src/Controller/SecurityController.php line 44

  1. <?php
  3. namespace App\Controller;
  5. use App\Entity\User;
  6. use App\Service\MailerService;
  7. use Doctrine\ORM\EntityManagerInterface;
  8. use Symfony\Bundle\SecurityBundle\Security;
  9. use Symfony\Component\HttpFoundation\Request;
  10. use Symfony\Component\HttpFoundation\Response;
  11. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  12. use Symfony\Component\Routing\Annotation\Route;
  13. use Symfony\Component\HttpFoundation\RedirectResponse;
  14. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  15. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  16. use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
  18. class SecurityController extends AbstractController
  19. {
  20.     /**
  21.      * @var EntityManagerInterface
  22.      */
  23.     private $em;
  25.     /**
  26.      * @var MailerService
  27.      */
  28.     private $mailerService;
  30.     /**
  31.      * @var UserPasswordHasherInterface
  32.      */
  33.     private $passwordEncoder;
  35.     public function __construct(private Security $security, EntityManagerInterface $em, MailerService $mailerService, UserPasswordHasherInterface $passwordEncoder)
  36.     {
  37.         $this->security = $security;
  38.         $this->em = $em;
  39.         $this->mailerService = $mailerService;
  40.         $this->passwordEncoder = $passwordEncoder;
  41.     }
  42.     
  43.     #[Route(path: '/login', name: 'app_login')]
  44.     public function login(AuthenticationUtils $authenticationUtils): Response
  45.     {
  46.         if ($this->security->isGranted('ROLE_ADMIN')) {
  47.             return $this->redirectToRoute('app_dashboard');
  48.         } else if ($this->security->isGranted('ROLE_MANAGER')) {
  49.             return $this->redirectToRoute('app_dashboard');
  50.         } else if ($this->security->isGranted('ROLE_COLLAB')) {
  51.             return $this->redirectToRoute('app_dashboard');
  52.         }
  54.         // get the login error if there is one
  55.         $error = $authenticationUtils->getLastAuthenticationError();
  56.         // last username entered by the user
  57.         $lastUsername = $authenticationUtils->getLastUsername();
  59.         return $this->render('security/login.html.twig', ['last_username' => $lastUsername, 'error' => $error]);
  60.     }
  62.     #[Route(path: '/logout', name: 'app_logout')]
  63.     public function logout(): void
  64.     {
  65.         throw new \LogicException('This method can be blank - it will be intercepted by the logout key on your firewall.');
  66.     }
  68.     #[Route(path: '/oubli-mot-de-passe', name: 'app_forgotten_password')]
  69.     public function forgottenPassword(Request $request): Response
  70.     {
  71.         if ($request->isMethod('POST')) {
  72.             $email = $request->request->get('email');
  73.             /** @var User $user */
  74.             $user = $this->em->getRepository(User::class)->findOneByEmail($email);
  76.             if ($user === null) {
  77.                 return $this->redirectToRoute('app_forgotten_password', ['error' => 'Email invalide']);
  78.             }
  79.             $token = md5(uniqid());
  81.             $user->setToken($token);
  82.             $this->em->flush();
  84.             $params = [
  85.                 'user' => $user,
  86.                 'url' => $this->generateUrl('app_reset_password', array('token' => $token), UrlGeneratorInterface::ABSOLUTE_URL)
  87.             ];
  89.             $this->mailerService->sendResetPassword($params);
  91.             return $this->redirectToRoute('app_login');
  92.         }
  94.         return $this->render('security/forgot-password.html.twig');
  95.     }
  97.     #[Route(path: '/reinitialiser-mot-de-passe/{token}', name: 'app_reset_password')]
  98.     public function resetPassword(string $token, Request $request)
  99.     {
  100.         if ($request->isMethod('POST')) {
  101.             /* @var User $user */
  102.             $user = $this->em->getRepository(User::class)->findOneBy(['token' => $token]);
  103.             
  104.             if ($user === null) {
  105.                 return $this->redirectToRoute('app_login', ['error' => 'Token invalide']);
  106.             }
  108.             if (($request->request->get('password') != $request->request->get('passwordbis')) || (strlen($request->request->get('passwordbis')) < 9)) {
  109.                 return $this->redirectToRoute('app_reset_password', ['token' => $token]);
  110.             }
  112.             $user->setToken(null);
  113.             $hashedPassword = $this->passwordEncoder->hashPassword($user, $request->request->get('password'));
  114.             $user->setPassword($hashedPassword);
  115.             $this->em->persist($user);
  116.             $this->em->flush();
  118.             return $this->redirectToRoute('app_login');
  119.         } else {
  120.             return $this->render('security/reset-password.html.twig', ['token' => $token]);
  121.         }
  122.     }
  123. }