src/Security/GoogleAuthenticator.php line 20

  1. <?php
  3. namespace App\Security;
  5. use App\Entity\User; // your user entity
  6. use Doctrine\ORM\EntityManagerInterface;
  7. use Symfony\Component\HttpFoundation\Request;
  8. use Symfony\Component\HttpFoundation\Response;
  9. use Symfony\Component\Routing\RouterInterface;
  10. use KnpU\OAuth2ClientBundle\Client\ClientRegistry;
  11. use Symfony\Component\HttpFoundation\RedirectResponse;
  12. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  13. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  14. use KnpU\OAuth2ClientBundle\Security\Authenticator\OAuth2Authenticator;
  15. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  16. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  17. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  18. use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
  20. class GoogleAuthenticator extends OAuth2Authenticator
  21. {
  22.     private $clientRegistry;
  23.     private $entityManager;
  24.     private $router;
  26.     public function __construct(ClientRegistry $clientRegistry, EntityManagerInterface $entityManager, RouterInterface $router)
  27.     {
  28.         $this->clientRegistry = $clientRegistry;
  29.         $this->entityManager = $entityManager;
  30.         $this->router = $router;
  31.     }
  33.     public function supports(Request $request): ?bool
  34.     {
  35.         // continue ONLY if the current ROUTE matches the check ROUTE
  36.         return $request->attributes->get('_route') === 'connect_google_check';
  37.     }
  39.     public function authenticate(Request $request): Passport
  40.     {
  41.         $client = $this->clientRegistry->getClient('google');
  42.         $accessToken = $this->fetchAccessToken($client);
  44.         return new SelfValidatingPassport(
  45.             new UserBadge($accessToken->getToken(), function () use ($accessToken, $client) {
  46.                 /** @var GoogleUser $googleUser */
  47.                 $googleUser = $client->fetchUserFromToken($accessToken);
  49.                 $email = $googleUser->getEmail();
  51.                 // 1) have they logged in with Google before? Easy!
  52.                 $existingUser = $this->entityManager->getRepository(User::class)->findOneBy(['google_id' => $googleUser->getId()]);
  54.                 if ($existingUser) {
  55.                     return $existingUser;
  56.                 }
  58.                 // 2) do we have a matching user by email?
  59.                 $user = $this->entityManager->getRepository(User::class)->findOneBy(['email' => $email]);
  60.                 if (is_null($user)) {
  61.                     $user = new User();
  62.                     $email = $googleUser->getEmail();
  63.                     $firstName = $googleUser->getFirstName();
  64.                     $lastName = $googleUser->getLastName();
  65.                     $avatar = $googleUser->getAvatar();
  67.                     $user->setPassword('abdomgh');
  69.                     $user->setEmail($email);
  70.                     $user->setIsVerified(true);
  71.                     $user->setFirstName($firstName);
  72.                     $user->setLastName($lastName);
  73.                     $user->setPhoto($avatar);
  74.                 }
  76.                 // 3) Maybe you just want to "register" them by creating
  77.                 // a User object
  78.                 $user->setGoogleId($googleUser->getId());
  79.                 $this->entityManager->persist($user);
  80.                 $this->entityManager->flush();
  82.                 return $user;
  83.             })
  84.         );
  85.     }
  87.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
  88.     {
  89.         // change "app_homepage" to some route in your app
  90.         $targetUrl = $this->router->generate('app_main');
  92.         return new RedirectResponse($targetUrl);
  94.         // or, on success, let the request continue to be handled by the controller
  95.         //return null;
  96.     }
  98.     public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
  99.     {
  100.         $message = strtr($exception->getMessageKey(), $exception->getMessageData());
  102.         return new Response($message, Response::HTTP_FORBIDDEN);
  103.     }
  104. }