90 lines
2.4 KiB
PHP
90 lines
2.4 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
namespace RetailCrm\ServiceBundle\Security;
|
||
|
|
|
||
|
|
use RetailCrm\ServiceBundle\Models\Error;
|
||
|
|
use RetailCrm\ServiceBundle\Response\ErrorJsonResponseFactory;
|
||
|
|
use Symfony\Component\HttpFoundation\Request;
|
||
|
|
use Symfony\Component\HttpFoundation\Response;
|
||
|
|
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
|
||
|
|
use Symfony\Component\Security\Core\Exception\AuthenticationException;
|
||
|
|
use Symfony\Component\Security\Core\User\UserInterface;
|
||
|
|
use Symfony\Component\Security\Core\User\UserProviderInterface;
|
||
|
|
use Symfony\Component\Security\Guard\AbstractGuardAuthenticator;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Class AbstractClientAuthenticator
|
||
|
|
*
|
||
|
|
* @package RetailCrm\ServiceBundle\Security
|
||
|
|
*/
|
||
|
|
abstract class AbstractClientAuthenticator extends AbstractGuardAuthenticator
|
||
|
|
{
|
||
|
|
public const AUTH_FIELD = 'clientId';
|
||
|
|
|
||
|
|
private $errorResponseFactory;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* AbstractClientAuthenticator constructor.
|
||
|
|
*
|
||
|
|
* @param ErrorJsonResponseFactory $errorResponseFactory
|
||
|
|
*/
|
||
|
|
public function __construct(ErrorJsonResponseFactory $errorResponseFactory)
|
||
|
|
{
|
||
|
|
$this->errorResponseFactory = $errorResponseFactory;
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* {@inheritdoc }
|
||
|
|
*/
|
||
|
|
public function start(Request $request, AuthenticationException $authException = null): Response
|
||
|
|
{
|
||
|
|
$error = new Error();
|
||
|
|
$error->message = 'Authentication required';
|
||
|
|
|
||
|
|
return $this->errorResponseFactory->create($error,Response::HTTP_UNAUTHORIZED);
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* {@inheritdoc }
|
||
|
|
*/
|
||
|
|
public function getCredentials(Request $request): string
|
||
|
|
{
|
||
|
|
return $request->get(static::AUTH_FIELD);
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* {@inheritdoc }
|
||
|
|
*/
|
||
|
|
public function getUser($credentials, UserProviderInterface $userProvider): ?UserInterface
|
||
|
|
{
|
||
|
|
return $userProvider->loadUserByUsername($credentials);
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* {@inheritdoc }
|
||
|
|
*/
|
||
|
|
public function checkCredentials($credentials, UserInterface $user): bool
|
||
|
|
{
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* {@inheritdoc }
|
||
|
|
*/
|
||
|
|
public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
|
||
|
|
{
|
||
|
|
$error = new Error();
|
||
|
|
$error->message = $exception->getMessageKey();
|
||
|
|
|
||
|
|
return $this->errorResponseFactory->create($error,Response::HTTP_FORBIDDEN);
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* {@inheritdoc }
|
||
|
|
*/
|
||
|
|
public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $providerKey): ?Response
|
||
|
|
{
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
}
|