src/Controller/UserProfileController.php line 58

  1. <?php
  3. namespace App\Controller;
  5. use App\Entity\User;
  6. use App\Entity\UserProfile;
  7. use App\Form\UserProfileType;
  8. use App\Form\ChangePwsdFormType;
  9. use App\Message\SendEmailMessage;
  10. use App\Repository\EventRequestRepository;
  11. use App\Repository\RegistrationCertificateRepository;
  12. use App\Repository\UserRepository;
  13. use App\Controller\UtilsController;
  14. use Doctrine\ORM\EntityManagerInterface;
  15. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  16. use Symfony\Component\HttpFoundation\Request;
  17. use Symfony\Component\Routing\Annotation\Route;
  18. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  19. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  20. use Symfony\Component\Security\Http\Attribute\IsGranted;
  21. use Symfony\Contracts\Translation\TranslatorInterface;
  22. use Symfony\Component\Messenger\MessageBusInterface;
  23. use Symfony\Component\Form\FormInterface;
  25. #[Route('/alumno')]
  26. class UserProfileController extends AbstractController
  27. {
  28.     private function denyUnlessSelfOrAdmin(): void
  29.     {
  30.         if (!$this->getUser()) {
  31.             throw $this->createAccessDeniedException();
  32.         }
  34.         if (
  35.             !$this->isGranted('ROLE_ADMIN')
  36.             && !$this->isGranted('ROLE_SUPERUSER')
  37.             && !$this->isGranted('ROLE_ALUMNO')
  38.             && !$this->isGranted('ROLE_COURSE')
  39.         ) {
  40.             throw $this->createAccessDeniedException();
  41.         }
  42.     }
  43.    #[Route('/alta', name: 'alumno_alta')]
  44.     public function alta(
  45.         Request $request,
  46.         EntityManagerInterface $em,
  47.         UserPasswordHasherInterface $passwordHasher,
  48.         UtilsController $utilsController,
  49.         UserRepository $userRepository,
  50.         MessageBusInterface $bus
  51.     ) {
  52.         $user = new User();
  53.         $profile = new UserProfile();
  55.         $form = $this->createForm(UserProfileType::class, $profile, [
  56.             'mode' => 'alta',
  57.             'profile_context' => 'public_signup',
  58.             'validation_groups' => static function (FormInterface $form): array {
  59.                 return ['Default', 'public_signup', 'public_internal'];
  60.             },
  61.         ]);
  63.         $form->handleRequest($request);
  65.         if ($form->isSubmitted()) {
  66.             $recaptchaResponse = $request->request->get('g-recaptcha-response');
  67.             if (!$utilsController->isRecaptchaValid($recaptchaResponse)) {
  68.                 $this->addFlash('error', 'Verifique el captcha');
  69.                 return $this->render('public/new_student.html.twig', [
  70.                     'form' => $form->createView(),
  71.                     'recaptcha_site_key' => $_ENV['GOOGLE_RECAPTCHA_SITE_KEY'],
  72.                 ]);
  73.             }
  74.         }
  76.         if ($form->isSubmitted() && $form->isValid()) {
  77.             $dni = $form->get('dni')->getData();
  78.             if ($dni && $userRepository->findOneBy(['dni' => $dni])) {
  79.                 $this->addFlash('error', 'Ese DNI ya se encuentra dado de alta.');
  80.                 return $this->render('public/new_student.html.twig', [
  81.                     'form' => $form->createView(),
  82.                     'recaptcha_site_key' => $_ENV['GOOGLE_RECAPTCHA_SITE_KEY'],
  83.                 ]);
  84.             }
  85.             $email = $form->get('email')->getData();
  86.             if ($email && $userRepository->findOneBy(['email' => $email])) {
  87.                 $this->addFlash('error', 'Ese correo electrónico ya se encuentra dado de alta.');
  88.                 return $this->render('public/new_student.html.twig', [
  89.                     'form' => $form->createView(),
  90.                     'recaptcha_site_key' => $_ENV['GOOGLE_RECAPTCHA_SITE_KEY'],
  91.                 ]);
  92.             }
  94.             $user->setDni($dni);
  95.             $user->setUsername($email);
  96.             $user->setEmail($email);
  97.             $user->setNomComplet($profile->getNombre());
  98.             $user->setSurname($profile->getApellido1().' '.$profile->getApellido2());
  99.             $user->setPhone($profile->getTelefono());
  100.             $user->setRoles(['ROLE_ALUMNO']);
  101.             $user->setValid(true);
  102.             $user->setDeleted(false);
  103.             $user->setAdmin(false);
  105.             // password temporal
  106.             $plainPassword = bin2hex(random_bytes(4));
  107.             $user->setPassword(
  108.                 $passwordHasher->hashPassword($user, $plainPassword)
  109.             );
  111.             $profile->setUser($user);
  113.             // activación
  114.             $token = bin2hex(random_bytes(32));
  115.             $user->setActivationToken($token);
  116.             $user->setActive(false);
  118.             $em->persist($user);
  119.             $em->persist($profile);
  120.             $em->flush();
  122.             $activationUrl = $this->generateUrl(
  123.                 'alumno_activate_account',
  124.                 ['token' => $token],
  125.                 UrlGeneratorInterface::ABSOLUTE_URL
  126.             );
  128.             $bus->dispatch(new SendEmailMessage(
  129.                 $user->getEmail(),
  130.                 'notifications/student_account_activation.html.twig',
  131.                 'Activación de la cuenta necesaria',
  132.                 $user->getNomComplet(),
  133.                 [
  134.                     'activationUrl' => $activationUrl,
  135.                     'gender' => $profile->getSexo()]
  136.             ));
  138.             $this->addFlash('success', 'Revise su correo para activar la cuenta');
  139.             return $this->redirectToRoute('app_login');
  140.         }
  142.         return $this->render('public/new_student.html.twig', [
  143.             'form' => $form->createView(),
  144.             'recaptcha_site_key' => $_ENV['GOOGLE_RECAPTCHA_SITE_KEY'],
  145.         ]);
  146.     }
  148.       #[Route('/activar/{token}', name: 'alumno_activate_account')]
  149.         public function activate(
  150.             string $token,
  151.             Request $request,
  152.             EntityManagerInterface $em,
  153.             UserPasswordHasherInterface $hasher,
  154.             MessageBusInterface $bus
  155.         ) {
  156.         $user = $em->getRepository(User::class)
  157.             ->findOneBy(['activationToken' => $token]);
  159.         if (!$user) {
  160.             throw $this->createNotFoundException();
  161.         }
  163.         $isPasswordSetupOnly = $user->isActive();
  165.         if ($request->isMethod('POST')) {
  167.             if (!$this->isCsrfTokenValid('activate_account', $request->request->get('_token'))) {
  168.                 throw $this->createAccessDeniedException();
  169.             }
  171.             $password = (string) $request->request->get('password');
  172.             $repeat   = (string) $request->request->get('password_repeat');
  174.             if ($password === '' || $repeat === '') {
  175.                 $this->addFlash('error', 'Debe introducir ambos campos');
  176.             } elseif ($password !== $repeat) {
  177.                 $this->addFlash('error', 'Las contraseñas no coinciden');
  178.             } else {
  179.                 $user->setPassword(
  180.                     $hasher->hashPassword($user, $password)
  181.                 );
  182.                 $user->setActivationToken(null);
  183.                 if (!$isPasswordSetupOnly) {
  184.                     $user->setActive(true);
  185.                 }
  187.                 $em->flush();
  189.                 if ($isPasswordSetupOnly) {
  190.                     $this->addFlash('success', 'La contraseña se ha establecido correctamente. Ya puede acceder a la plataforma con su correo electrónico y la contraseña definida.');
  191.                 } else {
  192.                     $bus->dispatch(new SendEmailMessage(
  193.                         $user->getEmail(),
  194.                         'notifications/student_account_activated.html.twig',
  195.                         'Cuenta activada',
  196.                         $user->getNomComplet(),
  197.                         [
  198.                             'loginUrl' => $this->generateUrl(
  199.                                 'app_login',
  200.                                 [],
  201.                                 UrlGeneratorInterface::ABSOLUTE_URL
  202.                             )
  203.                         ]
  204.                     ));
  205.                     $this->addFlash('success', 'Su cuenta ha sido activada correctamente. Ya puede acceder a la plataforma con su dirección de correo y la contraseña establecida');
  206.                 }
  208.                 return $this->redirectToRoute('app_login');
  209.             }
  210.         }
  212.         return $this->render('public/activate_account.html.twig', [
  213.             'token' => $token,
  214.             'isPasswordSetupOnly' => $isPasswordSetupOnly,
  215.         ]);
  216.     }
  218.     #[Route(path: '/cambioPassword', name: 'alumno_change_password')]
  219.     public function changePswd(
  220.         Request $request, 
  221.         TranslatorInterface $translator,
  222.         EntityManagerInterface $em,
  223.         UserPasswordHasherInterface $passwordHasher)
  224.     {
  225.         $this->denyUnlessSelfOrAdmin();
  226.         $user = $this->getUser();
  227.         $form = $this->createForm(ChangePwsdFormType::class, $user, ['translator' => $translator]);
  228.         $form->handleRequest($request);
  229.         if ($form->isSubmitted() && $form->isValid()) {
  230.             $password = $form['justpassword']->getData();
  231.             $newPassword = $form['newpassword']->getData();
  233.             if ($passwordHasher->isPasswordValid($user, $password)) {
  234.                 $user->setPassword($passwordHasher->hashPassword($user, $newPassword));
  235.                 
  237.             } else {
  238.                 $this->addFlash('error', 'backend.user.new_passwod_must_be');
  240.                 return $this->render('public/profile/cambio_password_student.html.twig', ['passwordForm' => $form]);
  241.             }
  243.             $em->persist($user);
  244.             $em->flush();
  245.             $this->addFlash('success', $translator->trans('backend.user.changed_password'));
  247.             return $this->redirectToRoute('public_events');
  248.         }
  250.         return $this->render('public/profile/cambio_password_student.html.twig', ['passwordForm' => $form]);
  251.     }
  254.     #[Route('/perfil', name: 'alumno_perfil')]
  255.     public function editar(
  256.         Request $request,
  257.         EntityManagerInterface $em
  258.     ) {
  259.         $this->denyUnlessSelfOrAdmin();
  260.         $user = $this->getUser();
  261.         $profile = $user->getProfile();
  263.         if (!$profile) {
  264.             $this->addFlash('error', 'Perfil no encontrado');
  265.             return $this->redirectToRoute('public_events');
  266.         }
  267.         $mode = $request->query->getBoolean('edit') ? 'edit' : 'view';
  269.         $form = $this->createForm(UserProfileType::class, $profile, [
  270.             'mode' => $mode,
  271.             'profile_context' => 'public_profile',
  272.         ]);
  274.         $form->get('dni')->setData($user->getDni());
  275.         $form->get('email')->setData($user->getEmail());
  276.         $form->handleRequest($request);
  278.         if ($mode && $form->isSubmitted() && $form->isValid()) {
  279.             $em->flush();
  280.             $this->addFlash('success', 'Perfil actualizado');
  281.             return $this->redirectToRoute('alumno_perfil');
  282.         }
  284.         return $this->render('public/profile/edit_profile_student.html.twig', [
  285.             'form' => $form->createView(),
  286.             'mode' => $mode,
  287.         ]);
  288.     }
  291.      #[Route('/cursos', name: 'alumno_cursos')]
  292.     public function cursos(
  293.         EventRequestRepository $repo,
  294.         RegistrationCertificateRepository $registrationCertificateRepository
  295.     ) {
  296.         $this->denyUnlessSelfOrAdmin();
  297.         $certificatesByEvent = [];
  298.         foreach ($registrationCertificateRepository->findActiveByUser($this->getUser()) as $certificate) {
  299.             $eventId = $certificate->getEvent()?->getId();
  300.             if ($eventId === null) {
  301.                 continue;
  302.             }
  304.             $certificatesByEvent[$eventId][] = $certificate;
  305.         }
  307.         return $this->render('public/profile/course_history_student.html.twig', [
  308.             'requests' => $repo->findByUser($this->getUser()),
  309.             'certificatesByEvent' => $certificatesByEvent,
  310.         ]);
  311.     }
  312.     
  314.     #[Route('/baja', name: 'alumno_baja')]
  315.     public function baja(EntityManagerInterface $em)
  316.     {
  317.         $this->denyUnlessSelfOrAdmin();
  318.         /** @var \App\Entity\User $user */
  319.         $user = $this->getUser();
  321.         $user->setDeleted(true);
  322.         $user->setValid(false);
  324.         $em->flush();
  326.         return $this->redirectToRoute('app_logout');
  327.     }
  329. }