src/Controller/ChangePasswordController.php line 15

Open in your IDE?
  1. <?php
  3. namespace App\Controller;
  5. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  6. use Symfony\Component\Routing\Annotation\Route;
  7. use Symfony\Component\HttpFoundation\Request;
  8. use Symfony\Component\HttpFoundation\Response;
  9. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  10. use Doctrine\ORM\EntityManagerInterface;
  12. class ChangePasswordController extends AbstractController
  13. {
  14. #[Route('/change-password', name: 'change_password')]
  15. public function index(
  16. Request $request,
  17. UserPasswordHasherInterface $passwordHasher,
  18. EntityManagerInterface $em
  19. ): Response
  20. {
  22. if ($this->getUser() instanceof User) {
  23. $user = $this->getUser();
  25. $passwordChangedAt = $user->getPasswordChangedAt();
  27. if (!$passwordChangedAt || (new \DateTime() >= (clone $passwordChangedAt)->modify('+90 days'))) {
  28. $this->addFlash('warning', 'Votre mot de passe a expiré.');
  29. }
  30. }
  31. $user = $this->getUser();
  33. if (!$user) {
  34. return $this->redirectToRoute('login');
  35. }
  37. if ($request->isMethod('POST')) {
  39. $oldPassword = $request->request->get('old_password');
  40. $newPassword = $request->request->get('new_password');
  42. if (!$passwordHasher->isPasswordValid($user, $oldPassword)) {
  43. $this->addFlash('error', 'Ancien mot de passe incorrect');
  44. } else {
  46. $user->setPassword(
  47. $passwordHasher->hashPassword($user, $newPassword)
  48. );
  49. $user->setPasswordChangedAt(new \DateTime());
  51. // 🔥 nettoyage FOS
  52. //$user->setSalt(null);
  53. if (method_exists($user, 'setLegacyPassword')) {
  54. $user->setLegacyPassword(null);
  55. }
  57. $em->flush();
  59. $this->addFlash('success', 'Mot de passe modifié avec succès');
  60. return $this->redirectToRoute('login');
  61. }
  62. }
  64. return $this->render('security/change_password.html.twig');
  65. }
  66. }