<?php
declare(strict_types=1);
namespace App\Security;
use Symfony\Component\HttpFoundation\RedirectResponse;
use Symfony\Component\Routing\RouterInterface;
use Symfony\Component\Security\Http\Authenticator\AbstractLoginFormAuthenticator;
use Symfony\Component\Security\Http\Authenticator\Passport\Badge\RememberMeBadge;
use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
use Symfony\Component\Security\Http\Authenticator\Passport\Badge\CsrfTokenBadge;
use Symfony\Component\Security\Http\Authenticator\Passport\Credentials\PasswordCredentials;
use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\HttpFoundation\Response;
/**
* Authenticator pour la connexion classique email/password
*
* Remplace l'ancien système avec LinkedIn OAuth et extension Chrome.
* Utilise le password sauvegardé lors de l'onboarding v4.
*/
class LoginFormAuthenticator extends AbstractLoginFormAuthenticator
{
/** @var RouterInterface */
private $router;
public function __construct(RouterInterface $router)
{
$this->router = $router;
}
/**
* Authentifie l'utilisateur avec email et password
*/
public function authenticate(Request $request): Passport
{
$email = $request->request->get('email', '');
$password = $request->request->get('password', '');
$csrfToken = $request->request->get('_csrf_token', '');
return new Passport(
new UserBadge($email),
new PasswordCredentials($password),
[
new RememberMeBadge(),
new CsrfTokenBadge('authenticate', $csrfToken),
]
);
}
/**
* Redirection après authentification réussie
*/
public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
{
// Rediriger vers le dashboard des suggestions
return new RedirectResponse($this->router->generate('suggestion.index'));
}
/**
* URL du formulaire de login
*/
protected function getLoginUrl(Request $request): string
{
return $this->router->generate('app_login');
}
}