src/Security/AppAuthentificator.php line 21

Open in your IDE?
  1. <?php
  3. // src/Security/ApiKeyAuthenticator.php
  4. namespace App\Security;
  6. use App\Exception\BadRequestException;
  7. use App\Repository\ApplicationRepository;
  8. use Firebase\JWT\JWT;
  9. use Firebase\JWT\Key;
  10. use Symfony\Component\HttpFoundation\JsonResponse;
  11. use Symfony\Component\HttpFoundation\Request;
  12. use Symfony\Component\HttpFoundation\Response;
  13. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  14. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  15. use Symfony\Component\Security\Core\Exception\CustomUserMessageAuthenticationException;
  16. use Symfony\Component\Security\Http\Authenticator\AbstractAuthenticator;
  17. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  18. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  19. use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
  21. class AppAuthentificator extends AbstractAuthenticator
  22. {
  23.     protected $applicationRepository;
  25.     public function __construct(ApplicationRepository $applicationRepository)
  26.     {
  27.         $this->applicationRepository = $applicationRepository;
  28.     }
  30.     public function supports(Request $request): ?bool
  31.     {
  32.         return $request->headers->has('X-CLIENT-ID');
  33.     }
  35.     public function authenticate(Request $request): Passport
  36.     {
  37.         $clientId = $request->headers->get('X-CLIENT-ID');
  38.         $clientSecret = $request->headers->get('X-CLIENT-SECRET');
  40.         $application = $this->applicationRepository->findOneBy(['client_id' => $clientId]);
  42.         if (!$application || $application->getClientSecret() !== $clientSecret) {
  43.             throw new CustomUserMessageAuthenticationException('Invalid client ID or client secret');
  44.         }
  46.         try {
  47.             JWT::decode($clientSecret, new Key($_ENV["AUTH_SECRET_KEY"], 'HS256'));
  48.         } catch (\Exception $e){
  49.             throw new BadRequestException('Invalid key: '.$e->getMessage());
  50.         }
  52.         return new SelfValidatingPassport(new UserBadge($clientId));
  53.     }
  55.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
  56.     {
  57.         return null;
  58.     }
  60.     public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
  61.     {
  62.         $data = [
  63.             'message' => strtr($exception->getMessageKey(), $exception->getMessageData())
  64.         ];
  66.         return new JsonResponse($data, Response::HTTP_UNAUTHORIZED);
  67.     }
  68. }