src/Security/ApiTokenAuthenticator.php line 68

Open in your IDE?
  1. <?php
  3. namespace EADPlataforma\Security;
  5. use Doctrine\ORM\EntityManagerInterface;
  6. use Symfony\Component\HttpFoundation\JsonResponse;
  7. use Symfony\Component\HttpFoundation\Request;
  8. use Symfony\Component\HttpFoundation\Response;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  11. use Symfony\Component\Security\Core\User\UserInterface;
  12. use Symfony\Component\Security\Core\User\UserProviderInterface;
  13. use Symfony\Component\Security\Guard\AbstractGuardAuthenticator;
  14. use EADPlataforma\Entity\User;
  15. use EADPlataforma\Services\ConfigurationService;
  16. use EADPlataforma\Services\GeneralService;
  17. use EADPlataforma\Enum\ErrorEnum;
  19. class ApiTokenAuthenticator extends AbstractGuardAuthenticator {
  21.     /**
  22.      * @var EntityManagerInterface
  23.      */
  24.     private $em;
  26.     /**
  27.      * @var ConfigurationService
  28.      */
  29.     private $configurationService;
  31.     /**
  32.      * @param ConfigurationService $configurationService
  33.      */
  34.     public function __construct(ConfigurationService $configurationService, GeneralService $generalService) {
  35.         $this->configurationService = $configurationService;
  36.         $this->em = $generalService->getService('SchoolEntityManager');
  37.     }
  39.     /**
  40.      * Called on every request to decide if this authenticator should be
  41.      * used for the request. Returning false will cause this authenticator
  42.      * to be skipped.
  43.      */
  44.     public function supports(Request $request) {
  45.         return true;
  46.     }
  48.     /**
  49.      * Called on every request. Return whatever credentials you want to
  50.      * be passed to getUser() as $credentials.
  51.      */
  52.     public function getCredentials(Request $request) {
  53.         return [
  54.             "token" => $request->headers->get('X-AUTH-TOKEN'),
  55.         ];
  56.     }
  58.     public function getUser($credentials, UserProviderInterface $userProvider) {
  59.         $apiToken = $credentials['token'];
  61.         if (null === $apiToken) {
  62.             throw new AuthenticationException("Token not found");
  63.         }
  65.         $apiTokenClient = $this->configurationService->get('ead_api_token');
  66.         
  67.         if($apiToken != $apiTokenClient){
  68.             throw new AuthenticationException("Invalid Token");
  69.         }
  71.         $user = $this->em->getRepository(User::class)->find(1);
  72.         
  73.         if(!$user){
  74.             throw new AuthenticationException("User Session not found");
  75.         }
  77.         // if a User object, checkCredentials() is called
  78.         return $user;
  79.     }
  81.     public function checkCredentials($credentials, UserInterface $user) {
  82.         // check credentials - e.g. make sure the password is valid
  83.         // no credential check is needed in this case
  84.         // return true to cause authentication success
  85.         return true;
  86.     }
  88.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, $providerKey) {
  89.         // on success, let the request continue
  90.         return null;
  91.     }
  93.     public function onAuthenticationFailure(Request $request, AuthenticationException $exception) {
  94.         $data = [
  95.             "http_status" => 401,
  96.             "message" => "Token not found"
  97.         ];
  99.         return new JsonResponse($data, Response::HTTP_UNAUTHORIZED);
  100.     }
  102.     /**
  103.      * Called when authentication is needed, but it's not sent
  104.      */
  105.     public function start(Request $request, AuthenticationException $authException = null) {
  106.         $data = [
  107.             "data" => [ "message" => "Authentication Required" ],
  108.             "error" => ErrorEnum::AUTH_INVALID
  109.         ];
  111.         return new JsonResponse($data, Response::HTTP_UNAUTHORIZED);
  112.     }
  114.     public function supportsRememberMe() {
  115.         return false;
  116.     }
  118. }