src/Controller/Security/ResetPasswordController.php line 36

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Controller\Security;
  7. use App\Form\Security\ChangePasswordFormType;
  8. use App\Form\Security\ResetPasswordRequestFormType;
  9. use App\Repository\Security\UserRepository;
  10. use App\Service\Mailer\Mailer;
  11. use Doctrine\ORM\EntityManagerInterface;
  12. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  13. use Symfony\Component\HttpFoundation\RedirectResponse;
  14. use Symfony\Component\HttpFoundation\Request;
  15. use Symfony\Component\HttpFoundation\Response;
  16. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  17. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  18. use Symfony\Contracts\Translation\TranslatorInterface;
  19. use SymfonyCasts\Bundle\ResetPassword\Controller\ResetPasswordControllerTrait;
  20. use SymfonyCasts\Bundle\ResetPassword\Exception\ResetPasswordExceptionInterface;
  21. use SymfonyCasts\Bundle\ResetPassword\ResetPasswordHelperInterface;
  23. class ResetPasswordController extends AbstractController
  24. {
  25.     use ResetPasswordControllerTrait;
  27.     public function __construct(
  28.         private ResetPasswordHelperInterface $resetPasswordHelper,
  29.         private EntityManagerInterface $entityManager,
  30.         private Mailer $mailer,
  31.         private UrlGeneratorInterface $urlGenerator,
  32.         private UserRepository $userRepository,
  33.     ) {
  34.     }
  36.     public function request(Request $request): Response
  37.     {
  38.         $form = $this->createForm(ResetPasswordRequestFormType::class);
  39.         $form->handleRequest($request);
  41.         if ($form->isSubmitted() && $form->isValid()) {
  42.             return $this->processSendingPasswordResetEmail(
  43.                 $form->get('email')->getData(),
  44.             );
  45.         }
  47.         return $this->render('Security/Emails/request.html.twig', [
  48.             'requestForm' => $form->createView(),
  49.         ]);
  50.     }
  52.     public function checkEmail(): Response
  53.     {
  54.         if (null === ($resetToken = $this->getTokenObjectFromSession())) {
  55.             $resetToken = $this->resetPasswordHelper->generateFakeResetToken();
  56.         }
  58.         return $this->render('Security/ResetPassword/check_email.html.twig', [
  59.             'resetToken' => $resetToken,
  60.         ]);
  61.     }
  63.     public function reset(Request $request, UserPasswordHasherInterface $userPasswordHasher, TranslatorInterface $translator, string $token = null): Response
  64.     {
  65.         if (null !== $token) {
  66.             $this->storeTokenInSession($token);
  68.             return $this->redirectToRoute('foxorders_security_reset_password_reset');
  69.         }
  71.         $token = $this->getTokenFromSession();
  72.         if (null === $token) {
  73.             throw $this->createNotFoundException($translator->trans('app.app.global.user.password.reset.messages.token_not_found'));
  74.         }
  76.         try {
  77.             $user = $this->resetPasswordHelper->validateTokenAndFetchUser($token);
  78.         } catch (ResetPasswordExceptionInterface $e) {
  79.             $this->addFlash('reset_password_error', sprintf(
  80.                 '%s - %s',
  81.                 $translator->trans(ResetPasswordExceptionInterface::MESSAGE_PROBLEM_VALIDATE, [], 'ResetPasswordBundle'),
  82.                 $translator->trans($e->getReason(), [], 'ResetPasswordBundle')
  83.             ));
  85.             return $this->redirectToRoute('foxorders_security_reset_password_request');
  86.         }
  88.         $form = $this->createForm(ChangePasswordFormType::class);
  89.         $form->handleRequest($request);
  91.         if ($form->isSubmitted()) {
  92.             $this->resetPasswordHelper->removeResetRequest($token);
  94.             $encodedPassword = $userPasswordHasher->hashPassword(
  95.                 $user,
  96.                 $form->get('plainPassword')->getData()
  97.             );
  99.             $user->setPassword($encodedPassword);
  100.             $this->entityManager->flush();
  102.             $this->cleanSessionAfterReset();
  104.             return $this->redirectToRoute('foxorders_dashboard');
  105.         }
  107.         return $this->render('Security/ResetPassword/reset.html.twig', [
  108.             'resetForm' => $form->createView(),
  109.         ]);
  110.     }
  112.     private function processSendingPasswordResetEmail(string $emailFormData): RedirectResponse
  113.     {
  114.         $user = $this->userRepository->findOneStaffByEmail($emailFormData);
  116.         if (!$user) {
  117.             return $this->redirectToRoute('foxorders_security_reset_password_check_email');
  118.         }
  120.         try {
  121.             $resetToken = $this->resetPasswordHelper->generateResetToken($user);
  122.             $url = $this->urlGenerator->generate('foxorders_security_reset_password_reset', ['token' => $resetToken->getToken()], UrlGeneratorInterface::ABSOLUTE_URL);
  123.             $this->mailer->sendResetPasswordMail($user, compact('url'));
  124.             $this->setTokenObjectInSession($resetToken);
  125.         } catch (ResetPasswordExceptionInterface $e) {
  126.             return $this->redirectToRoute('foxorders_security_reset_password_check_email');
  127.         }
  129.         return $this->redirectToRoute('foxorders_security_reset_password_check_email');
  130.     }
  131. }