Symfony Profiler

<?php
namespace App\Security;
use App\Entity\User;
use Doctrine\ORM\EntityManagerInterface;
use Symfony\Component\HttpFoundation\RedirectResponse;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;
use Symfony\Component\Security\Core\Exception\CustomUserMessageAuthenticationException;
use Symfony\Component\Security\Core\Exception\InvalidCsrfTokenException;
use Symfony\Component\Security\Core\Security;
use Symfony\Component\Security\Core\User\UserInterface;
use Symfony\Component\Security\Core\User\UserProviderInterface;
use Symfony\Component\Security\Csrf\CsrfToken;
use Symfony\Component\Security\Csrf\CsrfTokenManagerInterface;
use Symfony\Component\Security\Guard\Authenticator\AbstractFormLoginAuthenticator;
use Symfony\Component\Security\Guard\PasswordAuthenticatedInterface;
use Symfony\Component\Security\Http\Util\TargetPathTrait;
use Symfony\Component\HttpFoundation\Session\SessionInterface;
class AppAuthenticator extends AbstractFormLoginAuthenticator implements PasswordAuthenticatedInterface
{
use TargetPathTrait;
public const LOGIN_ROUTE = 'app_login';
private $entityManager;
private $urlGenerator;
private $csrfTokenManager;
private $passwordEncoder;
private $session;
public function __construct(EntityManagerInterface $entityManager, UrlGeneratorInterface $urlGenerator, CsrfTokenManagerInterface $csrfTokenManager, UserPasswordEncoderInterface $passwordEncoder, SessionInterface $session)
{
$this->entityManager = $entityManager;
$this->urlGenerator = $urlGenerator;
$this->csrfTokenManager = $csrfTokenManager;
$this->passwordEncoder = $passwordEncoder;
$this->session = $session;
}
public function supports(Request $request)
{
return self::LOGIN_ROUTE === $request->attributes->get('_route')
&& $request->isMethod('POST');
}
public function getCredentials(Request $request)
{
$credentials = [
'email' => $request->request->get('email'),
'password' => $request->request->get('password'),
'csrf_token' => $request->request->get('_csrf_token')
];
$request->getSession()->set(Security::LAST_USERNAME, $credentials['email']);
return $credentials;
}
public function getUser($credentials, UserProviderInterface $userProvider)
{
$token = new CsrfToken('authenticate', $credentials['csrf_token']);
if (!$this->csrfTokenManager->isTokenValid($token)) {
throw new InvalidCsrfTokenException();
}
$user = $this->entityManager->getRepository(User::class)->findOneBy(['email' => $credentials['email']]);
if (!$user) {
// fail authentication with a custom error
throw new CustomUserMessageAuthenticationException('Email could not be found.');
}
return $user;
}
public function checkCredentials($credentials, UserInterface $user)
{
return $this->passwordEncoder->isPasswordValid($user, $credentials['password']);
}
/**
* Used to upgrade (rehash) the user's password automatically over time.
*/
public function getPassword($credentials): ?string
{
return $credentials['password'];
}
public function onAuthenticationSuccess(Request $request, TokenInterface $token, $providerKey)
{
//START USERDATA
$userData = [
'id' => $token->getUser()->getId(),
'email' => $token->getUser()->getEmail(),
'first_name' => $token->getUser()->getFirstName(),
'last_name' => $token->getUser()->getLastName(),
'role_id' => $token->getUser()->getUserRole()->getId(),
'organization_id' => $token->getUser()->getOrganization()->getOrganizationId()
];
$this->session->set($token->getUser()->getEmail(), $userData);
// END USERDATA
//START PERMISSIONS
$userPerms = $this->entityManager->getRepository(User::class)->getPermissionsByRole($token->getUser()->getUserRole()->getId());
$permsList = [];
$defaultModule = "";
foreach($userPerms as $perms)
{
if($perms['main_module'] == 1)
{
$defaultModule = $perms['url_access'];
}
$permsList[] = $perms;
}
$this->session->set($token->getUser()->getEmail()."_perms", $permsList);
//END PERMISSIONS
//START MENU
$userModules = $this->entityManager->getRepository(User::class)->getModulesByRole($token->getUser()->getUserRole()->getId());
$moduleList = [];
foreach($userModules as $module)
{
$children = $this->entityManager->getRepository(User::class)->getModulesChildrenByParent($module['module_id']);
$childrenList = [];
foreach($children as $child)
{
$childrenList[] = $child;
}
$merged = array_merge($module, ['children'=>$childrenList]);
$moduleList[] = $merged;
}
$this->session->set($token->getUser()->getEmail()."_menu", $moduleList);
//END MENU
if ($targetPath = $this->getTargetPath($request->getSession(), $providerKey)) {
return new RedirectResponse($targetPath);
}
if($defaultModule == "")
{
throw new \Exception('Se debe agregar un módulo principal para este rol');
}
// For example : return new RedirectResponse($this->urlGenerator->generate('some_route'));
return new RedirectResponse($this->urlGenerator->generate($defaultModule));
//throw new \Exception('TODO: provide a valid redirect inside '.__FILE__);
}
protected function getLoginUrl()
{
return $this->urlGenerator->generate(self::LOGIN_ROUTE);
}
}

src/Security/AppAuthenticator.php line 65