src/Security/AppAuth.php line 22

  1. <?php
  2. namespace App\Security;
  4. use App\Repository\UsuarioRepository;
  5. use AXS\Components\Utils\JWT;
  6. use DateInterval;
  7. use DateTime;
  8. use Symfony\Component\DependencyInjection\ParameterBag\ParameterBagInterface;
  9. use Symfony\Component\HttpFoundation\JsonResponse;
  10. use Symfony\Component\HttpFoundation\Request;
  11. use Symfony\Component\HttpFoundation\Response;
  12. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  13. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  14. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  15. use Symfony\Component\Security\Http\Authenticator\AbstractLoginFormAuthenticator;
  16. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\CsrfTokenBadge;
  17. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  18. use Symfony\Component\Security\Http\Authenticator\Passport\Credentials\PasswordCredentials;
  19. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  20. use Symfony\Contracts\Translation\TranslatorInterface;
  22. class AppAuth extends AbstractLoginFormAuthenticator {
  23.     public function __construct(
  24.         private UrlGeneratorInterface $urlGenerator, 
  25.         private UsuarioRepository $urepo, 
  26.         private TranslatorInterface $trans,
  27.         private ParameterBagInterface $parameters
  28.     ){}
  30.     protected function getLoginUrl(Request $request): string {
  31.         return $this->urlGenerator->generate("cPanel_login");
  32.     }
  34.     public function authenticate(Request $request): Passport {
  35.         $badge = new UserBadge($request->get("_username"), function(string $userIdentifier){
  36.             return $this->urepo->findOneBy(["username" => $userIdentifier]);
  37.         });
  38.         return new Passport($badge, new PasswordCredentials($request->get("_password")), [new CsrfTokenBadge("inicio_sesión", $request->get("_csrf_token"))]);
  39.     }
  41.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response {
  42.         $token = new JWT($this->parameters->get("api_secret"));
  43.         $expDate = new DateTime();
  44.         $expDate->add(new DateInterval("P3D"));
  45.         $token->setExp($expDate);
  46.         $token->setNbf(new DateTime());
  47.         $token->setIss("webLogin");
  48.         $request->getSession()->set("apiToken", $token->getToken());
  49.         return new JsonResponse(["success" => true, "action" => "redirect", "url" => $this->urlGenerator->generate("cPanel_index")]);
  50.     }
  52.     public function onAuthenticationFailure(Request $request, AuthenticationException $exception): Response {
  54.         return new JsonResponse(["success" => false, "errno" => $exception->getCode(), "error" => $this->trans->trans($exception->getMessage(), domain: "messages", locale: "es")], Response::HTTP_BAD_REQUEST);
  55.     }
  56. }