src/Controller/SecurityController.php line 26

Open in your IDE?
  1. <?php
  3. namespace App\Controller;
  5. use App\Entity\User;
  6. use App\Form\ChangePasswordFormType;
  7. use Doctrine\ORM\EntityManagerInterface;
  8. use Endroid\QrCode\Builder\Builder;
  9. use Scheb\TwoFactorBundle\Security\TwoFactor\Provider\Totp\TotpAuthenticatorInterface;
  10. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  11. use Symfony\Component\HttpFoundation\Request;
  12. use Symfony\Component\HttpFoundation\Response;
  13. use Symfony\Component\HttpFoundation\Session\SessionInterface;
  14. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  15. use Symfony\Component\Routing\Annotation\Route;
  16. use Sensio\Bundle\FrameworkExtraBundle\Configuration\IsGranted;
  17. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  18. use Symfony\Component\Security\Core\User\UserInterface;
  19. use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
  21. class SecurityController extends AbstractController
  22. {
  23.     /**
  24.      * @Route("/login", name="app_login")
  25.      */
  26.     public function index(AuthenticationUtils $authenticationUtils, UserInterface $user = null): Response
  27.     {
  28.         if ($user) {
  29.             return $this->redirect('/');
  30.         }
  32.         $error = $authenticationUtils->getLastAuthenticationError();
  34.         $lastusername = $authenticationUtils->getLastUsername();
  36.         return $this->render('security/login.html.twig', [
  37.             'last_username' => $lastusername,
  38.             'error' => $error
  39.         ]);
  40.     }
  42.     /**
  43.      * @Route("/logout", name="app_logout")
  44.      * @return void
  45.      */
  46.     public function logout()
  47.     {
  49.     }
  51. //    /**
  52. //     * @return Response
  53. //     * @Route("/api/login", name="api_login")
  54. //     */
  55. //    public function apiLogin(UserInterface $user = null): Response
  56. //    {
  57. //        if (null === $user) {
  58. //            return $this->json([
  59. //                'message' => 'Missing credentials'
  60. //            ], Response::HTTP_UNAUTHORIZED);
  61. //        }
  62. //
  63. //        $token = uuid_create();
  64. //
  65. //        return $this->json([
  66. //            'user' => $user->getUserIdentifier(),
  67. //            'token' => $token
  68. //        ]);
  69. //    }
  71.     /**
  72.      * @Route("/changepassword", name="app_change_password")
  73.      * @return Response
  74.      */
  75.     public function changePassword(Request $request, UserPasswordHasherInterface $passwordHasher, EntityManagerInterface $entityManager)
  76.     {
  78.         /** @var User $user */
  79.         $user = $this->getUser();
  80. //        dd($user);
  82.         $form = $this->createForm(ChangePasswordFormType::class);
  84.         $form->handleRequest($request);
  85.         if ($request->isMethod('POST') && $form->isValid()) {
  86.             $data = $form->getData();
  87.             // TODO ezt át lehetne rakni az entityManagerbe
  88.             $user->setPassword($passwordHasher->hashPassword($user, $data['plainPassword']));
  89.             $entityManager->flush();
  91.             $this->addFlash('success', 'Sikeres jelszó változtatás!');
  92.             return $this->redirectToRoute('admin');
  93.         }
  95.         return $this->render('security/changepassword.html.twig', [
  96.             'form' => $form->createView()
  97.         ]);
  98.     }
  100.     /**
  101.      * @Route("/showqrcode", name="app_2fa_showcode")
  102.      * @IsGranted("IS_AUTHENTICATED_FULLY")
  103.      */
  104.     public function showQrCode(Request $request, TotpAuthenticatorInterface $totpAuthenticator, EntityManagerInterface $entityManager, TokenStorageInterface $tokenStorage, SessionInterface $session)
  105.     {
  106.         // this can't be happen...
  107.         $user = $this->getUser();
  108.         if (!$user->isTotpAuthenticationEnabled()) {
  109.             $user->setTotpSecret($totpAuthenticator->generateSecret());
  111.             $entityManager->flush();
  112.         }
  114.         if ($request->isMethod('POST')) {
  115.             if ($session->has('newTotp')) {
  116.                 $session->remove('newTotp');
  117.             }
  118.             $tokenStorage->setToken(null);
  119.             return $this->redirect('/');
  120.         }
  122.         return $this->render('security/show2fa.html.twig');
  123.     }
  125.     /**
  126.      * @param TotpAuthenticatorInterface $totpAuthenticator
  127.      * @return Response
  128.      * @Route("/showqrcode_png", name="app_2fa_png")
  129.      * @IsGranted("IS_AUTHENTICATED_FULLY")
  130.      */
  131.     public function authenticatorQrCOde(TotpAuthenticatorInterface $totpAuthenticator)
  132.     {
  133.         $qrCodeContent = $totpAuthenticator->getQRContent($this->getUser());
  134.         $result = Builder::create()
  135.             ->data($qrCodeContent)
  136.             ->build();
  138.         return new Response($result->getString(), 200, ['Content-Type' => 'image/png']);
  139.     }
  140. }