<?php
namespace App\Security;
use App\Entity\SyncToken;
use Doctrine\ORM\EntityManagerInterface;
use Symfony\Component\HttpFoundation\RedirectResponse;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Security;
use Symfony\Component\Security\Http\Authenticator\AbstractLoginFormAuthenticator;
use Symfony\Component\Security\Http\Authenticator\Passport\Badge\CsrfTokenBadge;
use Symfony\Component\Security\Http\Authenticator\Passport\Badge\RememberMeBadge;
use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
use Symfony\Component\Security\Http\Authenticator\Passport\Credentials\PasswordCredentials;
use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
use Symfony\Component\Security\Http\Util\TargetPathTrait;
use Symfony\Component\HttpFoundation\Cookie;
class AppAuthenticator extends AbstractLoginFormAuthenticator
{
use TargetPathTrait;
public const LOGIN_ROUTE = 'app_login';
public function __construct(
private UrlGeneratorInterface $urlGenerator,
private EntityManagerInterface $em, // ← ajouter
) {}
public function authenticate(Request $request): Passport
{
$username = $request->request->get('username', '');
$request->getSession()->set(Security::LAST_USERNAME, $username);
return new Passport(
new UserBadge($username),
new PasswordCredentials($request->request->get('password', '')),
[
new CsrfTokenBadge('authenticate', $request->request->get('_csrf_token')),
new RememberMeBadge(),
]
);
}
public function onAuthenticationSuccess(
Request $request,
TokenInterface $token,
string $firewallName
): ?Response {
$user = $token->getUser();
// ── Générer SyncToken ─────────────────────────────────────────────
$ancienToken = $this->em->getRepository(SyncToken::class)
->findOneBy(['user' => $user]);
if ($ancienToken) {
$this->em->remove($ancienToken);
$this->em->flush();
}
$syncToken = new SyncToken();
$syncToken->setUser($user);
$this->em->persist($syncToken);
$this->em->flush();
// ── Redirection ───────────────────────────────────────────────────
if ($targetPath = $this->getTargetPath($request->getSession(), $firewallName)) {
$response = new RedirectResponse($targetPath);
} else {
$response = new RedirectResponse(
$this->urlGenerator->generate('mstope_intranet_index')
);
}
// ── Cookie sync_token ─────────────────────────────────────────────
$response->headers->setCookie(
Cookie::create('sync_token')
->withValue($syncToken->getToken())
->withExpires(new \DateTime('+90 days'))
->withPath('/')
->withSecure(true)
->withHttpOnly(false)
->withSameSite('strict')
);
return $response;
}
protected function getLoginUrl(Request $request): string
{
return $this->urlGenerator->generate(self::LOGIN_ROUTE);
}
}