src/Controller/SecurityController.php line 48

Open in your IDE?
  1. <?php
  3. /*
  4.  * This file is part of the Symfony package.
  5.  *
  6.  * (c) Fabien Potencier <fabien@symfony.com>
  7.  *
  8.  * For the full copyright and license information, please view the LICENSE
  9.  * file that was distributed with this source code.
  10.  */
  12. namespace App\Controller;
  14. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  15. use Symfony\Component\HttpFoundation\Request;
  16. use Symfony\Component\HttpFoundation\Response;
  17. use Symfony\Component\Routing\Annotation\Route;
  18. use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
  19. use Symfony\Component\Security\Http\Util\TargetPathTrait;
  20. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  21. use App\Entity\User;
  22. use App\Repository\UserRepository;
  23. use Doctrine\Persistence\ManagerRegistry;
  24. use Doctrine\ORM\EntityManagerInterface;
  25. use Symfony\Component\Security\Core\Security;
  26. use Symfony\Bridge\Twig\Mime\TemplatedEmail;
  27. use Symfony\Component\Mailer\MailerInterface;
  28. use Symfony\Component\Mime\Email;
  30. /**
  31.  * Controller used to manage the application security.
  32.  * See https://symfony.com/doc/current/security/form_login_setup.html.
  33.  *
  34.  * @author Ryan Weaver <weaverryan@gmail.com>
  35.  * @author Javier Eguiluz <javier.eguiluz@gmail.com>
  36.  */
  37. class SecurityController extends AbstractController {
  39.     use TargetPathTrait;
  41.     private $security;
  43.     public function __construct(Security $security) {
  44.         $this->security = $security;
  45.     }
  47.     #[Route('/login', name: 'security_login')]
  48.     public function login(Request $request, AuthenticationUtils $helper, UserPasswordHasherInterface $passwordHasher, ManagerRegistry $entityManager): Response {
  49.         // if user is already logged in, don't display the login page again
  50.         if ($this->getUser()) {
  51. //            if ($this->security->isGranted('ROLE_ADMIN')) {
  52.             return $this->redirectToRoute('dashboard');
  53. //            }
  54.         }
  55.         $users = $entityManager->getRepository(User::class)->findAll();
  57.         // create the user and hash its password
  58. //        $user = new User();
  59. //        $user->setFullName("Visitor");
  60. //        $user->setUsername("user");
  61. //        $user->setEmail("visitor@evenews.com");
  62. //        $user->setRoles(['ROLE_USER']);
  63. //        $user->setEnabled('1');
  64. //
  65. //        $hashedPassword = $passwordHasher->hashPassword($user, '123456');
  66. //        $user->setPassword($hashedPassword);
  67. //
  68. //        $entityManager->persist($user);
  69. //        $entityManager->flush();
  70.         ///end create the user
  71.         // this statement solves an edge-case: if you change the locale in the login
  72.         // page, after a successful login you are redirected to a page in the previous
  73.         // locale. This code regenerates the referrer URL whenever the login page is
  74.         // browsed, to ensure that its locale is always the current one.
  75.         $this->saveTargetPath($request->getSession(), 'main', $this->generateUrl('dashboard'));
  77.         return $this->render('security/login.html.twig', [
  78.                     // last username entered by the user (if any)
  79.                     'last_username' => $helper->getLastUsername(),
  80.                     // last authentication error (if any)
  81.                     'error' => $helper->getLastAuthenticationError(),
  82.                     'users' => $users,
  83.         ]);
  84.     }
  86.     /**
  87.      * This is the route the user can use to logout.
  88.      *
  89.      * But, this will never be executed. Symfony will intercept this first
  90.      * and handle the logout automatically. See logout in config/packages/security.yaml
  91.      */
  92.     #[Route('/logout', name: 'security_logout')]
  93.     public function logout(): void {
  94.         throw new \Exception('This should never be reached!');
  95.     }
  97.     #[Route('/pwForgotten', name: 'security_pw_forgotten')]
  98.     public function pwForgotten(Request $request): Response {
  99.         // if user is already logged in, don't display the login page again
  100.         return $this->render('security/pwForgotten.html.twig', [
  101.         ]);
  102.     }
  104.     #[Route('/pwForgotten/send', name: 'security_pw_forgotten_send', methods: ['POST'])]
  105.     public function pwForgottenSend(Request $request, MailerInterface $mailer, UserRepository $users, EntityManagerInterface $entityManager): Response {
  107.         $user = $users->findOneByEmail($request->get('email'));
  109.         if ($user) {
  110.             $this->addFlash('success', 'An email to reset your password has been sent to your inbox : ' . $request->get('email'));
  111.             if ($user->getTokenreset() != null) {
  112.                 $token = $user->getTokenreset();
  113.             } else {
  114.                 $str = 'A=u_cs3Lmn' . $user->getId();
  115.                 $token = str_shuffle($str);
  116. //                dump($user);die;
  117.                 $user->setTokenreset($token);
  118.                 $entityManager->persist($user);
  119.                 $entityManager->flush();
  120.             }
  122.             $email = (new TemplatedEmail())
  123.                     ->from('no-reply@evenews.com')
  124.                     ->to($request->get('email'))
  125.                     ->subject('Evenews registration')
  127.                     // path of the Twig template to render
  128.                     ->htmlTemplate('emails/pwForgotten.html.twig')
  130.                     // pass variables (name => value) to the template
  131.                     ->context([
  132.                 'token' => $token,
  133.                 'user' => $user,
  134.                     ])
  135.             ;
  136.             $mailer->send($email);
  137.         } else {
  138.             $this->addFlash('warning', 'No account with this email: ' . $request->get('email'));
  139.         }
  141.         return $this->redirectToRoute('security_pw_forgotten');
  142.     }
  144.     #[Route('/reset/tk-{token}/password', name: 'security_pw_reset')]
  145.     public function resetPassword(Request $request, $token, UserRepository $users): Response {
  146.         // if user is already logged in, don't display the login page again
  147.         $user = $users->findOneByTokenreset($token);
  148.         if ($user) {
  149.             
  150.         } else {
  151.             $this->addFlash('warning', 'Request expired, please try again...');
  152.             return $this->redirectToRoute('security_pw_forgotten');
  153.         }
  155.         return $this->render('security/resetPw.html.twig', [
  156.                     'user' => $user
  157.         ]);
  158.     }
  160.     #[Route('/', name: 'security_pw_reset_send', methods: ['POST'])]
  161.     public function resetPasswordSend(Request $request, UserRepository $users, UserPasswordHasherInterface $passwordHasher, EntityManagerInterface $entityManager) {
  163.         $user = $users->findOneByTokenreset($request->get('_token'));
  165.         if ($user) {
  166.             $this->addFlash('success', 'Your password has been changed with success.');
  167.             $hashedPassword = $passwordHasher->hashPassword($user, $request->get('_password'));
  168.             $user->setPassword($hashedPassword);
  169.             $user->setTokenreset(null);
  170.             $entityManager->persist($user);
  171.             $entityManager->flush();
  173. //            $message = \Swift_Message::newInstance()
  174. //                    ->setSubject('Evenews: New Password')
  175. //                    ->setFrom(['contact@evenews.com' => 'Evenews'])
  176. //                    ->setTo($user->getEmail())
  177. //                    ->setBody(
  178. //                    $this->renderView('emails/pwforgotten.html.twig', array('email' => $request->get('email'), 'token' => $token)
  179. //                    ), 'text/html'
  180. //            );
  181. //            $this->get('mailer')->send($message);
  182.         } else {
  183.             $this->addFlash('warning', 'Request expired, please try again');
  184.         }
  186.         return $this->redirectToRoute('security_login');
  187.     }
  189.     #[Route('/email/verification', name: 'security_email_verification')]
  190.     public function emailVerification(Request $request, UserRepository $users, EntityManagerInterface $entityManager) {
  192.         $user = $this->getUser();
  193.         if ($user->getEmailVerification() != "1") {
  194.             $str = 'Au_5B3L_mxXbn' . $user->getId();
  195.             $token = str_shuffle($str);
  196.             $user->setEmailVerification($token);
  197.             $entityManager->persist($user);
  198.             $entityManager->flush();
  200. //            $message = \Swift_Message::newInstance()
  201. //                    ->setSubject('Email confirmation')
  202. //                    ->setFrom('contact@evenews.com')
  203. //                    ->setTo($user->getEmail())
  204. //                    ->setBody(
  205. //                    $this->renderView('emails/accountCreated.html.twig', array('user' => $user, 'token' => $token)
  206. //                    ), 'text/html'
  207. //            );
  208. //            $this->get('mailer')->send($message);
  209.             $this->addFlash('warning', 'An email has been sent to confirm your adress ' . $user->getEmail());
  210.         } else {
  211.             $this->addFlash('warning', 'Email already verified');
  212.         }
  214.         if ($this->security->isGranted('ROLE_USER')) {
  215.             return $this->redirectToRoute('dashboard');
  216.         } else {
  217.             return $this->redirectToRoute('security_login');
  218.         }
  219.     }
  221.     #[Route('/email/confirmation/tk/{token}', name: 'security_email_confirmation')]
  222.     public function emailConfirmation(Request $request, $token, UserRepository $users, EntityManagerInterface $entityManager) {
  224.         $user = $users->findOneByEmailVerification($token);
  225.         if ($user->getEmailVerification() != "1") {
  226.             $user->setEmailVerification('1');
  227.             $entityManager->persist($user);
  228.             $entityManager->flush();
  230. //            $message = \Swift_Message::newInstance()
  231. //                    ->setSubject('Email confirmation')
  232. //                    ->setFrom('contact@evenews.com')
  233. //                    ->setTo($user->getEmail())
  234. //                    ->setBody(
  235. //                    $this->renderView('emails/accountCreated.html.twig', array('user' => $user, 'token' => $token)
  236. //                    ), 'text/html'
  237. //            );
  238. //            $this->get('mailer')->send($message);
  239.             $this->addFlash('success', 'Email confirmed with success' . $user->getEmail());
  240.         } else {
  241.             $this->addFlash('info', 'Email already confirmed');
  242.         }
  244.         return $this->render('security/emailConfirmed.html.twig', [
  245.                     'user' => $user
  246.         ]);
  247.     }
  249. }