vendor/shopware/storefront/Controller/AuthController.php line 217

Open in your IDE?
  1. <?php declare(strict_types=1);
  3. namespace Shopware\Storefront\Controller;
  5. use Shopware\Core\Checkout\Cart\SalesChannel\CartService;
  6. use Shopware\Core\Checkout\Customer\Exception\BadCredentialsException;
  7. use Shopware\Core\Checkout\Customer\Exception\CustomerAuthThrottledException;
  8. use Shopware\Core\Checkout\Customer\Exception\CustomerNotFoundByHashException;
  9. use Shopware\Core\Checkout\Customer\Exception\CustomerNotFoundException;
  10. use Shopware\Core\Checkout\Customer\Exception\CustomerRecoveryHashExpiredException;
  11. use Shopware\Core\Checkout\Customer\Exception\InactiveCustomerException;
  12. use Shopware\Core\Checkout\Customer\SalesChannel\AbstractLoginRoute;
  13. use Shopware\Core\Checkout\Customer\SalesChannel\AbstractLogoutRoute;
  14. use Shopware\Core\Checkout\Customer\SalesChannel\AbstractResetPasswordRoute;
  15. use Shopware\Core\Checkout\Customer\SalesChannel\AbstractSendPasswordRecoveryMailRoute;
  16. use Shopware\Core\Framework\Context;
  17. use Shopware\Core\Framework\DataAbstractionLayer\EntityRepositoryInterface;
  18. use Shopware\Core\Framework\DataAbstractionLayer\Exception\InconsistentCriteriaIdsException;
  19. use Shopware\Core\Framework\DataAbstractionLayer\Search\Criteria;
  20. use Shopware\Core\Framework\DataAbstractionLayer\Search\Filter\EqualsFilter;
  21. use Shopware\Core\Framework\RateLimiter\Exception\RateLimitExceededException;
  22. use Shopware\Core\Framework\Routing\Annotation\RouteScope;
  23. use Shopware\Core\Framework\Routing\Annotation\Since;
  24. use Shopware\Core\Framework\Validation\DataBag\RequestDataBag;
  25. use Shopware\Core\Framework\Validation\Exception\ConstraintViolationException;
  26. use Shopware\Core\System\SalesChannel\SalesChannelContext;
  27. use Shopware\Storefront\Framework\Routing\Annotation\NoStore;
  28. use Shopware\Storefront\Framework\Routing\RequestTransformer;
  29. use Shopware\Storefront\Page\Account\Login\AccountGuestLoginPageLoadedHook;
  30. use Shopware\Storefront\Page\Account\Login\AccountLoginPageLoadedHook;
  31. use Shopware\Storefront\Page\Account\Login\AccountLoginPageLoader;
  32. use Symfony\Component\HttpFoundation\Request;
  33. use Symfony\Component\HttpFoundation\Response;
  34. use Symfony\Component\HttpKernel\Exception\UnauthorizedHttpException;
  35. use Symfony\Component\Routing\Annotation\Route;
  37. /**
  38.  * @Route(defaults={"_routeScope"={"storefront"}})
  39.  *
  40.  * @deprecated tag:v6.5.0 - reason:becomes-internal - Will be internal
  41.  */
  42. class AuthController extends StorefrontController
  43. {
  44.     private AccountLoginPageLoader $loginPageLoader;
  46.     private EntityRepositoryInterface $customerRecoveryRepository;
  48.     private AbstractSendPasswordRecoveryMailRoute $sendPasswordRecoveryMailRoute;
  50.     private AbstractResetPasswordRoute $resetPasswordRoute;
  52.     private AbstractLoginRoute $loginRoute;
  54.     private AbstractLogoutRoute $logoutRoute;
  56.     private CartService $cartService;
  58.     /**
  59.      * @internal
  60.      */
  61.     public function __construct(
  62.         AccountLoginPageLoader $loginPageLoader,
  63.         EntityRepositoryInterface $customerRecoveryRepository,
  64.         AbstractSendPasswordRecoveryMailRoute $sendPasswordRecoveryMailRoute,
  65.         AbstractResetPasswordRoute $resetPasswordRoute,
  66.         AbstractLoginRoute $loginRoute,
  67.         AbstractLogoutRoute $logoutRoute,
  68.         CartService $cartService
  69.     ) {
  70.         $this->loginPageLoader = $loginPageLoader;
  71.         $this->customerRecoveryRepository = $customerRecoveryRepository;
  72.         $this->sendPasswordRecoveryMailRoute = $sendPasswordRecoveryMailRoute;
  73.         $this->resetPasswordRoute = $resetPasswordRoute;
  74.         $this->loginRoute = $loginRoute;
  75.         $this->logoutRoute = $logoutRoute;
  76.         $this->cartService = $cartService;
  77.     }
  79.     /**
  80.      * @Since("6.0.0.0")
  81.      * @Route("/account/login", name="frontend.account.login.page", methods={"GET"})
  82.      * @NoStore
  83.      */
  84.     public function loginPage(Request $request, RequestDataBag $data, SalesChannelContext $context): Response
  85.     {
  86.         /** @var string $redirect */
  87.         $redirect = $request->get('redirectTo', 'frontend.account.home.page');
  89.         $customer = $context->getCustomer();
  91.         if ($customer !== null && $customer->getGuest() === false) {
  92.             $request->request->set('redirectTo', $redirect);
  94.             return $this->createActionResponse($request);
  95.         }
  97.         $page = $this->loginPageLoader->load($request, $context);
  99.         $this->hook(new AccountLoginPageLoadedHook($page, $context));
  101.         return $this->renderStorefront('@Storefront/storefront/page/account/register/index.html.twig', [
  102.             'redirectTo' => $redirect,
  103.             'redirectParameters' => $request->get('redirectParameters', json_encode([])),
  104.             'page' => $page,
  105.             'loginError' => (bool) $request->get('loginError'),
  106.             'waitTime' => $request->get('waitTime'),
  107.             'errorSnippet' => $request->get('errorSnippet'),
  108.             'data' => $data,
  109.         ]);
  110.     }
  112.     /**
  113.      * @Since("6.3.4.1")
  114.      * @Route("/account/guest/login", name="frontend.account.guest.login.page", methods={"GET"})
  115.      * @NoStore
  116.      */
  117.     public function guestLoginPage(Request $request, SalesChannelContext $context): Response
  118.     {
  119.         /** @var string $redirect */
  120.         $redirect = $request->get('redirectTo', 'frontend.account.home.page');
  122.         $customer = $context->getCustomer();
  124.         if ($customer !== null) {
  125.             $request->request->set('redirectTo', $redirect);
  127.             return $this->createActionResponse($request);
  128.         }
  130.         $waitTime = (int) $request->get('waitTime');
  131.         if ($waitTime) {
  132.             $this->addFlash(self::INFO, $this->trans('account.loginThrottled', ['%seconds%' => $waitTime]));
  133.         }
  135.         if ((bool) $request->get('loginError')) {
  136.             $this->addFlash(self::DANGER, $this->trans('account.orderGuestLoginWrongCredentials'));
  137.         }
  139.         $page = $this->loginPageLoader->load($request, $context);
  141.         $this->hook(new AccountGuestLoginPageLoadedHook($page, $context));
  143.         return $this->renderStorefront('@Storefront/storefront/page/account/guest-auth.html.twig', [
  144.             'redirectTo' => $redirect,
  145.             'redirectParameters' => $request->get('redirectParameters', json_encode([])),
  146.             'page' => $page,
  147.         ]);
  148.     }
  150.     /**
  151.      * @Since("6.0.0.0")
  152.      * @Route("/account/logout", name="frontend.account.logout.page", methods={"GET"})
  153.      */
  154.     public function logout(Request $request, SalesChannelContext $context, RequestDataBag $dataBag): Response
  155.     {
  156.         if ($context->getCustomer() === null) {
  157.             return $this->redirectToRoute('frontend.account.login.page');
  158.         }
  160.         try {
  161.             $this->logoutRoute->logout($context, $dataBag);
  162.             $this->addFlash(self::SUCCESS, $this->trans('account.logoutSucceeded'));
  164.             $parameters = [];
  165.         } catch (ConstraintViolationException $formViolations) {
  166.             $parameters = ['formViolations' => $formViolations];
  167.         }
  169.         return $this->redirectToRoute('frontend.account.login.page', $parameters);
  170.     }
  172.     /**
  173.      * @Since("6.0.0.0")
  174.      * @Route("/account/login", name="frontend.account.login", methods={"POST"}, defaults={"XmlHttpRequest"=true})
  175.      */
  176.     public function login(Request $request, RequestDataBag $data, SalesChannelContext $context): Response
  177.     {
  178.         $customer = $context->getCustomer();
  180.         if ($customer !== null && $customer->getGuest() === false) {
  181.             return $this->createActionResponse($request);
  182.         }
  184.         try {
  185.             $token = $this->loginRoute->login($data, $context)->getToken();
  186.             if (!empty($token)) {
  187.                 $this->addCartErrors($this->cartService->getCart($token, $context));
  189.                 return $this->createActionResponse($request);
  190.             }
  191.         } catch (BadCredentialsException | UnauthorizedHttpException | InactiveCustomerException | CustomerAuthThrottledException $e) {
  192.             if ($e instanceof InactiveCustomerException) {
  193.                 $errorSnippet = $e->getSnippetKey();
  194.             }
  196.             if ($e instanceof CustomerAuthThrottledException) {
  197.                 $waitTime = $e->getWaitTime();
  198.             }
  199.         }
  201.         $data->set('password', null);
  203.         return $this->forwardToRoute(
  204.             'frontend.account.login.page',
  205.             [
  206.                 'loginError' => true,
  207.                 'errorSnippet' => $errorSnippet ?? null,
  208.                 'waitTime' => $waitTime ?? null,
  209.             ]
  210.         );
  211.     }
  213.     /**
  214.      * @Since("6.1.0.0")
  215.      * @Route("/account/recover", name="frontend.account.recover.page", methods={"GET"})
  216.      */
  217.     public function recoverAccountForm(Request $request, SalesChannelContext $context): Response
  218.     {
  219.         $page = $this->loginPageLoader->load($request, $context);
  221.         return $this->renderStorefront('@Storefront/storefront/page/account/profile/recover-password.html.twig', [
  222.             'page' => $page,
  223.         ]);
  224.     }
  226.     /**
  227.      * @Since("6.1.0.0")
  228.      * @Route("/account/recover", name="frontend.account.recover.request", methods={"POST"})
  229.      */
  230.     public function generateAccountRecovery(Request $request, RequestDataBag $data, SalesChannelContext $context): Response
  231.     {
  232.         try {
  233.             $data->get('email')
  234.                 ->set('storefrontUrl', $request->attributes->get(RequestTransformer::STOREFRONT_URL));
  236.             $this->sendPasswordRecoveryMailRoute->sendRecoveryMail(
  237.                 $data->get('email')->toRequestDataBag(),
  238.                 $context,
  239.                 false
  240.             );
  242.             $this->addFlash(self::SUCCESS, $this->trans('account.recoveryMailSend'));
  243.         } catch (CustomerNotFoundException $e) {
  244.             $this->addFlash(self::SUCCESS, $this->trans('account.recoveryMailSend'));
  245.         } catch (InconsistentCriteriaIdsException $e) {
  246.             $this->addFlash(self::DANGER, $this->trans('error.message-default'));
  247.         } catch (RateLimitExceededException $e) {
  248.             $this->addFlash(self::INFO, $this->trans('error.rateLimitExceeded', ['%seconds%' => $e->getWaitTime()]));
  249.         }
  251.         return $this->redirectToRoute('frontend.account.recover.page');
  252.     }
  254.     /**
  255.      * @Since("6.1.0.0")
  256.      * @Route("/account/recover/password", name="frontend.account.recover.password.page", methods={"GET"})
  257.      */
  258.     public function resetPasswordForm(Request $request, SalesChannelContext $context): Response
  259.     {
  260.         $page = $this->loginPageLoader->load($request, $context);
  261.         $hash = $request->get('hash');
  263.         if (!$hash) {
  264.             $this->addFlash(self::DANGER, $this->trans('account.passwordHashNotFound'));
  266.             return $this->redirectToRoute('frontend.account.recover.request');
  267.         }
  269.         $customerHashCriteria = new Criteria();
  270.         $customerHashCriteria->addFilter(new EqualsFilter('hash', $hash));
  272.         $customerRecovery = $this->customerRecoveryRepository
  273.             ->search($customerHashCriteria, $context->getContext())
  274.             ->first();
  276.         if ($customerRecovery === null) {
  277.             $this->addFlash(self::DANGER, $this->trans('account.passwordHashNotFound'));
  279.             return $this->redirectToRoute('frontend.account.recover.request');
  280.         }
  282.         if (!$this->checkHash($hash, $context->getContext())) {
  283.             $this->addFlash(self::DANGER, $this->trans('account.passwordHashExpired'));
  285.             return $this->redirectToRoute('frontend.account.recover.request');
  286.         }
  288.         return $this->renderStorefront('@Storefront/storefront/page/account/profile/reset-password.html.twig', [
  289.             'page' => $page,
  290.             'hash' => $hash,
  291.             'formViolations' => $request->get('formViolations'),
  292.         ]);
  293.     }
  295.     /**
  296.      * @Since("6.1.0.0")
  297.      * @Route("/account/recover/password", name="frontend.account.recover.password.reset", methods={"POST"})
  298.      */
  299.     public function resetPassword(RequestDataBag $data, SalesChannelContext $context): Response
  300.     {
  301.         $hash = $data->get('password')->get('hash');
  303.         try {
  304.             $pw = $data->get('password');
  306.             $this->resetPasswordRoute->resetPassword($pw->toRequestDataBag(), $context);
  308.             $this->addFlash(self::SUCCESS, $this->trans('account.passwordChangeSuccess'));
  309.         } catch (ConstraintViolationException $formViolations) {
  310.             $this->addFlash(self::DANGER, $this->trans('account.passwordChangeNoSuccess'));
  312.             return $this->forwardToRoute(
  313.                 'frontend.account.recover.password.page',
  314.                 ['hash' => $hash, 'formViolations' => $formViolations, 'passwordFormViolation' => true]
  315.             );
  316.         } catch (CustomerNotFoundByHashException $e) {
  317.             $this->addFlash(self::DANGER, $this->trans('account.passwordChangeNoSuccess'));
  319.             return $this->forwardToRoute('frontend.account.recover.request');
  320.         } catch (CustomerRecoveryHashExpiredException $e) {
  321.             $this->addFlash(self::DANGER, $this->trans('account.passwordHashExpired'));
  323.             return $this->forwardToRoute('frontend.account.recover.request');
  324.         }
  326.         return $this->redirectToRoute('frontend.account.profile.page');
  327.     }
  329.     private function checkHash(string $hash, Context $context): bool
  330.     {
  331.         $criteria = new Criteria();
  332.         $criteria->addFilter(new EqualsFilter('hash', $hash));
  334.         $recovery = $this->customerRecoveryRepository->search($criteria, $context)->first();
  336.         $validDateTime = (new \DateTime())->sub(new \DateInterval('PT2H'));
  338.         return $recovery && $validDateTime < $recovery->getCreatedAt();
  339.     }
  340. }