src/Controller/SecurityController.php line 45

Open in your IDE?
  1. <?php
  3. namespace App\Controller;
  5. use App\Entity\Agency;
  6. use App\Entity\Address;
  7. use App\Entity\JoinTableAgencyUser;
  8. use App\Entity\User;
  9. use App\Entity\UserDetail;
  10. use App\Form\AgencyRegistrationType;
  11. use App\Form\PasswordCreationType;
  12. use App\Form\PasswordRecoveryType;
  13. use App\Service\ValidationService;
  14. use Doctrine\Persistence\ManagerRegistry;
  15. use Symfony\Bridge\Twig\Mime\TemplatedEmail;
  16. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  17. use Symfony\Component\DependencyInjection\ParameterBag\ParameterBagInterface;
  18. use Symfony\Component\Form\FormError;
  19. use Symfony\Component\HttpFoundation\Request;
  20. use Symfony\Component\HttpFoundation\Response;
  21. use Symfony\Component\Mailer\MailerInterface;
  22. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  23. use Symfony\Component\Routing\Annotation\Route;
  24. use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
  25. use Symfony\Contracts\Translation\TranslatorInterface;
  26. use Symfony\Component\Validator\Validator\ValidatorInterface;
  28. /**
  29.  * @Route({"en": "/en", "it": "/it"}, defaults={"_locale" = "it"}, requirements={"_locale" = "it|en"})
  30.  */
  31. class SecurityController extends AbstractController
  32. { 
  33.     protected $mr;
  34.     private $params;
  36.     public function __construct(ManagerRegistry $managerRegistry, ParameterBagInterface $params)
  37.     {
  38.         $this->mr = $managerRegistry;
  39.         $this->params = $params;
  40.     }
  42.     /**
  43.      * @Route({"en":"/", "it":"/"}, name="homepage")
  44.      */
  45.     public function homepage(Request $request, MailerInterface $mailer, AuthenticationUtils $authenticationUtils, TranslatorInterface $translator): Response
  46.     {
  47.         $em = $this->mr->getManager();
  48.         $session = $request->getSession();
  50.         $error = $authenticationUtils->getLastAuthenticationError();
  51.         $lastUsername = $authenticationUtils->getLastUsername();
  53.         $pswUser = new User();
  54.         $form = $this->createForm(PasswordRecoveryType::class, $pswUser, array('locale' => $request->getLocale()));
  55.         $form->handleRequest($request);
  57.         if($form->isSubmitted()){
  58.             $valid = true;
  60.             $path = 'https://www.google.com/recaptcha/api/siteverify?secret=6LcEdHAnAAAAAGDMfuV9qKR-EzPOBx7N24Liqjin&response='.$request->request->get("g-recaptcha-response");
  61.             
  62.             $ch = curl_init();
  63.             curl_setopt($ch, CURLOPT_HTTPHEADER, array(                                                                          
  64.                 'Content-Type: application/json',
  65.                 'Accept: application/json')                                                                       
  66.             );
  67.             curl_setopt($ch, CURLOPT_URL,$path);
  68.             curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  69.             curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  70.             curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "GET");
  71.             $result = curl_exec($ch);
  72.             curl_close($ch);
  73.             
  74.             $res = json_decode($result, true);
  75.             
  76.             if(!$res["success"]){
  77.                 $valid = false;
  78.                 $form->get('recaptcha')->addError(new FormError($translator->trans('flash_login_01', [], 'website')));
  79.                 $this->addFlash('notice_warning', $translator->trans('flash_login_02', [], 'website'));
  80.             }
  82.             if($valid && $form->isValid()){
  83.                 $user = $em->getRepository("App\Entity\User")->findOneByEmail($pswUser->getEmail());
  84.                 if($user){
  85.                     $user->setOneTimeCode(md5(uniqid()));
  86.                     $em->flush();
  88.                     $message = (new TemplatedEmail())
  89.                         ->subject($this->params->get('subject_recover_password'))
  90.                         ->from($this->params->get('sender_email'))
  91.                         ->to($user->getEmail())
  92.                         ->htmlTemplate('email/password_recovery.html.twig')
  93.                         ->context(['user' => $user]);
  94.                     $mailer->send($message);
  95.                 }
  96.                 
  97.                 $this->addFlash('notice_success', $translator->trans('flash_login_03', [], 'website'));
  98.                 return $this->redirectToRoute('homepage');
  99.             }
  100.             else
  101.                 $this->addFlash('notice_warning', $translator->trans('flash_login_04', [], 'website'));
  102.         }
  104.         return $this->render('default/index.html.twig', array(
  105.             'last_username' => $lastUsername,
  106.             'error' => $error,
  107.             'form' => $form->createView()
  108.         ));
  109.     }
  111.     /**
  112.      * @Route({"en":"/login-check", "it":"/accedi-controllo"}, name="login_check")
  113.      */
  114.     public function loginCheck() {}
  116.     /**
  117.      * @Route({"en":"/logout", "it":"/disconnetti"}, name="logout")
  118.      */
  119.     public function logout() {}
  121.     /**
  122.      * @Route({"en":"/registration", "it":"/registrati"}, name="registration")
  123.      */
  124.     public function registration(Request $request, ValidatorInterface $validator, TranslatorInterface $translator, MailerInterface $mailer)
  125.     {
  126.         $em = $this->mr->getManager();
  127.         $session = $request->getSession();
  128.         
  129.         $agency = new Agency();
  130.         $form = $this->createForm(AgencyRegistrationType::class, $agency);
  131.         $form->handleRequest($request);
  133.         if($form->isSubmitted()){
  134.             
  135.             $valid = true;
  136.             if($valid) $valid = ValidationService::validateNotBlank($validator, $translator, $form->get('userName'));
  137.             if($valid) $valid = ValidationService::validateNotBlank($validator, $translator, $form->get('userSurname'));
  138.             if($valid) $valid = ValidationService::validateNotBlank($validator, $translator, $form->get('userEmail'));
  139.             if($valid) $valid = ValidationService::validateNotDuplicate($validator, $translator, $form->get('userEmail'), $em, "App\Entity\User", ['id' => -1]);
  141.             if($valid) $valid = ValidationService::validateNotDuplicate($validator, $translator, $form->get('vat'), $em, "App\Entity\Agency", ['id' => -1]);
  142.             if($valid) $valid = ValidationService::validateNotBlank($validator, $translator, $form->get('street'));
  143.             if($valid) $valid = ValidationService::validateNotBlank($validator, $translator, $form->get('number'));
  144.             if($valid) $valid = ValidationService::validateNotBlank($validator, $translator, $form->get('zip'));
  145.             if($valid) $valid = ValidationService::validateNotBlank($validator, $translator, $form->get('city'));
  146.             if($valid) $valid = ValidationService::validateNotBlank($validator, $translator, $form->get('province'));
  148.             $path = 'https://www.google.com/recaptcha/api/siteverify?secret=6LcEdHAnAAAAAGDMfuV9qKR-EzPOBx7N24Liqjin&response='.$request->request->get("g-recaptcha-response");
  149.             $ch = curl_init();
  150.             curl_setopt($ch, CURLOPT_HTTPHEADER, array('Content-Type: application/json', 'Accept: application/json'));
  151.             curl_setopt($ch, CURLOPT_URL, $path);
  152.             curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  153.             curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  154.             curl_setopt($ch, CURLOPT_CUSTOMREQUEST, "GET");
  155.             $result = curl_exec($ch);
  156.             curl_close($ch);
  157.             $res = json_decode($result, true);
  158.             if(!$res["success"]){
  159.                 $valid = false;
  160.                 $form->get('recaptcha')->addError(new FormError($translator->trans('flash_registration_01', [], 'website')));
  161.                 $this->addFlash('notice_warning', $translator->trans('flash_registration_02', [], 'website'));
  162.             }
  164.             if($valid && $form->isValid()){
  166.                 $agencyGroup = $em->getRepository('App\Entity\AgencyGroup')->findOneById(1); // Gruppo Holidays
  167.                 $agency->setDirectoryPath(uniqid());
  168.                 $agency->setGroup($agencyGroup);
  169.                 $em->persist($agency);
  171.                 $address = new Address();
  172.                 $address->setAgency($agency);
  173.                 $address->setName('Sede legale');
  174.                 $address->setStreet($form->get('street')->getData());
  175.                 $address->setNumber($form->get('number')->getData());
  176.                 $address->setInternal($form->get('internal')->getData());
  177.                 $address->setStairs($form->get('stairs')->getData());
  178.                 $address->setFloor($form->get('floor')->getData());
  179.                 $address->setZip($form->get('zip')->getData());
  180.                 $address->setCity($form->get('city')->getData());
  181.                 $address->setProvince($form->get('province')->getData());
  182.                 $em->persist($address);
  184.                 $user = new User();
  185.                 $user->setEmail($form->get('userEmail')->getData());
  186.                 $user->setName($form->get('userName')->getData());
  187.                 $user->setSurname($form->get('userSurname')->getData());
  188.                 $user->setRole('ROLE_USER');
  189.                 $user->setDirectoryPath(uniqid());
  190.                 $user->setOneTimeCode(md5(uniqid()));
  191.                 $user->setAdminActive(true);
  192.                 $em->persist($user);
  194.                 $userDetail = new UserDetail();
  195.                 $userDetail->setUser($user);
  196.                 $em->persist($userDetail);
  198.                 $jtau = new JoinTableAgencyUser();
  199.                 $jtau->setAgency($agency);
  200.                 $jtau->setUser($user);
  201.                 $jtau->setActive(true);
  202.                 $jtau->setAgencyAdmin(true);
  203.                 $em->persist($jtau);
  204.                 
  205.                 $em->flush();
  207.                 $message = (new TemplatedEmail())
  208.                     ->subject($this->params->get('subject_registration'))
  209.                     ->from($this->params->get('sender_email'))
  210.                     ->to($user->getEmail())
  211.                     ->htmlTemplate('email/registration.html.twig')
  212.                     ->context(['user' => $user]);
  213.                 $mailer->send($message);
  215.                 $this->addFlash('notice_success', $translator->trans('flash_registration_03', [], 'website'));
  216.                 return $this->redirectToRoute('homepage');
  217.             }
  218.             else
  219.                 $this->addFlash('notice_warning', $translator->trans('flash_registration_04', [], 'website'));
  220.         }
  222.         return $this->render('default/registration.html.twig', array(
  223.             'form' => $form->createView()
  224.         ));
  225.     }
  227.     /**
  228.      * @Route({"en":"/create-password/{oneTimeCode}", "it":"/crea-password/{oneTimeCode}"}, name="password_creation", requirements={"oneTimeCode" = "[\w\d]{32}"})
  229.      */
  230.     public function passwordCreation(Request $request, $oneTimeCode, ValidatorInterface $validator, UserPasswordHasherInterface $passwordHasher, TranslatorInterface $translator)
  231.     {
  232.         //DISCONNETTO L'UTENTE SE CONNESSO
  233.         $this->get('security.token_storage')->setToken(null);
  234.         $em = $this->mr->getManager();
  235.         
  236.         $user = $em->getRepository('App\Entity\User')->findOneByOneTimeCode($oneTimeCode);
  237.         $now = new \DateTime('now');
  240.         $form = $this->createForm(PasswordCreationType::class, $user, array('locale' => $request->getLocale()));
  241.         $form->handleRequest($request);
  243.         if($form->isSubmitted()){
  244.             $valid = true;
  246.             $valid = ValidationService::validateNotBlank($validator, $translator, $form->get('password'));
  248.             if($valid){
  249.                 $psw = $form->get('password')->getData();
  250.                 $count = 0;
  251.                 if(preg_match('/[0-9]/', $psw)) $count++;
  252.                 if(preg_match('/[a-z]/', $psw)) $count++;
  253.                 if(preg_match('/[A-Z]/', $psw)) $count++;
  254.                 if(preg_match('/[\!\#\$\&\(\)\.\+\-_]/', $psw)) $count++;
  255.                 if($count < 3)
  256.                 {
  257.                     $this->addFlash('notice_warning', $translator->trans('flash_create_psw_01', [], 'website'));
  258.                     $valid = false;
  259.                 }
  260.             }
  262.             if($valid && $form->isValid()){
  263.                 $password = $passwordHasher->hashPassword($user, $form->get("password")->getData());
  264.                 $user->setPassword($password);
  265.                 $em->flush();
  266.             
  267.                 $this->addFlash('notice_success', $translator->trans('flash_create_psw_02', [], 'website'));
  268.                 return $this->redirectToRoute("homepage");
  269.             }
  270.         }
  271.         
  272.         return $this->render('default/password_create.html.twig', array(
  273.             'oneTimeCode' => $oneTimeCode,
  274.             'form' => $form->createView()
  275.         ));
  276.     }
  278. }