src/Security/ClientAuthenticator.php line 38

Open in your IDE?
  1. <?php
  3. namespace App\Security;
  5. use App\Entity\Connection;
  6. use Doctrine\ORM\EntityManagerInterface;
  7. use PHPUnit\Util\Exception;
  8. use Symfony\Component\HttpFoundation\JsonResponse;
  9. use Symfony\Component\HttpFoundation\Request;
  10. use Symfony\Component\HttpFoundation\Response;
  11. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  12. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  13. use Symfony\Component\Security\Core\User\UserInterface;
  14. use Symfony\Component\Security\Http\Authenticator\AbstractAuthenticator;
  15. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  16. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  17. use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
  19. class ClientAuthenticator extends AbstractAuthenticator
  20. {
  21.     /**
  22.      * @var EntityManagerInterface $em
  23.      */
  24.     private EntityManagerInterface $em;
  26.     /**
  27.      * TokenAuthenticator constructor.
  28.      *
  29.      * @param EntityManagerInterface $em
  30.      */
  31.     public function __construct(EntityManagerInterface $em)
  32.     {
  33.         $this->em = $em;
  34.     }
  36.     public function supports(Request $request): ?bool
  37.     {
  38.         $supports = $request->getSession()->has('clientId');
  40.         if ($request->getMethod() === Request::METHOD_POST) {
  41.             $supports = $supports || $request->request->has('clientId');
  42.         }
  44.         if ($request->getMethod() === Request::METHOD_GET) {
  45.             $supports = $supports || $request->query->has('clientId');
  46.         }
  48.         return $supports;
  49.     }
  51.     public function authenticate(Request $request): Passport
  52.     {
  53.         $token = $request->getSession()->get('clientId');
  55.         if ($request->getMethod() === Request::METHOD_POST) {
  56.             $token = $token ?? $request->request->get('clientId');
  57.         }
  59.         if ($request->getMethod() === Request::METHOD_GET) {
  60.             $token = $token ?? $request->query->get('clientId');
  61.         }
  63.         if (null === $token) {
  64.             throw new Exception('No token provided');
  65.         }
  67.         return new SelfValidatingPassport(
  68.             new UserBadge(
  69.                 $token,
  70.                 function ($token) {
  71.                     return $this->em->getRepository(Connection::class)->findOneBy(['clientId' => $token]);
  72.                 }
  73.             ),
  74.             []
  75.         );
  76.     }
  78.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
  79.     {
  80.         return null;
  81.     }
  83.     public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
  84.     {
  85.         $data = [
  86.             'message' => strtr($exception->getMessageKey(), $exception->getMessageData())
  87.         ];
  89.         return new JsonResponse($data, Response::HTTP_UNAUTHORIZED);
  90.     }
  91. }