src/Security/TokenAuthenticator.php line 17

Open in your IDE?
  1. <?php
  2. namespace App\Security;
  3. use Symfony\Component\HttpFoundation\Request;
  4. use Symfony\Component\Security\Http\Authenticator\AbstractAuthenticator;
  5. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  6. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  7. use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
  8. use Symfony\Component\HttpFoundation\Response;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Exception\CustomUserMessageAuthenticationException;
  11. use Symfony\Component\Security\Core\User\UserInterface;
  13. class TokenAuthenticator extends AbstractAuthenticator
  14. {
  15.     public function __construct(private FileTokenStorage $storage){}
  16.     public function supports(Request $request): ?bool
  17.     { return $request->headers->has('X-DASH-TOKEN') || $request->query->has('token') || $request->getSession()->has('tv_token'); }
  19.     public function authenticate(Request $request): Passport
  20.     {
  21.         $tokenVal = $request->headers->get('X-DASH-TOKEN') ?? $request->query->get('token') ?? $request->getSession()->get('tv_token');
  22.     $row = $tokenVal ? $this->storage->find($tokenVal) : null;
  23.         if(!$row) {
  24.             throw new CustomUserMessageAuthenticationException('Invalid token');
  25.         }
  26.         if(empty($row['active']) || ($row['active'] !== true)) {
  27.             if (!empty($row['expiresAt']) && strtotime($row['expiresAt']) < time()) {
  28.                 throw new CustomUserMessageAuthenticationException('Token expired');
  29.             }
  30.             throw new CustomUserMessageAuthenticationException('Token disabled');
  31.         }
  32.         $this->storage->touch($row['token']);
  33.         return new SelfValidatingPassport(new UserBadge('token:'.$row['token'], function() use ($row): UserInterface {
  34.             return new class($row) implements UserInterface {
  35.                 public function __construct(private array $t){}
  36.                 public function getRoles(): array { $r=$this->t['roles'] ?? []; if(!in_array('ROLE_USER',$r,true)){$r[]='ROLE_USER';} return $r; }
  37.                 public function getPassword(){ return null; }
  38.                 public function getSalt(){}
  39.                 public function getUserIdentifier(): string { return 'token_user'; }
  40.                 public function getUsername(): string { return 'token_user'; }
  41.                 public function eraseCredentials(){}
  42.             };
  43.         }));
  44.     }
  45.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response { return null; }
  46.     public function onAuthenticationFailure(Request $request, \Symfony\Component\Security\Core\Exception\AuthenticationException $exception): ?Response
  47.     { return new \Symfony\Component\HttpFoundation\JsonResponse(['error'=>'Auth token failed'], 401); }
  48. }