<?php
namespace App\Security;
use App\Repository\UserRepository;
use Symfony\Component\HttpFoundation\RedirectResponse;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\Routing\RouterInterface;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;
use Symfony\Component\Security\Core\Exception\InvalidCsrfTokenException;
use Symfony\Component\Security\Core\Security;
use Symfony\Component\Security\Core\User\UserInterface;
use Symfony\Component\Security\Core\User\UserProviderInterface;
use Symfony\Component\Security\Csrf\CsrfToken;
use Symfony\Component\Security\Csrf\CsrfTokenManagerInterface;
use Symfony\Component\Security\Guard\Authenticator\AbstractFormLoginAuthenticator;
use Symfony\Component\Security\Http\Util\TargetPathTrait;
class LoginFormAuthenticator extends AbstractFormLoginAuthenticator
{
use TargetPathTrait;
private $userRepository;
private $router;
private $csrfTokenManager;
private $passwordEncoder;
private $login_route;
public function __construct(UserRepository $userRepository,RouterInterface $router,UserPasswordEncoderInterface $passwordEncoder,CsrfTokenManagerInterface $csrfTokenManager)
{
$this->userRepository = $userRepository;
$this->router = $router;
$this->csrfTokenManager = $csrfTokenManager;
$this->passwordEncoder = $passwordEncoder;
}
public function supports(Request $request)
{
$this->login_route = $request->attributes->get('_route');
return ($request->attributes->get('_route')==='app_login')
&& $request->isMethod('POST');
}
public function getCredentials(Request $request)
{
$credentials = [
'username'=>$request->request->get('username'),
'password'=>$request->request->get('password'),
'csrf_token'=>$request->request->get('_csrf_token'),
];
$request->getSession()->set(
Security::LAST_USERNAME,
$credentials["username"]
);
return $credentials;
}
public function getUser($credentials, UserProviderInterface $userProvider)
{
$token = new CsrfToken('authenticate',$credentials["csrf_token"]);
if (!$this->csrfTokenManager->isTokenValid($token)){
throw new InvalidCsrfTokenException();
}
return $this->userRepository->findOneByUsernameOrEmail($credentials["username"]);
}
public function checkCredentials($credentials, UserInterface $user)
{
$resultado = $this->passwordEncoder->isPasswordValid($user,$credentials["password"]);
if(!$resultado)
{
$contador = $user->getContadorLoginFallido() ?? 0;
$contador = $contador + 1;
$user->setContadorLoginFallido($contador);
$user->setFechaLoginFallido(new \DateTime('now'));
if($contador >= 3)
{
$user->setValid(FALSE);
$user->setFechaBloqueoClave(new \DateTime('now'));
}
$this->userRepository->saveUser($user);
}
return $resultado;
}
public function onAuthenticationSuccess(Request $request, TokenInterface $token, $providerKey)
{
$user = $token->getUser();
$user->setFechaUltimoLogin(new \DateTime('now'));
$user->setContadorLoginFallido(0);
$user->setFechaLoginFallido(NULL);
$this->userRepository->saveUser($user);
/*if ($targetPath = $this->getTargetPath($request->getSession(),$providerKey)){
return new RedirectResponse($targetPath);
}*/
return new RedirectResponse($this->router->generate("app_admin_index"));
}
protected function getLoginUrl()
{
return $this->router->generate("app_login");
}
}