vendor/symfony/security-core/Authentication/Provider/DaoAuthenticationProvider.php line 85

Open in your IDE?
  1. <?php
  3. /*
  4.  * This file is part of the Symfony package.
  5.  *
  6.  * (c) Fabien Potencier <fabien@symfony.com>
  7.  *
  8.  * For the full copyright and license information, please view the LICENSE
  9.  * file that was distributed with this source code.
  10.  */
  12. namespace Symfony\Component\Security\Core\Authentication\Provider;
  14. use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken;
  15. use Symfony\Component\Security\Core\Encoder\EncoderFactoryInterface;
  16. use Symfony\Component\Security\Core\Exception\AuthenticationServiceException;
  17. use Symfony\Component\Security\Core\Exception\BadCredentialsException;
  18. use Symfony\Component\Security\Core\Exception\UsernameNotFoundException;
  19. use Symfony\Component\Security\Core\User\UserCheckerInterface;
  20. use Symfony\Component\Security\Core\User\UserInterface;
  21. use Symfony\Component\Security\Core\User\UserProviderInterface;
  23. /**
  24.  * DaoAuthenticationProvider uses a UserProviderInterface to retrieve the user
  25.  * for a UsernamePasswordToken.
  26.  *
  27.  * @author Fabien Potencier <fabien@symfony.com>
  28.  */
  29. class DaoAuthenticationProvider extends UserAuthenticationProvider
  30. {
  31.     private $encoderFactory;
  32.     private $userProvider;
  34.     public function __construct(UserProviderInterface $userProvider, UserCheckerInterface $userChecker, string $providerKey, EncoderFactoryInterface $encoderFactory, bool $hideUserNotFoundExceptions = true)
  35.     {
  36.         parent::__construct($userChecker, $providerKey, $hideUserNotFoundExceptions);
  38.         $this->encoderFactory = $encoderFactory;
  39.         $this->userProvider = $userProvider;
  40.     }
  42.     /**
  43.      * {@inheritdoc}
  44.      */
  45.     protected function checkAuthentication(UserInterface $user, UsernamePasswordToken $token)
  46.     {
  47.         $currentUser = $token->getUser();
  48.         if ($currentUser instanceof UserInterface) {
  49.             if ($currentUser->getPassword() !== $user->getPassword()) {
  50.                 throw new BadCredentialsException('The credentials were changed from another session.');
  51.             }
  52.         } else {
  53.             if ('' === ($presentedPassword = $token->getCredentials())) {
  54.                 throw new BadCredentialsException('The presented password cannot be empty.');
  55.             }
  57.             if (!$this->encoderFactory->getEncoder($user)->isPasswordValid($user->getPassword(), $presentedPassword, $user->getSalt())) {
  58.                 throw new BadCredentialsException('The presented password is invalid.');
  59.             }
  60.         }
  61.     }
  63.     /**
  64.      * {@inheritdoc}
  65.      */
  66.     protected function retrieveUser($username, UsernamePasswordToken $token)
  67.     {
  68.         $user = $token->getUser();
  69.         if ($user instanceof UserInterface) {
  70.             return $user;
  71.         }
  73.         try {
  74.             $user = $this->userProvider->loadUserByUsername($username);
  76.             if (!$user instanceof UserInterface) {
  77.                 throw new AuthenticationServiceException('The user provider must return a UserInterface object.');
  78.             }
  80.             return $user;
  81.         } catch (UsernameNotFoundException $e) {
  82.             $e->setUsername($username);
  83.             throw $e;
  84.         } catch (\Exception $e) {
  85.             $e = new AuthenticationServiceException($e->getMessage(), 0, $e);
  86.             $e->setToken($token);
  87.             throw $e;
  88.         }
  89.     }
  90. }