src/Security/LoginFormAuthenticator.php line 23

  1. <?php
  3. namespace App\Security;
  5. use App\Repository\UserRepository;
  6. use Symfony\Component\HttpFoundation\RedirectResponse;
  7. use Symfony\Component\HttpFoundation\Request;
  8. use Symfony\Component\HttpFoundation\Response;
  9. use Symfony\Component\Routing\RouterInterface;
  10. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  11. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  12. use Symfony\Component\Security\Core\Exception\UserNotFoundException;
  13. use Symfony\Component\Security\Http\Authenticator\AbstractLoginFormAuthenticator;
  14. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\CsrfTokenBadge;
  15. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\RememberMeBadge;
  16. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  17. use Symfony\Component\Security\Http\Authenticator\Passport\Credentials\PasswordCredentials;
  18. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  19. use Symfony\Component\Security\Http\Util\TargetPathTrait;
  20. use Symfony\Component\HttpFoundation\Session\Session;
  23. class LoginFormAuthenticator extends AbstractLoginFormAuthenticator
  24. {
  25.     use TargetPathTrait;
  27.     private $login_route;
  29.     public function __construct(private UserRepository $userRepository, private RouterInterface $router)
  30.     {
  31.     }
  34.     //removable if you don't need to customize redirection
  35.     public function supports(Request $request) : bool
  36.     {
  37.         $this->login_route = $request->attributes->get('_route');
  39.         return ($request->attributes->get('_route') === 'app_login')
  40.             && $request->isMethod('POST');
  41.     }
  44.     // public function onAuthenticationSuccess(Request $request, TokenInterface $token, $firewallName): ?Response
  45.     // {
  46.     //     if ($targetPath = $this->getTargetPath($request->getSession(), $firewallName)) {
  47.     //         return new RedirectResponse($targetPath);
  48.     //     }
  50.     //     return new RedirectResponse($this->router->generate('app_admin_index'));
  51.     // }
  53.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, $firewallName): ?Response
  54.     {
  55.         $session = $request->getSession();
  56.         $roles = $token->getRoleNames();
  57.         $isStudent = in_array('ROLE_ALUMNO', $roles, true);
  58.         $adminIndexPath = $this->router->generate('app_admin_index');
  59.         $adminEventsPath = $this->router->generate('app_events');
  61.         if ($session instanceof Session) {
  62.             $session->getFlashBag()->add(
  63.                 'success',
  64.                 'Sesión iniciada correctamente. Puede cerrar sesión a través de la opción disponible en el menú de usuario.'
  65.             );
  66.         }
  67.         if ($targetPath = $this->getTargetPath($request->getSession(), $firewallName)) {
  68.             if (!$isStudent && $this->isAdminIndexTargetPath($targetPath, $adminIndexPath)) {
  69.                 return new RedirectResponse($adminEventsPath);
  70.             }
  72.             return new RedirectResponse($targetPath);
  73.         }
  75.         if ($isStudent) {
  76.             return new RedirectResponse($this->router->generate('public_events'));
  77.         }
  79.         return new RedirectResponse($adminEventsPath);
  80.     }
  82.     public function onAuthenticationFailure(Request $request, AuthenticationException $exception): Response
  83.     {
  84.         return parent::onAuthenticationFailure($request, $exception);
  85.     }
  87.     protected function getLoginUrl(Request $request): string
  88.     {
  89.         return $this->router->generate('app_login');
  90.     }
  92.     public function authenticate(Request $request) : Passport
  93.     {
  95.         $username = $request->request->get('username');
  96.         $password = $request->request->get('password');
  97.         $csrf_token = $request->request->get('_csrf_token');
  98.         return new Passport(
  99.             new UserBadge($username, function ($userIdentifier){
  100.                 $user = $this->userRepository->findOneByUsernameOrEmail($userIdentifier);
  101.                 if (!$user){
  102.                     throw new UserNotFoundException();
  103.                 }
  105.                 return $user;
  106.             }),
  107.             new PasswordCredentials($password),
  108.             [
  109.                 new CsrfTokenBadge('authenticate',$csrf_token),
  110.                 (new RememberMeBadge())->enable()
  111.             ]
  112.         );
  114.     }
  116.     private function isAdminIndexTargetPath(string $targetPath, string $adminIndexPath): bool
  117.     {
  118.         if ($targetPath === $adminIndexPath) {
  119.             return true;
  120.         }
  122.         $parsedPath = parse_url($targetPath, PHP_URL_PATH);
  124.         return is_string($parsedPath) && $parsedPath === $adminIndexPath;
  125.     }
  126. }