vendor/symfony/security-http/EventListener/PasswordMigratingListener.php line 37

Open in your IDE?
  1. <?php
  3. /*
  4.  * This file is part of the Symfony package.
  5.  *
  6.  * (c) Fabien Potencier <fabien@symfony.com>
  7.  *
  8.  * For the full copyright and license information, please view the LICENSE
  9.  * file that was distributed with this source code.
  10.  */
  12. namespace Symfony\Component\Security\Http\EventListener;
  14. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  15. use Symfony\Component\Security\Core\Encoder\EncoderFactoryInterface;
  16. use Symfony\Component\Security\Core\User\PasswordUpgraderInterface;
  17. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\PasswordUpgradeBadge;
  18. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  19. use Symfony\Component\Security\Http\Authenticator\Passport\UserPassportInterface;
  20. use Symfony\Component\Security\Http\Event\LoginSuccessEvent;
  22. /**
  23.  * @author Wouter de Jong <wouter@wouterj.nl>
  24.  *
  25.  * @final
  26.  * @experimental in 5.2
  27.  */
  28. class PasswordMigratingListener implements EventSubscriberInterface
  29. {
  30.     private $encoderFactory;
  32.     public function __construct(EncoderFactoryInterface $encoderFactory)
  33.     {
  34.         $this->encoderFactory = $encoderFactory;
  35.     }
  37.     public function onLoginSuccess(LoginSuccessEvent $event): void
  38.     {
  39.         $passport = $event->getPassport();
  40.         if (!$passport instanceof UserPassportInterface || !$passport->hasBadge(PasswordUpgradeBadge::class)) {
  41.             return;
  42.         }
  44.         /** @var PasswordUpgradeBadge $badge */
  45.         $badge = $passport->getBadge(PasswordUpgradeBadge::class);
  46.         $plaintextPassword = $badge->getAndErasePlaintextPassword();
  48.         if ('' === $plaintextPassword) {
  49.             return;
  50.         }
  52.         $user = $passport->getUser();
  53.         if (null === $user->getPassword()) {
  54.             return;
  55.         }
  57.         $passwordEncoder = $this->encoderFactory->getEncoder($user);
  58.         if (!$passwordEncoder->needsRehash($user->getPassword())) {
  59.             return;
  60.         }
  62.         $passwordUpgrader = $badge->getPasswordUpgrader();
  64.         if (null === $passwordUpgrader) {
  65.             if (!$passport->hasBadge(UserBadge::class)) {
  66.                 return;
  67.             }
  69.             /** @var UserBadge $userBadge */
  70.             $userBadge = $passport->getBadge(UserBadge::class);
  71.             $userLoader = $userBadge->getUserLoader();
  72.             if (\is_array($userLoader) && $userLoader[0] instanceof PasswordUpgraderInterface) {
  73.                 $passwordUpgrader = $userLoader[0];
  74.             } else {
  75.                 return;
  76.             }
  77.         }
  79.         $passwordUpgrader->upgradePassword($user, $passwordEncoder->encodePassword($plaintextPassword, $user->getSalt()));
  80.     }
  82.     public static function getSubscribedEvents(): array
  83.     {
  84.         return [LoginSuccessEvent::class => 'onLoginSuccess'];
  85.     }
  86. }