Symfony Profiler

<?php
namespace App\Security;
use App\Entity\User;
use App\Repository\UserRepository;
use App\Service\MailService;
use App\Service\UserService;
use Doctrine\ORM\EntityManagerInterface;
use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
use Symfony\Component\Security\Core\Exception\AuthenticationException;
use Symfony\Component\HttpFoundation\RedirectResponse;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Security;
use Symfony\Component\Security\Http\Authenticator\AbstractLoginFormAuthenticator;
use Symfony\Component\Security\Http\Authenticator\Passport\Badge\CsrfTokenBadge;
use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
use Symfony\Component\Security\Http\Authenticator\Passport\Credentials\PasswordCredentials;
use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
use Symfony\Component\Security\Http\Util\TargetPathTrait;
class DecizioAuthenticator extends AbstractLoginFormAuthenticator
{
use TargetPathTrait;
public const LOGIN_ROUTE = 'app_login';
private EntityManagerInterface $em;
private MailService $mailService;
private UserService $userService;
public function __construct(
private readonly UrlGeneratorInterface $urlGenerator,
EntityManagerInterface $em,
MailService $mailService,
UserService $userService
)
{
$this->em = $em;
$this->mailService = $mailService;
$this->userService = $userService;
}
public function authenticate(Request $request): Passport
{
$email = $request->request->get('email', '');
$this->checkAccountStatus($email);
$request->getSession()->set(Security::LAST_USERNAME, $email);
return new Passport(
new UserBadge($email),
new PasswordCredentials($request->request->get('password', '')),
[
new CsrfTokenBadge('authenticate', $request->request->get('_csrf_token')),
]
);
}
public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
{
/** @var User $user */
$user = $token->getUser();
$user->setLastLoginAt(new \DateTimeImmutable());
$this->em->persist($user);
$this->em->flush();
if ($targetPath = $this->getTargetPath($request->getSession(), $firewallName)) {
return new RedirectResponse($targetPath);
}
return new RedirectResponse($this->urlGenerator->generate('app_user_index'));
}
protected function getLoginUrl(Request $request): string
{
return $this->urlGenerator->generate(self::LOGIN_ROUTE);
}
private function checkAccountStatus($email): void
{
/** @var User $user */
$user = $this->em->getRepository(User::class)->findOneByEmail($email);
if(!$user) {
throw new AuthenticationException("Ce compte n'existe pas");
}
if(!$user->isVerified()) {
$oneHourAgo = new \DateTimeImmutable('-1 hour');
if($user->getMailSentAt() > $oneHourAgo) {
throw new AuthenticationException("Un mail vous a été envoyé il y a moins de 1h. Vérifiez votre boite de reception ainsi que les spams");
}
$this->userService->setPasswordAndSendMail($user);
throw new AuthenticationException("Votre email n'est pas vérifié. Un courriel vient de vous être envoyé pour valider votre compte.");
}
if(!$user->isIsEnabled()) {
throw new AuthenticationException("Votre compte est bloqué. Veuillez contacter l'administrateur contact@decizioconsulting.com.");
}
}
}

src/Security/DecizioAuthenticator.php line 25