-
Notifications
You must be signed in to change notification settings - Fork 159
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
New authenticator for the newer Symfony authenticator API
- Loading branch information
Showing
28 changed files
with
1,095 additions
and
92 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
127 changes: 127 additions & 0 deletions
127
DependencyInjection/Security/Factory/RefreshTokenAuthenticatorFactory.php
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,127 @@ | ||
| <?php | ||
|
|
||
| /* | ||
| * This file is part of the GesdinetJWTRefreshTokenBundle package. | ||
| * | ||
| * (c) Gesdinet <http://www.gesdinet.com/> | ||
| * | ||
| * For the full copyright and license information, please view the LICENSE | ||
| * file that was distributed with this source code. | ||
| */ | ||
|
|
||
| namespace Gesdinet\JWTRefreshTokenBundle\DependencyInjection\Security\Factory; | ||
|
|
||
| use Symfony\Bundle\SecurityBundle\DependencyInjection\Security\Factory\AuthenticatorFactoryInterface; | ||
| use Symfony\Bundle\SecurityBundle\DependencyInjection\Security\Factory\SecurityFactoryInterface; | ||
| use Symfony\Component\Config\Definition\Builder\NodeDefinition; | ||
| use Symfony\Component\DependencyInjection\ChildDefinition; | ||
| use Symfony\Component\DependencyInjection\ContainerBuilder; | ||
| use Symfony\Component\DependencyInjection\Parameter; | ||
| use Symfony\Component\DependencyInjection\Reference; | ||
|
|
||
| final class RefreshTokenAuthenticatorFactory implements SecurityFactoryInterface, AuthenticatorFactoryInterface | ||
| { | ||
| public function create(ContainerBuilder $container, string $id, array $config, string $userProviderId, ?string $defaultEntryPointId): array | ||
| { | ||
| // Does not support the legacy authentication system | ||
| return []; | ||
| } | ||
|
|
||
| public function getPosition(): string | ||
| { | ||
| return 'http'; | ||
| } | ||
|
|
||
| public function getKey(): string | ||
| { | ||
| return 'refresh-jwt'; | ||
| } | ||
|
|
||
| public function addConfiguration(NodeDefinition $node): void | ||
| { | ||
| // no-op TTL and param configuration until bundle is further updated to support per-authenticator configuration | ||
| $node | ||
| ->children() | ||
| ->scalarNode('provider')->end() | ||
| ->scalarNode('success_handler')->end() | ||
| ->scalarNode('failure_handler')->end() | ||
| /* | ||
| ->integerNode('ttl') | ||
| ->defaultNull() | ||
| ->info('Sets a TTL specific to this authenticator, if not set then the "ttl" bundle config is used.') | ||
| ->end() | ||
| ->booleanNode('ttl_update') | ||
| ->defaultNull() | ||
| ->info('Sets whether the TTL for refresh tokens should be refreshed for this authenticator, if not set then the "ttl_update" bundle config is used.') | ||
| ->end() | ||
| ->scalarNode('token_parameter_name') | ||
| ->defaultNull() | ||
| ->info('Sets the parameter name for the refresh token for this authenticator, if not set then the "token_parameter_name" bundle config is used.') | ||
| ->end() | ||
| */ | ||
| ->end() | ||
| ; | ||
| } | ||
|
|
||
| public function createAuthenticator(ContainerBuilder $container, string $firewallName, array $config, string $userProviderId) | ||
| { | ||
| $authenticatorId = 'security.authenticator.refresh_jwt.'.$firewallName; | ||
|
|
||
| // When per-authenticator configuration is supported, this array should be updated to check the $config values before falling back to the bundle parameters | ||
| $options = [ | ||
| 'ttl' => new Parameter('gesdinet_jwt_refresh_token.ttl'), | ||
| 'ttl_update' => new Parameter('gesdinet_jwt_refresh_token.ttl_update'), | ||
| 'token_parameter_name' => new Parameter('gesdinet_jwt_refresh_token.token_parameter_name'), | ||
| ]; | ||
|
|
||
| $container->setDefinition($authenticatorId, new ChildDefinition('gesdinet.jwtrefreshtoken.security.refresh_token_authenticator')) | ||
| ->addArgument(new Reference($userProviderId)) | ||
| ->addArgument(new Reference($this->createAuthenticationSuccessHandler($container, $firewallName, $config))) | ||
| ->addArgument(new Reference($this->createAuthenticationFailureHandler($container, $firewallName, $config))) | ||
| ->addArgument($options); | ||
|
|
||
| return $authenticatorId; | ||
| } | ||
|
|
||
| private function createAuthenticationSuccessHandler(ContainerBuilder $container, string $id, array $config) | ||
| { | ||
| $successHandlerId = $this->getSuccessHandlerId($id); | ||
|
|
||
| if (isset($config['success_handler'])) { | ||
| $container->setDefinition($successHandlerId, new ChildDefinition('security.authentication.custom_success_handler')) | ||
| ->replaceArgument(0, new Reference($config['success_handler'])) | ||
| ->replaceArgument(1, []) | ||
| ->replaceArgument(2, $id); | ||
| } else { | ||
| $container->setDefinition($successHandlerId, new ChildDefinition('gesdinet.jwtrefreshtoken.security.authentication.success_handler')) | ||
| ->addMethodCall('setFirewallName', [$id]); | ||
| } | ||
|
|
||
| return $successHandlerId; | ||
| } | ||
|
|
||
| private function createAuthenticationFailureHandler(ContainerBuilder $container, string $id, array $config) | ||
| { | ||
| $id = $this->getFailureHandlerId($id); | ||
|
|
||
| if (isset($config['failure_handler'])) { | ||
| $container->setDefinition($id, new ChildDefinition('security.authentication.custom_failure_handler')) | ||
| ->replaceArgument(0, new Reference($config['failure_handler'])) | ||
| ->replaceArgument(1, []); | ||
| } else { | ||
| $container->setDefinition($id, new ChildDefinition('gesdinet.jwtrefreshtoken.security.authentication.failure_handler')); | ||
| } | ||
|
|
||
| return $id; | ||
| } | ||
|
|
||
| private function getSuccessHandlerId(string $id) | ||
| { | ||
| return 'security.authentication.success_handler.'.$id.'.'.str_replace('-', '_', $this->getKey()); | ||
| } | ||
|
|
||
| private function getFailureHandlerId(string $id) | ||
| { | ||
| return 'security.authentication.failure_handler.'.$id.'.'.str_replace('-', '_', $this->getKey()); | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,49 @@ | ||
| <?php | ||
|
|
||
| /* | ||
| * This file is part of the GesdinetJWTRefreshTokenBundle package. | ||
| * | ||
| * (c) Gesdinet <http://www.gesdinet.com/> | ||
| * | ||
| * For the full copyright and license information, please view the LICENSE | ||
| * file that was distributed with this source code. | ||
| */ | ||
|
|
||
| namespace Gesdinet\JWTRefreshTokenBundle\Event; | ||
|
|
||
| use Symfony\Component\HttpFoundation\Response; | ||
| use Symfony\Component\Security\Core\Exception\AuthenticationException; | ||
|
|
||
| class RefreshAuthenticationFailureEvent extends Event | ||
| { | ||
| /** | ||
| * @var AuthenticationException | ||
| */ | ||
| private $exception; | ||
|
|
||
| /** | ||
| * @var Response|null | ||
| */ | ||
| private $response; | ||
|
|
||
| public function __construct(AuthenticationException $exception, ?Response $response = null) | ||
| { | ||
| $this->exception = $exception; | ||
| $this->response = $response; | ||
| } | ||
|
|
||
| public function getException(): AuthenticationException | ||
| { | ||
| return $this->exception; | ||
| } | ||
|
|
||
| public function getResponse(): ?Response | ||
| { | ||
| return $this->response; | ||
| } | ||
|
|
||
| public function setResponse(?Response $response = null): void | ||
| { | ||
| $this->response = $response; | ||
| } | ||
| } |
Oops, something went wrong.