src/Controller/Security/SecurityController.php line 29

Open in your IDE?
  1. <?php
  3. namespace App\Controller\Security;
  5. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  6. use Symfony\Component\HttpFoundation\Response;
  7. use Symfony\Component\Routing\Annotation\Route;
  8. use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
  9. use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken;
  10. use Symfony\Component\EventDispatcher\EventDispatcherInterface;
  11. use Symfony\Component\HttpFoundation\Request;
  12. use Symfony\Component\HttpFoundation\Session\Session;
  13. use DateTimeImmutable;
  14. use Symfony\Component\Security\Http\Event\InteractiveLoginEvent;
  15. use Symfony\Component\HttpFoundation\Exception\BadRequestException;
  16. use App\Service\SwitchUserTokenService;
  20. class SecurityController extends AbstractController
  21. {
  22.     public function __construct(private SwitchUserTokenService $switchUserTokenService)
  23.     {
  24.         $this->switchUserTokenService = $switchUserTokenService;
  25.     }
  27.     
  28.     #[Route(path: '/login', name: 'app_login')]
  29.     public function login(AuthenticationUtils $authenticationUtils): Response
  30.     {
  31.         if ($this->getUser()) {
  32.             return $this->redirectToRoute('app_home');
  33.         }
  35.         // get the login error if there is one
  36.         $error = $authenticationUtils->getLastAuthenticationError();
  37.         // last username entered by the user
  38.         $lastUsername = $authenticationUtils->getLastUsername();
  40.         return $this->render('authentication/sign-in.html.twig', ['last_username' => $lastUsername, 'error' => $error]);
  41.     }
  43.     #[Route(path: '/logout', name: 'app_logout')]
  44.     public function logout(): void
  45.     {
  46.         throw new \LogicException('This method can be blank - it will be intercepted by the logout key on your firewall.');
  47.     }
  49.     #[Route('/switch-user', name: 'app_switch_user')]
  50.     public function switchUser(Request $request, EventDispatcherInterface $eventDispatcher, Session $session)
  51.     {
  52.         $token = $request->query->get('token');
  53.         $userId = $request->query->get('user_id');
  55.         $tokenObj = $this->switchUserTokenService->fetchToken($token, $userId);
  57.         if ($tokenObj and $tokenObj->getExpiredAt() > new DateTimeImmutable()) {
  58.             $authToken = new UsernamePasswordToken($tokenObj->getUser(), "main", $tokenObj->getUser()->getRoles());
  59.             $this->container->get("security.token_storage")->setToken($authToken);
  61.             $event = new InteractiveLoginEvent($request, $authToken);
  62.             $eventDispatcher->dispatch($event, "security.interactive_login");
  64.             $session->set('_switch_token', $token);
  65.         
  66.             return $this->redirectToRoute('app_home');
  67.         }
  69.         throw new BadRequestException('Jeton invalide !');
  70.     }
  71. }