Ability to authentication a User directly

symfony · norberttech · Jul 5, 2014 · Jul 5, 2014 · Jul 5, 2014 · Jul 5, 2014
commit af1f9622228c48635fc74b06e670a0a0a8397a2b
diff --git a/src/Symfony/Bundle/SecurityBundle/Resources/config/security.xml b/src/Symfony/Bundle/SecurityBundle/Resources/config/security.xml
@@ -47,6 +47,8 @@
         <parameter key="security.validator.user_password.class">Symfony\Component\Security\Core\Validator\Constraints\UserPasswordValidator</parameter>
 
         <parameter key="security.expression_language.class">Symfony\Component\Security\Core\Authorization\ExpressionLanguage</parameter>
+
+        <parameter key="security.login_manager.class">Symfony\Component\Security\Http\Login\LoginManager</parameter>
     </parameters>
 
     <services>
@@ -151,5 +153,14 @@
             <argument type="service" id="security.context" />
             <argument type="service" id="security.encoder_factory" />
         </service>
+
+        <!-- Login Manager -->
+        <service id="security.login_manager" class="%security.login_manager.class%">
+            <argument type="service" id="security.context" />
+            <argument type="service" id="security.user_checker" />
+            <argument type="service" id="request_stack" />
+            <argument type="service" id="security.authentication.session_strategy" />
+            <argument type="service" id="security.rememberme.resolver" />
+        </service>
     </services>
 </container>
diff --git a/src/Symfony/Bundle/SecurityBundle/Resources/config/security_rememberme.xml b/src/Symfony/Bundle/SecurityBundle/Resources/config/security_rememberme.xml
@@ -14,6 +14,8 @@
         <parameter key="security.authentication.rememberme.services.simplehash.class">Symfony\Component\Security\Http\RememberMe\TokenBasedRememberMeServices</parameter>
 
         <parameter key="security.rememberme.response_listener.class">Symfony\Component\Security\Http\RememberMe\ResponseListener</parameter>
+
+        <parameter key="security.rememberme.resolver.class">Symfony\Bundle\SecurityBundle\Security\Http\RememberMe\RememberMeServicesResolver</parameter>
     </parameters>
 
     <services>
@@ -57,6 +59,10 @@
         <service id="security.rememberme.response_listener" class="%security.rememberme.response_listener.class%">
             <tag name="kernel.event_subscriber" />
         </service>
+
+        <service id="security.rememberme.resolver" class="%security.rememberme.resolver.class%">
+            <argument type="service" id="service_container" />
+        </service>
     </services>
 
 </container>
diff --git a/src/Symfony/Bundle/SecurityBundle/Security/Http/RememberMe/RememberMeServicesResolver.php b/src/Symfony/Bundle/SecurityBundle/Security/Http/RememberMe/RememberMeServicesResolver.php
@@ -0,0 +1,52 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <[email protected]>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Bundle\SecurityBundle\Security\Http\RememberMe;
+
+use Symfony\Component\DependencyInjection\ContainerInterface;
+use Symfony\Component\Security\Http\RememberMe\RememberMeServicesInterface;
+use Symfony\Component\Security\Http\RememberMe\RememberMeServicesResolverInterface;
+
+class RememberMeServicesResolver implements RememberMeServicesResolverInterface
+{
+    /**
+     * @var \Symfony\Component\DependencyInjection\ContainerInterface
+     */
+    private $serviceContainer;
+
+    /**
+     * @param ContainerInterface $serviceContainer
+     */
+    public function __construct(ContainerInterface $serviceContainer)
+    {
+        $this->serviceContainer = $serviceContainer;
+    }
+
+    /**
+     * @param $providerKey
+     * @return null|RememberMeServicesInterface
+     */
+    public function resolve($providerKey)
+    {
+        $rememberMeServices = null;
+        if ($this->serviceContainer->has('security.authentication.rememberme.services.persistent.'.$providerKey)) {
+            $rememberMeServices = $this->serviceContainer->get('security.authentication.rememberme.services.persistent.'.$providerKey);
+        } elseif ($this->serviceContainer->has('security.authentication.rememberme.services.simplehash.'.$providerKey)) {
+            $rememberMeServices = $this->serviceContainer->get('security.authentication.rememberme.services.simplehash.'.$providerKey);
+        }
+
+        if ($rememberMeServices instanceof RememberMeServicesInterface) {
+            return $rememberMeServices;
+        }
+
+        return null;
+    }
+}
diff --git a/.../SecurityBundle/Tests/Functional/Bundle/LoginManagerBundle/Controller/LoginController.php b/.../SecurityBundle/Tests/Functional/Bundle/LoginManagerBundle/Controller/LoginController.php
@@ -0,0 +1,32 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <[email protected]>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Bundle\SecurityBundle\Tests\Functional\Bundle\LoginManagerBundle\Controller;
+
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\DependencyInjection\ContainerAware;
+use Symfony\Component\Security\Core\User\User;
+
+class LoginController extends ContainerAware
+{
+    public function loginAction()
+    {
+        $user = new User('norzechowicz', 'password123');
+        $this->container->get('security.login_manager')->loginUser('secured_area', $user);
+
+        return new Response();
+    }
+
+    public function loginCheckAction()
+    {
+        return new Response('', 400);
+    }
+}
diff --git a/...ecurityBundle/Tests/Functional/Bundle/LoginManagerBundle/Controller/SecuredController.php b/...ecurityBundle/Tests/Functional/Bundle/LoginManagerBundle/Controller/SecuredController.php
@@ -0,0 +1,24 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <[email protected]>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Bundle\SecurityBundle\Tests\Functional\Bundle\LoginManagerBundle\Controller;
+
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\DependencyInjection\ContainerAware;
+use Symfony\Component\Security\Core\User\User;
+
+class SecuredController extends ContainerAware
+{
+    public function indexAction()
+    {
+        return new Response("Secured area");
+    }
+}
diff --git a/...y/Bundle/SecurityBundle/Tests/Functional/Bundle/LoginManagerBundle/LoginManagerBundle.php b/...y/Bundle/SecurityBundle/Tests/Functional/Bundle/LoginManagerBundle/LoginManagerBundle.php
@@ -0,0 +1,18 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <[email protected]>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Bundle\SecurityBundle\Tests\Functional\Bundle\LoginManagerBundle;
+
+use Symfony\Component\HttpKernel\Bundle\Bundle;
+
+class LoginManagerBundle extends Bundle
+{
+}
diff --git a/...le/SecurityBundle/Tests/Functional/Bundle/LoginManagerBundle/Resources/config/routing.yml b/...le/SecurityBundle/Tests/Functional/Bundle/LoginManagerBundle/Resources/config/routing.yml
@@ -0,0 +1,13 @@
+login:
+    path:     /login
+    defaults: { _controller: LoginManagerBundle:Login:login }
+
+login_check:
+    path:     /login_check
+    defaults: { _controller: LoginManagerBundle:Login:loginCheck }
+
+secured_index:
+    path:     /secured/index
+    defaults: { _controller: LoginManagerBundle:Secured:index }
+
+
diff --git a/src/Symfony/Bundle/SecurityBundle/Tests/Functional/LoginManagerTestCase.php b/src/Symfony/Bundle/SecurityBundle/Tests/Functional/LoginManagerTestCase.php
@@ -0,0 +1,27 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <[email protected]>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Bundle\SecurityBundle\Tests\Functional;
+
+/**
+ * @group functional
+ */
+class LoginManagerTestCase extends WebTestCase
+{
+    public function testLoginUserInController()
+    {
+        $client = $this->createClient(array('test_case' => 'LoginManager'));
+        $client->insulate();
+        $client->request('GET', '/login');
+        $client->request('GET', '/secured/index');
+        $this->assertEquals('Secured area', $client->getResponse()->getContent());
+    }
+}
diff --git a/src/Symfony/Bundle/SecurityBundle/Tests/Functional/app/LoginManager/bundles.php b/src/Symfony/Bundle/SecurityBundle/Tests/Functional/app/LoginManager/bundles.php
@@ -0,0 +1,8 @@
+<?php
+
+return array(
+    new Symfony\Bundle\FrameworkBundle\FrameworkBundle(),
+    new Symfony\Bundle\SecurityBundle\SecurityBundle(),
+    new Symfony\Bundle\TwigBundle\TwigBundle(),
+    new Symfony\Bundle\SecurityBundle\Tests\Functional\Bundle\LoginManagerBundle\LoginManagerBundle(),
+);
diff --git a/src/Symfony/Bundle/SecurityBundle/Tests/Functional/app/LoginManager/config.yml b/src/Symfony/Bundle/SecurityBundle/Tests/Functional/app/LoginManager/config.yml
@@ -0,0 +1,24 @@
+imports:
+    - { resource: ./../config/default.yml }
+
+security:
+    encoders:
+        Symfony\Component\Security\Core\User\User: plaintext
+
+    providers:
+        in_memory:
+            memory:
+                users:
+                    norzechowicz: { password: test, roles: [ROLE_USER] }
+
+    firewalls:
+        secured_area:
+            pattern: ^/
+            form_login:
+                check_path: /login_check
+                default_target_path: /secured/index
+            anonymous: ~
+
+    access_control:
+        - { path: ^/login$, roles: IS_AUTHENTICATED_ANONYMOUSLY }
+        - { path: .*, roles: ROLE_USER }
diff --git a/src/Symfony/Bundle/SecurityBundle/Tests/Functional/app/LoginManager/routing.yml b/src/Symfony/Bundle/SecurityBundle/Tests/Functional/app/LoginManager/routing.yml
@@ -0,0 +1,2 @@
+_csrf_form_login_bundle:
+    resource: @LoginManagerBundle/Resources/config/routing.yml
diff --git a/src/Symfony/Component/Security/Http/Login/LoginManager.php b/src/Symfony/Component/Security/Http/Login/LoginManager.php
@@ -0,0 +1,105 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <[email protected]>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\Security\Http\Login;
+
+use Symfony\Component\HttpFoundation\RequestStack;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken;
+use Symfony\Component\Security\Core\SecurityContextInterface;
+use Symfony\Component\Security\Core\User\UserCheckerInterface;
+use Symfony\Component\Security\Core\User\UserInterface;
+use Symfony\Component\Security\Http\RememberMe\RememberMeServicesResolverInterface;
+use Symfony\Component\Security\Http\Session\SessionAuthenticationStrategyInterface;
+
+class LoginManager implements LoginManagerInterface
+{
+    /**
+     * @var SecurityContextInterface
+     */
+    private $securityContext;
+
+    /**
+     * @var UserCheckerInterface
+     */
+    private $userChecker;
+
+    /**
+     * @var RequestStack
+     */
+    private $requestStack;
+
+    /**
+     * @var SessionAuthenticationStrategyInterface
+     */
+    private $sessionAuthenticationStrategy;
+    /**
+     * @var RememberMeServicesResolverInterface
+     */
+    private $rememberMeServicesResolver;
+
+    /**
+     * @param SecurityContextInterface $securityContext
+     * @param UserCheckerInterface $userChecker
+     * @param RequestStack $requestStack
+     * @param SessionAuthenticationStrategyInterface $sessionAuthenticationStrategy
+     * @param RememberMeServicesResolverInterface $rememberMeServicesResolver
+     */
+    public function __construct(
+        SecurityContextInterface $securityContext,
+        UserCheckerInterface $userChecker,
+        RequestStack $requestStack,
+        SessionAuthenticationStrategyInterface $sessionAuthenticationStrategy,
+        RememberMeServicesResolverInterface $rememberMeServicesResolver
+    ) {
+        $this->securityContext = $securityContext;
+        $this->userChecker = $userChecker;
+        $this->requestStack = $requestStack;
+        $this->sessionAuthenticationStrategy = $sessionAuthenticationStrategy;
+        $this->rememberMeServicesResolver = $rememberMeServicesResolver;
+    }
+
+    /**
+     * @param $firewallName
+     * @param UserInterface $user
+     * @param Response $response
+     */
+    public function loginUser($firewallName, UserInterface $user, Response $response = null)
+    {
+        $this->userChecker->checkPostAuth($user);
+        $token = $this->createToken($firewallName, $user);
+
+        $request = $this->requestStack->getMasterRequest();
+        if (!is_null($request)) {
+            $this->sessionAuthenticationStrategy->onAuthentication($request, $token);
+
+            if (!is_null($response)) {
+                $rememberMeServices = $this->rememberMeServicesResolver->resolve($firewallName);
+
+                if (!is_null($rememberMeServices)) {
+                    $rememberMeServices->loginSuccess($request, $response, $token);
+                }
+            }
+        }
+
+        $this->securityContext->setToken($token);
+    }
+
+    /**
+     * @param $firewall
+     * @param UserInterface $user
+     * @return UsernamePasswordToken
+     */
+    protected function createToken($firewall, UserInterface $user)
+    {
+        return new UsernamePasswordToken($user, null, $firewall, $user->getRoles());
+    }
+}
diff --git a/src/Symfony/Component/Security/Http/Login/LoginManagerInterface.php b/src/Symfony/Component/Security/Http/Login/LoginManagerInterface.php
@@ -0,0 +1,19 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <[email protected]>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\Security\Http\Login;
+
+use Symfony\Component\Security\Core\User\UserInterface;
+
+interface LoginManagerInterface
+{
+    public function loginUser($firewallName, UserInterface $user);
+}
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		_csrf_form_login_bundle:
		resource: @LoginManagerBundle/Resources/config/routing.yml