src/UserBundle/Controller/ResettingController.php line 29

Open in your IDE?
  1. <?php
  2. // src/Controller/SecurityController.php
  3. namespace App\UserBundle\Controller;
  5. use App\Controller\Traits\GenericTrait;
  6. use App\Entity\User;
  7. use App\UserBundle\Events\ResettingPasswordEvent;
  8. use App\UserBundle\Form\ResettingType;
  9. use Doctrine\ORM\EntityManagerInterface;
  10. use Symfony\Component\EventDispatcher\EventDispatcherInterface;
  11. use Symfony\Component\HttpFoundation\Response;
  12. use Symfony\Component\HttpFoundation\Session\Session;
  13. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  14. use Symfony\Component\Routing\Annotation\Route;
  15. use Symfony\Component\HttpFoundation\Request;
  16. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  17. use Symfony\Contracts\Service\Attribute\Required;
  18. use Symfony\Contracts\Translation\TranslatorInterface;
  20. class ResettingController extends AbstractController
  21. {
  22.     use GenericTrait;
  24.     #[Required]
  25.     public  EventDispatcherInterface $eventDispatcher;
  28.     #[Route("/request", name: "resetting_request")]
  29.     public function request(
  30.         Request $request,
  31.         EntityManagerInterface $em,
  32.         TranslatorInterface $translator
  33.     ): Response
  34.     {
  35.         $session = new Session();
  36.         if($request->getMethod() == 'POST'){
  37.             $username = $request->request->get('_username');
  38.             $user = $em->getRepository(User::class)->findUserByUsernameOrEmail($username);
  39.             if(!empty($user) && $user instanceof User){
  40.                 /**
  41.                  * @var User $user
  42.                  */
  43.                 if($user->getPasswordRequestedAt() !== null){
  44.                     if($user->getPasswordRequestedAt()->getTimestamp() + $this->getParameter('retry_ttl') > time()){
  45.                         $session->getFlashBag()->add('warning', $translator->trans('resetting.ttl_not_reached',['%duration%' => $this->getParameter('retry_ttl')],'userbundle'));
  46.                         return $this->redirectToRoute('resetting_request');
  47.                     }
  48.                 }
  50.                 $user->setPasswordRequestedAt(new \DateTime('now'));
  51.                 $token = md5(random_bytes(100));
  52.                 $user->setConfirmationToken($token);
  53.                 $em->persist($user);
  54.                 $em->flush();
  55.                 $event = new ResettingPasswordEvent($user);
  56.                 $this->eventDispatcher->dispatch($event);
  58.                 $session->getFlashBag()->add('success', $translator->trans('resetting.request.success',[],'userbundle'));
  59.             } else {
  60.                 $session->getFlashBag()->add('warning', $translator->trans('resetting.request.failed',[],'userbundle'));
  61.             }
  63.             return $this->redirectToRoute('resetting_request');
  64.         }
  66.         return $this->render('@UserBundle/Resetting/request.html.twig');
  67.     }
  70.     #[Route("/resetting/{token}",name: 'resetting_action')]
  71.     public function resetPassword(
  72.         Request $request,
  73.         UserPasswordHasherInterface $userPasswordEncoder,
  74.         EntityManagerInterface $em,
  75.         TranslatorInterface $translator,
  76.         string $token
  77.     ): Response
  78.     {
  79.         $session = new Session();
  80.         $user = $em->getRepository(User::class)->findOneBy(['confirmation_token' => $token]);
  82.         if(empty($user)){
  83.             $session->getFlashBag()->add('danger', $translator->trans('resetting.token.error',[],'userbundle'));
  84.             return $this->redirectToRoute('resetting_request');
  85.         }
  87.         $form = $this->createForm(ResettingType::class,null);
  88.         $form->handleRequest($request);
  90.         if($form->isSubmitted() && $form->isValid()){
  91.             $encodedPassword = $userPasswordEncoder->hashPassword($user, $form->get('password')->getData());
  93.             $user->setPassword($encodedPassword);
  94.             $user->setConfirmationToken(null);
  95.             $user->setPasswordRequestedAt(null);
  96.             $em->persist($user);
  97.             $em->flush();
  98.             $session->getFlashBag()->add('success', $translator->trans('resetting.success',[],'userbundle'));
  99.             return $this->redirectToRoute('app_login');
  100.         }
  102.         return $this->render('@User/Resetting/reset.html.twig', ['form' => $form->createView()]);
  103.     }
  108. }