src/Controller/ResetPasswordController.php line 40

Open in your IDE?
  1. <?php
  3. namespace App\Controller;
  5. use App\Entity\User;
  6. use App\Form\ChangePasswordFormType;
  7. use App\Form\ResetPasswordRequestFormType;
  8. use Doctrine\ORM\EntityManagerInterface;
  9. use Symfony\Bridge\Twig\Mime\TemplatedEmail;
  10. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  11. use Symfony\Component\Form\FormError;
  12. use Symfony\Component\HttpFoundation\RedirectResponse;
  13. use Symfony\Component\HttpFoundation\Request;
  14. use Symfony\Component\HttpFoundation\Response;
  15. use Symfony\Component\Mailer\Exception\TransportExceptionInterface;
  16. use Symfony\Component\Mailer\MailerInterface;
  17. use Symfony\Component\Mime\Address;
  18. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  19. use Symfony\Component\Routing\Annotation\Route;
  20. use Symfony\Contracts\Translation\TranslatorInterface;
  21. use SymfonyCasts\Bundle\ResetPassword\Controller\ResetPasswordControllerTrait;
  22. use SymfonyCasts\Bundle\ResetPassword\Exception\ResetPasswordExceptionInterface;
  23. use SymfonyCasts\Bundle\ResetPassword\ResetPasswordHelperInterface;
  25. #[Route('/reset-password')]
  26. class ResetPasswordController extends AbstractController
  27. {
  28. use ResetPasswordControllerTrait;
  30. public function __construct(
  31. private ResetPasswordHelperInterface $resetPasswordHelper,
  32. private EntityManagerInterface $entityManager
  33. ) {
  34. }
  36. /**
  37. * Display & process form to request a password reset.
  38. */
  39. #[Route('', name: 'app_forgot_password_request')]
  40. public function request(Request $request, MailerInterface $mailer, TranslatorInterface $translator): Response
  41. {
  42. $form = $this->createForm(ResetPasswordRequestFormType::class);
  43. $form->handleRequest($request);
  45. if ($form->isSubmitted() && $form->isValid()) {
  46. return $this->processSendingPasswordResetEmail(
  47. $form->get('email')->getData(),
  48. $mailer,
  49. $translator
  50. );
  51. }
  53. return $this->render('reset_password/request.html.twig', [
  54. 'requestForm' => $form->createView(),
  55. ]);
  56. }
  58. /**
  59. * Confirmation page after a user has requested a password reset.
  60. */
  61. #[Route('/check-email', name: 'app_check_email')]
  62. public function checkEmail(): Response
  63. {
  64. // Generate a fake token if the user does not exist or someone hit this page directly.
  65. // This prevents exposing whether or not a user was found with the given email address or not
  66. if (null === ($resetToken = $this->getTokenObjectFromSession())) {
  67. $resetToken = $this->resetPasswordHelper->generateFakeResetToken();
  68. }
  70. return $this->render('reset_password/check_email.html.twig', [
  71. 'resetToken' => $resetToken,
  72. ]);
  73. }
  75. /**
  76. * Validates and process the reset URL that the user clicked in their email.
  77. */
  78. #[Route('/reset', name: 'app_reset_password')]
  79. public function reset(Request $request, UserPasswordHasherInterface $passwordHasher, TranslatorInterface $translator): Response
  80. {
  81. $form = $this->createForm(ChangePasswordFormType::class);
  82. $form->handleRequest($request);
  84. $token = $form->get('confirmationToken')->getData();
  85. try {
  86. if($token) {
  87. $user = $this->resetPasswordHelper->validateTokenAndFetchUser($token);
  88. }
  89. }
  90. catch (ResetPasswordExceptionInterface $e) {
  91. $form->get('confirmationToken')->addError(new FormError('El token ingresado no es válido'));
  92. }
  94. if ($form->isSubmitted() && $form->isValid()) {
  95. // A password reset token should be used only once, remove it.
  96. $this->resetPasswordHelper->removeResetRequest($token);
  98. // Encode(hash) the plain password, and set it.
  99. $encodedPassword = $passwordHasher->hashPassword(
  100. $user,
  101. $form->get('plainPassword')->getData()
  102. );
  104. $user->setPassword($encodedPassword);
  105. $user->setSecured(true);
  106. $user->setPasswordUpdatedForNewPolicy(true);
  107. $this->entityManager->flush();
  109. // The session is cleaned up after the password has been changed.
  110. $this->cleanSessionAfterReset();
  112. return $this->redirectToRoute('app_login');
  113. }
  115. return $this->render('reset_password/reset.html.twig', [
  116. 'resetForm' => $form->createView(),
  117. ]);
  118. }
  120. private function processSendingPasswordResetEmail(string $emailFormData, MailerInterface $mailer, TranslatorInterface $translator): RedirectResponse
  121. {
  122. $user = $this->entityManager->getRepository(User::class)->findOneBy([
  123. 'username' => $emailFormData,
  124. ]);
  126. if(!$user) {
  127. $user = $this->entityManager->getRepository(User::class)->findOneBy([
  128. 'email' => $emailFormData,
  129. ]);
  130. }
  132. // Do not reveal whether a user account was found or not.
  133. if (!$user) {
  134. return $this->redirectToRoute('app_reset_password');
  135. }
  137. try {
  138. $resetToken = $this->resetPasswordHelper->generateResetToken($user);
  140. } catch (ResetPasswordExceptionInterface $e) {
  141. return $this->redirectToRoute('app_reset_password');
  142. }
  144. $email = (new TemplatedEmail())
  145. ->from(new Address('soporte@comprasbex.cl', 'Sistema de Compras de BancoEstado Express'))
  146. ->to($user->getEmail())
  147. ->subject('Restablecer contraseña')
  148. ->htmlTemplate('reset_password/email.html.twig')
  149. ->context([
  150. 'resetToken' => $resetToken,
  151. 'user' => $user
  152. ])
  153. ;
  155. try {
  156. $mailer->send($email);
  157. }
  158. catch (TransportExceptionInterface $e) {
  159. dd($e);
  160. }
  162. // Store the token object in session for retrieval in check-email route.
  163. $this->setTokenObjectInSession($resetToken);
  165. return $this->redirectToRoute('app_reset_password');
  166. }
  167. }