src/Security/Http/Authenticator/WebAuthenticator.php line 47

Open in your IDE?
  1. <?php
  3. /**
  4.  * Copyright (c) 2011-present Qualiteam software Ltd. All rights reserved.
  5.  * See https://www.x-cart.com/license-agreement.html for license details.
  6.  */
  8. namespace XCart\Security\Http\Authenticator;
  10. use Symfony\Component\HttpFoundation\RedirectResponse;
  11. use Symfony\Component\HttpFoundation\Request;
  12. use Symfony\Component\HttpFoundation\Response;
  13. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  14. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  15. use Symfony\Component\Security\Core\Exception\UserNotFoundException;
  16. use Symfony\Component\Security\Core\User\UserInterface;
  17. use Symfony\Component\Security\Http\Authenticator\AbstractAuthenticator;
  18. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  19. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  20. use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
  21. use XCart\Security\DTO\WebUser;
  22. use XLite\Core\Auth;
  23. use XLite\Core\Database;
  24. use XLite\Model\Profile;
  26. final class WebAuthenticator extends AbstractAuthenticator
  27. {
  28.     private \XLite\Model\Repo\Profile $profileRepository;
  30.     public function __construct()
  31.     {
  32.         $this->profileRepository = Database::getRepo(Profile::class);
  33.     }
  35.     public function supports(Request $request): bool
  36.     {
  37.         return $request->query->get('target') !== 'login';
  38.     }
  40.     public function authenticate(Request $request): Passport
  41.     {
  42.         $user = Auth::getInstance()->getProfile() ?? new Profile();
  44.         return new SelfValidatingPassport(
  45.             new UserBadge(
  46.                 $user->getLogin(),
  47.                 function (string $userIdentifier): UserInterface {
  48.                     $profile = $this->profileRepository->findByLogin($userIdentifier);
  49.                     if ($profile === null) {
  50.                         $e = new UserNotFoundException(sprintf('User with "%s" not found.', $userIdentifier));
  51.                         $e->setUserIdentifier($userIdentifier);
  53.                         throw $e;
  54.                     }
  56.                     return new WebUser($profile);
  57.                 }
  58.             )
  59.         );
  60.     }
  62.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
  63.     {
  64.         return null;
  65.     }
  67.     public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
  68.     {
  69.         return $request->getRequestUri() === '/admin/' && $request->getMethod() !== Request::METHOD_POST
  70.             ? new RedirectResponse(
  71.                 \XLite::getInstance()->getShopURL('admin/?target=login')
  72.             )
  73.             : null;
  74.     }
  75. }