vendor/nellapp/sdk-bundle/src/Sync/Security/CoreAuthenticator.php line 57

Open in your IDE?
  1. <?php
  3. /*
  4.  * This file is part of the nellapp-core package.
  5.  *
  6.  * (c) Benjamin Georgeault
  7.  *
  8.  * For the full copyright and license information, please view the LICENSE
  9.  * file that was distributed with this source code.
  10.  */
  12. namespace Nellapp\Bundle\SDKBundle\Sync\Security;
  14. use Nellapp\Bundle\SDKBundle\Sync\Security\User\Core;
  15. use Symfony\Component\HttpFoundation\JsonResponse;
  16. use Symfony\Component\HttpFoundation\Request;
  17. use Symfony\Component\HttpFoundation\Response;
  18. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  19. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  20. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  21. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  22. use Symfony\Component\Security\Http\Authenticator\AbstractAuthenticator;
  23. use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
  25. /**
  26.  * Class CoreAuthenticator
  27.  *
  28.  * @author Benjamin Georgeault
  29.  * @method TokenInterface createToken(Passport $passport, string $firewallName)
  30.  */
  31. class CoreAuthenticator extends AbstractAuthenticator
  32. {
  33.     public function __construct(
  34.         private string $syncSecret,
  35.     ) {}
  37.     public function supports(Request $request): bool
  38.     {
  39.         return preg_match('/^\s*Core\s+[a-zA-Z0-9]+/i', $request->headers->get('Authorization', ''));
  40.     }
  42.     public function authenticate(Request $request): Passport
  43.     {
  44.         if (null === $authorization = $request->headers->get('authorization')) {
  45.             throw new AuthenticationException('Invalid request parameters');
  46.         }
  48.         $valid = preg_match('/^Core (.+)/', $authorization, $matches);
  50.         $credentials = $this->getCredentials($request);
  52.         $validCredentials = $this->checkCredentials($credentials);
  53.         if (!$valid || count($matches) !== 2 || !$validCredentials) {
  54.             throw new AuthenticationException('Invalid request parameters');
  55.         }
  57.         return new SelfValidatingPassport(new UserBadge($matches[1], function(string $token) use ($credentials) {
  58.             return $this->getUser($credentials);
  59.         }));
  60.     }
  62.     public function getCredentials(Request $request): ?string
  63.     {
  64.         return trim(preg_replace('/^\s*Core\s+/', '', $request->headers->get('Authorization')));
  65.     }
  67.     public function getUser($credentials): ?Core
  68.     {
  69.         if (null === $credentials) {
  70.             return null;
  71.         }
  73.         return new Core();
  74.     }
  76.     public function checkCredentials($credentials): bool
  77.     {
  78.         return $credentials === $this->syncSecret;
  79.     }
  81.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, $firewallName): ?Response
  82.     {
  83.         return null;
  84.     }
  86.     public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
  87.     {
  88.         return new JsonResponse('', Response::HTTP_UNAUTHORIZED);
  89.     }
  91. }