src/Subscriber/AdminAuthenticationSubscriber.php line 45

Open in your IDE?
  1. <?php
  3. namespace App\Subscriber;
  5. use App\Entity\Local\AdminUser;
  6. use Oz\ApiNvl\Model\User;
  7. use Doctrine\ORM\EntityManagerInterface;
  8. use League\OAuth2\Client\Provider\Exception\IdentityProviderException;
  9. use League\OAuth2\Client\Provider\GenericProvider;
  10. use LogicException;
  11. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  12. use Symfony\Component\Security\Http\Event\InteractiveLoginEvent;
  13. use Symfony\Component\Security\Http\SecurityEvents;
  15. class AdminAuthenticationSubscriber implements EventSubscriberInterface
  16. {
  17.     /**
  18.      * @var EntityManagerInterface
  19.      */
  20.     private $em;
  23.     /**
  24.      * @param EntityManagerInterface $em
  25.      */
  26.     public function __construct(EntityManagerInterface $em)
  27.     {
  28.         $this->em = $em;
  29.     }
  31.     /**
  32.      * @return array[]
  33.      */
  34.     public static function getSubscribedEvents(): array
  35.     {
  36.         return [
  37.             SecurityEvents::INTERACTIVE_LOGIN => ['interactiveLogin', 15],
  38.         ];
  39.     }
  41.     /**
  42.      * @param InteractiveLoginEvent $interactiveLoginEvent
  43.      *
  44.      */
  45.     public function interactiveLogin(InteractiveLoginEvent $interactiveLoginEvent): void
  46.     {
  47.         /** @var User $user */
  48.         $user = $interactiveLoginEvent->getAuthenticationToken()->getUser();
  50.         if (!$user instanceof AdminUser) {
  51.             return;
  52.         }
  53.         $this->updateAdminUser($user);
  55.     }
  57.     /**
  58.      * @param AdminUser $user
  59.      *
  60.      * @return void
  61.      */
  62.     private function updateAdminUser(AdminUser $user)
  63.     {
  64.         $params = [
  65.             'clientId'                => $_ENV['ADMIN_TOKEN_CLIENT_ID'],
  66.             'clientSecret'            => $_ENV['ADMIN_TOKEN_CLIENT_SECRET'],
  67.             'urlAuthorize'            => $_ENV['URL_MON_COMPTE'] . '/provider/connect/authorize',
  68.             'urlAccessToken'          => $_ENV['URL_MON_COMPTE'] . '/provider/connect/token',
  69.             'urlResourceOwnerDetails' => $_ENV['URL_MON_COMPTE'] . '/provider/connect/resource',
  70.         ];
  72.         $provider = new GenericProvider($params);
  74.         try {
  75.             $accessToken = $provider->getAccessToken('client_credentials', [
  76.                 'scope' => 'api.dynamic.admin.full',
  77.             ]);
  78.         }
  79.         catch (IdentityProviderException $e) {
  80.             throw new LogicException($e->getMessage());
  81.         }
  83.         $user->setOauthToken($accessToken);
  84.         $this->em->persist($user);
  85.         $this->em->flush();
  86.     }
  87. }