src/Security/LoginAuthenticator.php line 18

Open in your IDE?
  1. <?php
  3. namespace App\Security;
  5. use Symfony\Component\HttpFoundation\RedirectResponse;
  6. use Symfony\Component\HttpFoundation\Request;
  7. use Symfony\Component\HttpFoundation\Response;
  8. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Security;
  11. use Symfony\Component\Security\Http\Authenticator\AbstractLoginFormAuthenticator;
  12. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\CsrfTokenBadge;
  13. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  14. use Symfony\Component\Security\Http\Authenticator\Passport\Credentials\PasswordCredentials;
  15. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  16. use Symfony\Component\Security\Http\Util\TargetPathTrait;
  18. class LoginAuthenticator extends AbstractLoginFormAuthenticator
  19. {
  20.     use TargetPathTrait;
  22.     public const LOGIN_ROUTE = 'app_login';
  24.     public function __construct(private UrlGeneratorInterface $urlGenerator)
  25.     {
  26.     }
  28.     public function authenticate(Request $request): Passport
  29.     {
  30.         $email = $request->request->get('email', '');
  32.         $request->getSession()->set(Security::LAST_USERNAME, $email);
  34.         return new Passport(
  35.             new UserBadge($email),
  36.             new PasswordCredentials($request->request->get('password', '')),
  37.             [
  38.                 new CsrfTokenBadge('authenticate', $request->request->get('_csrf_token')),            ]
  39.         );
  40.     }
  42.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
  43.     {
  44.         if ($targetPath = $this->getTargetPath($request->getSession(), $firewallName)) {
  45.             $targetPathUrl = (string) parse_url($targetPath, PHP_URL_PATH);
  46.             $blockedTargets = [
  47.                 '/produits/produitsepuises',
  48.                 '/new_produits/produits_epuises',
  49.                 '/api',
  50.             ];
  52.             $isBlockedTarget = false;
  53.             foreach ($blockedTargets as $blockedTarget) {
  54.                 if ($targetPathUrl === $blockedTarget || str_starts_with($targetPathUrl, $blockedTarget . '/')) {
  55.                     $isBlockedTarget = true;
  56.                     break;
  57.                 }
  58.             }
  60.             if (!$isBlockedTarget) {
  61.                 return new RedirectResponse($targetPath);
  62.             }
  64.             $this->removeTargetPath($request->getSession(), $firewallName);
  65.         }
  68.         $roles = $token->getUser()->getRoles();
  70.         if (
  71.             in_array('ROLE_ADMIN', $roles) ||
  72.             in_array('ROLE_ULTRATEX', $roles) ||
  73.             in_array('ROLE_ULTRACONFECTION', $roles) ||
  74.             in_array('ROLE_GESTION_STOCK', $roles) ||
  75.             in_array('ROLE_RH', $roles)
  76.         )  {
  77.             return new RedirectResponse($this->urlGenerator->generate('app_home'));
  78.         }
  79.         else{
  80.             return new RedirectResponse($this->urlGenerator->generate('app_login'));
  81.         }
  83. //        return new RedirectResponse($this->urlGenerator->generate('app_login'));
  84.     }
  86.     protected function getLoginUrl(Request $request): string
  87.     {
  88.         return $this->urlGenerator->generate(self::LOGIN_ROUTE);
  89.     }
  90. }