src/Security/AppAuthenticator.php line 21

  1. <?php
  3. namespace App\Security;
  5. use Symfony\Component\HttpFoundation\RedirectResponse;
  6. use Symfony\Component\HttpFoundation\Request;
  7. use Symfony\Component\HttpFoundation\Response;
  8. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  9. use Symfony\Component\Routing\RouterInterface;
  10. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  11. use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
  12. use Symfony\Component\Security\Core\Security;
  13. use Symfony\Component\Security\Http\Authenticator\AbstractLoginFormAuthenticator;
  14. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  15. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\CsrfTokenBadge;
  16. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\RememberMeBadge;
  17. use Symfony\Component\Security\Http\Authenticator\Passport\Credentials\PasswordCredentials;
  18. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  19. use Symfony\Component\Security\Http\Util\TargetPathTrait;
  21. class AppAuthenticator extends AbstractLoginFormAuthenticator
  22. {
  23.     use TargetPathTrait;
  25.     public const LOGIN_ROUTE = 'app_login';
  27.     private UrlGeneratorInterface $urlGenerator;
  28.     private AuthorizationCheckerInterface $authorization;
  29.     private RouterInterface $router;
  31.     public function __construct(
  32.         UrlGeneratorInterface $urlGenerator,
  33.         AuthorizationCheckerInterface $authorization,
  34.         RouterInterface $router
  35.     ) {
  36.         $this->urlGenerator = $urlGenerator;
  37.         $this->authorization = $authorization;
  38.         $this->router = $router;
  39.     }
  41.     public function supports(Request $request): bool
  42.     {
  43.         return $request->getPathInfo() === '/connexion' && $request->isMethod('POST');
  44.     }
  46.     public function authenticate(Request $request): Passport
  47.     {
  48.         $email = $request->request->get('email', '');
  49.         $password = $request->request->get('password', '');
  50.         $csrfToken = $request->request->get('_csrf_token');
  52.         $request->getSession()->set(Security::LAST_USERNAME, $email);
  54.         return new Passport(
  55.             new UserBadge($email),
  56.             new PasswordCredentials($password),
  57.             [
  58.                 new CsrfTokenBadge('authenticate', $csrfToken),
  59.                 new RememberMeBadge(),
  60.             ]
  61.         );
  62.     }
  64.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
  65.     {
  66.         // 1. Vérifier le target_path envoyé par le formulaire
  67.         $targetPathPost = $request->request->get('_target_path');
  68.         if ($targetPathPost) {
  69.             return new RedirectResponse(urldecode($targetPathPost));
  70.         }
  72.         // 2. Vérifier redirect dans l'URL
  73.         $redirect = $request->query->get('redirect');
  74.         if ($redirect) {
  75.             return new RedirectResponse($redirect);
  76.         }
  78.         // 3. Vérifier targetPath stocké dans la session
  79.         if ($targetPath = $this->getTargetPath($request->getSession(), $firewallName)) {
  80.             return new RedirectResponse($targetPath);
  81.         }
  83.         // 4. Redirection selon rôle
  84.         if ($this->authorization->isGranted('ROLE_ADMIN')) {
  85.             return new RedirectResponse($this->router->generate('app_dashboard'));
  86.         }
  88.         if ($this->authorization->isGranted('ROLE_ENT') || $this->authorization->isGranted('ROLE_JURY')) {
  89.             return new RedirectResponse($this->router->generate('app_dashboard'));
  90.         }
  92.         if ($this->authorization->isGranted('ROLE_CANDIDAT')) {
  93.             return new RedirectResponse($this->router->generate('app_candidature_index'));
  94.         }
  96.         return new RedirectResponse($this->router->generate('app_home'));
  97.     }
  99.     protected function getLoginUrl(Request $request): string
  100.     {
  101.         $redirect = $request->query->get('redirect');
  103.         if ($redirect) {
  104.             return $this->urlGenerator->generate(self::LOGIN_ROUTE, ['redirect' => $redirect]);
  105.         }
  107.         return $this->urlGenerator->generate(self::LOGIN_ROUTE);
  108.     }
  109. }