src/Controller/SecurityController.php line 24

Open in your IDE?
  1. <?php
  3. namespace App\Controller;
  5. use App\Form\PasswordUpdateType;
  6. use App\Model\UserManager;
  7. use Sensio\Bundle\FrameworkExtraBundle\Configuration\IsGranted;
  8. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  9. use Symfony\Component\HttpFoundation\Request;
  10. use Symfony\Component\HttpFoundation\Response;
  11. use Symfony\Component\Routing\Annotation\Route;
  12. use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;
  13. use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
  15. class SecurityController extends AbstractController
  16. {
  17.     /**
  18.      * @Route("/login", name="app_login")
  19.      *
  20.      * @param AuthenticationUtils $authenticationUtils
  21.      *
  22.      * @return Response
  23.      */
  24.     public function login(AuthenticationUtils $authenticationUtils): Response
  25.     {
  26.         if ($this->getUser()) {
  27.             return $this->redirectToRoute('home');
  28.         }
  30.         $error = $authenticationUtils->getLastAuthenticationError();
  31.         $lastUsername = $authenticationUtils->getLastUsername();
  33.         return $this->render('security/login.html.twig', [
  34.             'error' => $error,
  35.             'last_username' => $lastUsername,
  36.         ]);
  37.     }
  39.     /**
  40.      * @Route("/user/change-password", name="user_change_password")
  41.      *
  42.      * @IsGranted("ROLE_CHANGE_PASSWORD")
  43.      *
  44.      * @param Request $request
  45.      * @param UserPasswordEncoderInterface $encoder
  46.      * @param UserManager $manager
  47.      *
  48.      * @return Response
  49.      */
  50.     public function changePassword(Request $request, UserPasswordEncoderInterface $encoder, UserManager $manager)
  51.     {
  52.         $user = $this->getUser();
  53.         $form = $this->createForm(PasswordUpdateType::class);
  55.         $form->handleRequest($request);
  57.         if ($form->isSubmitted() && $form->isValid()) {
  58.             $oldPassword = $form->get('oldPassword')->getData();
  59.             $newPassword = $form->get('plainPassword')->getData();
  61.             if ($encoder->isPasswordValid($user, $oldPassword) === false) {
  62.                 $this->addFlash('error', 'Your old password is not correct.');
  63.                 return $this->redirectToRoute('user_change_password');
  64.             }
  66.             if ($oldPassword === $newPassword) {
  67.                 $this->addFlash('error', 'Your new password cannot be the same as your old password.');
  68.                 return $this->redirectToRoute('user_change_password');
  69.             }
  71.             $manager->updatePassword($user, $encoder->encodePassword($user, $newPassword));
  73.             $this->addFlash('success', 'Password updated successfully');
  75.             return $this->redirectToRoute('user_change_password');
  76.         }
  78.         return $this->render('security/change_password.html.twig', [
  79.             'form' => $form->createView(),
  80.             'policies' => $this->getParameter('app.password.policies')
  81.         ]);
  82.     }
  84.     /**
  85.      * @Route("/logout", name="app_logout")
  86.      */
  87.     public function logout()
  88.     {
  89.         return $this->redirectToRoute('app_login');
  90.     }
  91. }