profile/edit/', name: 'user-edit', methods: ['GET', 'POST'])]
  139.     public function editAction(Request $request, UserPasswordHasherInterface $passwordEncoder, UserManager $userManager)
  140.     {
  141.         $em = $this->managerRegistry->getManager();
  142.         if(!$user = $this->getUser()) {
  143.             return $this->redirectToRoute('login');
  144.         }
  146.         /* possible options - TextType?
  147.          "action", "allow_extra_fields", "attr", "auto_initialize", "block_name", "by_reference", "compound", "constraints", "csrf_field_name", "csrf_message", "csrf_protection", "csrf_token_id", "csrf_token_manager",
  148.         "data", "data_class", "disabled", "empty_data", "error_bubbling", "error_mapping", "extra_fields_message", "inherit_data", "invalid_message", "invalid_message_parameters",
  149.         "label", "label_attr", "label_format", "mapped", "method", "post_max_size_message", "property_path", "required", "translation_domain", "trim", "upload_max_size_message", "validation_groups".
  150.          */
  151.         $form = $this->createForm(UsersEditType::class, $user);
  153.         $form->handleRequest($request);
  155.         if ($form->isSubmitted() && $form->isValid()) {
  156.             $user = $form->getData();
  158.             $psswdErr = FALSE;
  159.             $otherErr = false;
  161.             if($user->getPlainPassword()) {
  162.                 if(!$userManager->isPasswordStrength($user->getPlainPassword(), $user->getUsername(), $user->getEmail(), $user->getFirstName().$user->getLastName())) {
  163.                     $this->addFlashMessage('error', 'profile_weak_psswd', [], 'controller');
  164.                     $psswdErr = TRUE;
  165.                 }
  167.                 if(!$userManager->hasPasswordMinimalLength($user->getPlainPassword())) {
  168.                     $this->addFlashMessage('error', 'profile_short_psswd', [], 'controller');
  169.                     $psswdErr = TRUE;
  170.                 }
  172.                 if($psswdErr) {
  173.                     //error password length
  174.                     $this->addFlashMessage('error', 'profile_short_psswd', [], 'controller');
  175.                 }
  177.                 $randomBytes = random_bytes(32);
  178.                 $user->setSalt(bin2hex($randomBytes));
  179.                 $password = $passwordEncoder->hashPassword($user, $user->getPlainPassword());
  180.                 $user->setPassword($password);
  181.             }
  183.             if(strlen($user->getPersonalNumber()) > 64) {
  184.                 $this->addFlashMessage('error', 'error.profile_personal_number_too_long', [], 'controller');
  185.                 $otherErr = TRUE;
  186.             }
  188.             if($psswdErr || $otherErr) {
  189.                 return $this->render('frontend/user_edit.html.twig', [
  190.                     'user' => $user,
  191.                     'form' => $form
  192.                 ]);
  193.             }
  195.             $user->setLastmodAt(new \DateTime());
  196.             $user->setUsers($user);
  199.             //$em->persist($user);
  200.             $em->flush($user);
  202.             $this->addFlashMessage('notice', 'user_update_success', [], 'controller');
  203.             return $this->redirectToRoute('user-detail');
  205.         } else {
  206.             // dump( $form->getErrors() );
  207.             if ($form->isSubmitted() && !$form->isValid()) {
  208.                 $form->getErrors();
  209.             }
  210.         }
  212.         return $this->render('frontend/user_edit.html.twig', [
  213.             'user' => $user,
  214.             'form' => $form
  215.         ]);
  216.     }
  218.     /**
  219.      * @param Request $request
  220.      * @param UserPasswordHasherInterface $passwordEncoder
  221.      * @return RedirectResponse|Response
  222.      */
  223.     #[Route(path: '/profile', name: 'user-detail', methods: ['GET'])]
  224.     public function detailAction(UserPasswordHasherInterface $passwordEncoder)
  225.     {
  226.         if(!$user = $this->getUser()) {
  227.             return $this->redirectToRoute('login');
  228.         }
  230.         $user = $this->getUser();
  232.         return $this->render('frontend/user_detail.html.twig', [
  233.             'user' => $user
  234.         ]);
  235.     }
  237.     /**
  238.      * Check password strength
  239.      *
  240.      * @return Response
  241.      */
  242.     #[Route(path: '/check-password', name: 'userPasswordCheck', methods: ['GET'])]
  243.     public function checkPasswordAction(Request $request, TranslatorInterface $translator, UserManager $userManager): Response
  244.     {
  245.         //
  246.         $password = $request->query->get('password', '');
  247.         $email = $request->query->get('email', '');
  248.         $userName = $request->query->get('userName', '');
  249.         $name = $request->query->get('name', '');
  251.         $isCorrect = 0;
  254.         if (!$userManager->hasPasswordMinimalLength($password)) {
  255.             $message = $translator->trans('profile_short_psswd', [], 'controller');
  256.         } elseif (!$userManager->isPasswordStrength($password, $userName, $email, $name)) {
  257.             $message = $translator->trans('profile_weak_psswd', [], 'controller');
  258.         } else {
  259.             $isCorrect = 1;
  260.             $message = $translator->trans('profile_ok_psswd', [], 'controller');
  261.         }
  263.         $response = new JsonResponse();
  264.         $response->setData(array(
  265.             'isCorrect' => $isCorrect,
  266.             'message' => $message,
  267.         ));
  269.         return $response;
  270.     }
  273. }