src/Security/ControlPanelAuthenticator.php line 28

Open in your IDE?
  1. <?php
  3. namespace App\Security;
  5. use App\Application\Service\Factory\JsonApiFactory;
  6. use App\Entity\System\Customer;
  7. use App\EventListener\ControlpanelAccessControlListener;
  8. use App\Model\Controlpanel\Response\JsonApiResponse;
  9. use Symfony\Component\HttpFoundation\Request;
  10. use Symfony\Component\HttpFoundation\Response;
  11. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  12. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  13. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  14. use Symfony\Component\Security\Http\Authenticator\AbstractAuthenticator;
  15. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  17. class ControlPanelAuthenticator extends AbstractAuthenticator
  18. {
  19.     protected TokenStorageInterface $tokenStorage;
  21.     public function __construct(TokenStorageInterface $tokenStorage)
  22.     {
  23.         $this->tokenStorage = $tokenStorage;
  24.     }
  26.     public function authenticate(Request $request): Passport
  27.     {
  28.         throw new AuthenticationException('No user found');
  29.     }
  31.     public function supports(Request $request): bool
  32.     {
  33.         $requestUri = $request->getRequestUri();
  34.         $token = $this->tokenStorage->getToken();
  36.         return \strpos($requestUri, ControlpanelAccessControlListener::CONTROLPANEL_URI) !== false
  37.             && !($token && $token->getUser() instanceof Customer);
  38.     }
  40.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
  41.     {
  42.         return null;
  43.     }
  45.     public function onAuthenticationFailure(Request $request, AuthenticationException $exception): Response
  46.     {
  47.         $jsonApiDocument = JsonApiFactory::createUnauthorizedResponse();
  49.         return new JsonApiResponse($jsonApiDocument, Response::HTTP_UNAUTHORIZED, ['Content-Type' => 'application/vnd.api+json']);
  50.     }
  51. }