class BasicAuthAuthenticator extends AbstractAuthenticator
{

    /**
     * @var UserPasswordHasherInterface
     */
    protected $passwordHasher;

    /**
     * @var ParameterBagInterface
     */
    private $params;

    /**
     * @var LoggerInterface
     */
    private $logger;

    /**
     * @var EntityManagerInterface
     */
    protected $em;

    /**
     * @var RateLimiterFactory
     */
    protected $rateLimiter;


    public function __construct(
        UserPasswordHasherInterface $passwordHasher,
        ParameterBagInterface $params,
        LoggerInterface $logger,
        EntityManagerInterface $entityManagerInterface,
        RateLimiterFactory $authenticationFailedApiLimiter
    ) {
        $this->passwordHasher = $passwordHasher;
        $this->params = $params;
        $this->logger = $logger;
        $this->em = $entityManagerInterface;
        $this->rateLimiter = $authenticationFailedApiLimiter;
    }

    /**    
     *@see AuthenticatorInterface#authenticate(Request)
     * @throws AuthenticationException
     * @throws TooManyRequestsException If Client-IP hit rate-limit
     * @return Passport
     */
    public function authenticate(Request $request): Passport
    {
        $clientIp = $request->getClientIp();
        $limiter = $this->rateLimiter->create($clientIp);

        $ipWhitelist = explode(',', $this->params->get(ConfigurationKeys::AUTH_BRUTEFORCE_WHITELIST_NETS));

        if (!IpUtils::checkIp($clientIp, $ipWhitelist) && false === $limiter->consume(1)->isAccepted()) {
            $this->logger->warning("Authentication failed: Brute-Force limit for IP " . $clientIp . " reached. IP-Address has been temporary blocked/banned now.");
            throw new TooManyRequestsException("Too many failed login attempts. Please try again later!");
        }

        # [...]

        return new Passport(new UserBadge($username), new PasswordCredentials($password));
    }

    /**
     * @see AuthenticatorInterface#onAuthenticationSuccess(Request,TokenInterface,string)
     * @param string $providerKey The provider (i.e. firewall) key
     * @return Response|null Immer null, weil dann der Request einfach weitergeführt wird.
     */
    public function onAuthenticationSuccess(Request $request, TokenInterface $token, $providerKey): ?Response
    {
        /** @var PortalUserInterface $user  */
        $user = $token->getUser();
        $realUser = $user->getUser();
        $clientIp = $request->getClientIp();

        $limiter = $this->rateLimiter->create($clientIp);
        $limiter->reset();

        # [...]

        return null;
    }
    
}