src/Controller/Security/ResetPasswordController.php line 35

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Controller\Security;
  7. use App\Entity\Security\User;
  8. use App\Form\Security\ChangePasswordFormType;
  9. use App\Form\Security\ResetPasswordRequestFormType;
  10. use App\Service\Mailer\Mailer;
  11. use Doctrine\ORM\EntityManagerInterface;
  12. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  13. use Symfony\Component\HttpFoundation\RedirectResponse;
  14. use Symfony\Component\HttpFoundation\Request;
  15. use Symfony\Component\HttpFoundation\Response;
  16. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  17. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  18. use Symfony\Contracts\Translation\TranslatorInterface;
  19. use SymfonyCasts\Bundle\ResetPassword\Controller\ResetPasswordControllerTrait;
  20. use SymfonyCasts\Bundle\ResetPassword\Exception\ResetPasswordExceptionInterface;
  21. use SymfonyCasts\Bundle\ResetPassword\ResetPasswordHelperInterface;
  23. class ResetPasswordController extends AbstractController
  24. {
  25.     use ResetPasswordControllerTrait;
  27.     public function __construct(
  28.         private ResetPasswordHelperInterface $resetPasswordHelper,
  29.         private EntityManagerInterface $entityManager,
  30.         private Mailer $mailer,
  31.         private UrlGeneratorInterface $urlGenerator,
  32.     ) {
  33.     }
  35.     public function request(Request $request): Response
  36.     {
  37.         $form = $this->createForm(ResetPasswordRequestFormType::class);
  38.         $form->handleRequest($request);
  40.         if ($form->isSubmitted() && $form->isValid()) {
  41.             return $this->processSendingPasswordResetEmail(
  42.                 $form->get('email')->getData(),
  43.             );
  44.         }
  46.         return $this->render('Security/Emails/request.html.twig', [
  47.             'requestForm' => $form->createView(),
  48.         ]);
  49.     }
  51.     public function checkEmail(): Response
  52.     {
  53.         if (null === ($resetToken = $this->getTokenObjectFromSession())) {
  54.             $resetToken = $this->resetPasswordHelper->generateFakeResetToken();
  55.         }
  57.         return $this->render('Security/ResetPassword/check_email.html.twig', [
  58.             'resetToken' => $resetToken,
  59.         ]);
  60.     }
  62.     public function reset(Request $request, UserPasswordHasherInterface $userPasswordHasher, TranslatorInterface $translator, string $token = null): Response
  63.     {
  64.         if (null !== $token) {
  65.             $this->storeTokenInSession($token);
  67.             return $this->redirectToRoute('foxorders_security_reset_password_reset');
  68.         }
  70.         $token = $this->getTokenFromSession();
  71.         if (null === $token) {
  72.             throw $this->createNotFoundException($translator->trans('app.app.global.user.password.reset.messages.token_not_found'));
  73.         }
  75.         try {
  76.             $user = $this->resetPasswordHelper->validateTokenAndFetchUser($token);
  77.         } catch (ResetPasswordExceptionInterface $e) {
  78.             $this->addFlash('reset_password_error', sprintf(
  79.                 '%s - %s',
  80.                 $translator->trans(ResetPasswordExceptionInterface::MESSAGE_PROBLEM_VALIDATE, [], 'ResetPasswordBundle'),
  81.                 $translator->trans($e->getReason(), [], 'ResetPasswordBundle')
  82.             ));
  84.             return $this->redirectToRoute('foxorders_security_reset_password_request');
  85.         }
  87.         $form = $this->createForm(ChangePasswordFormType::class);
  88.         $form->handleRequest($request);
  90.         if ($form->isSubmitted()) {
  91.             $this->resetPasswordHelper->removeResetRequest($token);
  93.             $encodedPassword = $userPasswordHasher->hashPassword(
  94.                 $user,
  95.                 $form->get('plainPassword')->getData()
  96.             );
  98.             $user->setPassword($encodedPassword);
  99.             $this->entityManager->flush();
  101.             $this->cleanSessionAfterReset();
  103.             return $this->redirectToRoute('foxorders_dashboard');
  104.         }
  106.         return $this->render('Security/ResetPassword/reset.html.twig', [
  107.             'resetForm' => $form->createView(),
  108.         ]);
  109.     }
  111.     private function processSendingPasswordResetEmail(string $emailFormData): RedirectResponse
  112.     {
  113.         $user = $this->entityManager->getRepository(User::class)->findOneBy([
  114.             'email' => $emailFormData,
  115.         ]);
  117.         if (!$user) {
  118.             return $this->redirectToRoute('foxorders_security_reset_password_check_email');
  119.         }
  121.         try {
  122.             $resetToken = $this->resetPasswordHelper->generateResetToken($user);
  123.             $url = $this->urlGenerator->generate('foxorders_security_reset_password_reset', ['token' => $resetToken->getToken()], UrlGeneratorInterface::ABSOLUTE_URL);
  124.             $this->mailer->sendResetPasswordMail($user, compact('url'));
  125.             $this->setTokenObjectInSession($resetToken);
  126.         } catch (ResetPasswordExceptionInterface $e) {
  127.             return $this->redirectToRoute('foxorders_security_reset_password_check_email');
  128.         }
  130.         return $this->redirectToRoute('foxorders_security_reset_password_check_email');
  131.     }
  132. }