<?php/** * Created by PhpStorm. * User: samuelp * Date: 1/21/18 * Time: 2:10 PM */namespace App\Api\Authentication;use App\Entity\User;use Doctrine\ORM\EntityManagerInterface;use Lexik\Bundle\JWTAuthenticationBundle\Encoder\JWTEncoderInterface;use Lexik\Bundle\JWTAuthenticationBundle\TokenExtractor\AuthorizationHeaderTokenExtractor;use Symfony\Component\HttpFoundation\JsonResponse;use Symfony\Component\HttpFoundation\Request;use Symfony\Component\HttpFoundation\Response;use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;use Symfony\Component\Security\Core\Exception\AuthenticationException;use Symfony\Component\Security\Core\Exception\CustomUserMessageAuthenticationException;use Symfony\Component\Security\Core\User\UserInterface;use Symfony\Component\Security\Core\User\UserProviderInterface;use Symfony\Component\Security\Guard\AbstractGuardAuthenticator;class Authenticator extends AbstractGuardAuthenticator { /** * @var JWTEncoderInterface */ private $JWTEncoder; /** * @var EntityManagerInterface */ private $entityManager; public function __construct(JWTEncoderInterface $JWTEncoder, EntityManagerInterface $entityManager) { $this->JWTEncoder = $JWTEncoder; $this->entityManager = $entityManager; } /** * Get the authentication credentials from the request and return them * as any type (e.g. an associate array). * * Whatever value you return here will be passed to getUser() and checkCredentials() * * For example, for a form login, you might: * * return array( * 'username' => $request->request->get('_username'), * 'password' => $request->request->get('_password'), * ); * * Or for an API token that's on a header, you might use: * * return array('api_key' => $request->headers->get('X-API-TOKEN')); * * @param Request $request * * @return mixed Any non-null value * * @throws \UnexpectedValueException If null is returned */ public function getCredentials(Request $request) {// dump($request);die; $extractor = new AuthorizationHeaderTokenExtractor( 'Bearer', 'Auth' ); $token = $extractor->extract($request); if(!$token){ return ; } return $token; } /** * Return a UserInterface object based on the credentials. * * The *credentials* are the return value from getCredentials() * * You may throw an AuthenticationException if you wish. If you return * null, then a UsernameNotFoundException is thrown for you. * * @param mixed $credentials * @param UserProviderInterface $userProvider * * @throws AuthenticationException * * @return UserInterface|null */ public function getUser($credentials, UserProviderInterface $userProvider) { $data = null; try { $data = $this->JWTEncoder->decode($credentials); } catch (\Exception $e) { throw new \Symfony\Component\Security\Core\Exception\BadCredentialsException($e->getMessage(), 0, $e); } if($data === false){ /*$response = [ 'message' => "Invalid Token" ];*/ throw new CustomUserMessageAuthenticationException("Invalid Token"); } $id = $data['user_id']; return $this->entityManager->getRepository(User::class)->findOneBy([ 'id' => $id ]); } /** * Returns true if the credentials are valid. * * If any value other than true is returned, authentication will * fail. You may also throw an AuthenticationException if you wish * to cause authentication to fail. * * The *credentials* are the return value from getCredentials() * * @param mixed $credentials * @param UserInterface $user * * @return bool * * @throws AuthenticationException */ public function checkCredentials($credentials, UserInterface $user) { // TODO: Implement checkCredentials() method. return true; } /** * Called when authentication executed, but failed (e.g. wrong username password). * * This should return the Response sent back to the user, like a * RedirectResponse to the login page or a 403 response. * * If you return null, the request will continue, but the user will * not be authenticated. This is probably not what you want to do. * * @param Request $request * @param AuthenticationException $exception * * @return Response|null */ public function onAuthenticationFailure(Request $request, AuthenticationException $exception) { // TODO: Implement onAuthenticationFailure() method. /* $response = new JsonResponse([ 'error' => [ 'message' => $exception->getMessage() ] ],Response::HTTP_UNAUTHORIZED );*/ $response = new JsonResponse([ 'error' => $exception->getMessage().': Please login again' ],Response::HTTP_UNAUTHORIZED ); return $response; } /** * Called when authentication executed and was successful! * * This should return the Response sent back to the user, like a * RedirectResponse to the last page they visited. * * If you return null, the current request will continue, and the user * will be authenticated. This makes sense, for example, with an API. * * @param Request $request * @param TokenInterface $token * @param string $providerKey The provider (i.e. firewall) key * * @return Response|null */ public function onAuthenticationSuccess(Request $request, TokenInterface $token, $providerKey) { // TODO: Implement onAuthenticationSuccess() method. return; } /** * Does this method support remember me cookies? * * Remember me cookie will be set if *all* of the following are met: * A) This method returns true * B) The remember_me key under your firewall is configured * C) The "remember me" functionality is activated. This is usually * done by having a _remember_me checkbox in your form, but * can be configured by the "always_remember_me" and "remember_me_parameter" * parameters under the "remember_me" firewall key * D) The onAuthenticationSuccess method returns a Response object * * @return bool */ public function supportsRememberMe() { // TODO: Implement supportsRememberMe() method. return false; } /** * Returns a response that directs the user to authenticate. * * This is called when an anonymous request accesses a resource that * requires authentication. The job of this method is to return some * response that "helps" the user start into the authentication process. * * Examples: * A) For a form login, you might redirect to the login page * return new RedirectResponse('/login'); * B) For an API token authentication system, you return a 401 response * return new Response('Auth header required', 401); * * @param Request $request The request that resulted in an AuthenticationException * @param AuthenticationException $authException The exception that started the authentication process * * @return Response */ public function start(Request $request, AuthenticationException $authException = null) { return new JsonResponse([ 'error' => [ 'message' => 'auth required' ] ], Response::HTTP_UNAUTHORIZED); } public function supports(Request $request): bool { // TODO: Implement supports() method. if($request->headers->get('Auth')){ return true; } return false; }}