src/Security/User/EmailLinkingTeamMateProvider.php line 57

Open in your IDE?
  1. <?php
  3. namespace App\Security\User;
  5. use BigIdea\IdentityBundle\Entity\TeamMate;
  6. use BigIdea\IdentityBundle\Repository\TeamMateRepository;
  7. use BigIdea\IdentityBundle\Security\Factory\SsoUserFactoryInterface;
  8. use Drenso\OidcBundle\Model\OidcUserData;
  9. use Drenso\OidcBundle\Security\UserProvider\OidcUserProviderInterface;
  10. use Symfony\Component\Security\Core\Exception\AccessDeniedException;
  11. use Symfony\Component\Security\Core\Exception\UnsupportedUserException;
  12. use Symfony\Component\Security\Core\Exception\UserNotFoundException;
  13. use Symfony\Component\Security\Core\User\UserInterface;
  15. /**
  16.  * TeamMate provider that re-links legacy/fixture users by email on first SSO login.
  17.  */
  18. final class EmailLinkingTeamMateProvider implements OidcUserProviderInterface
  19. {
  20.     public function __construct(
  21.         private SsoUserFactoryInterface $factory,
  22.         private TeamMateRepository $repository,
  23.     ) {
  24.     }
  26.     public function refreshUser(UserInterface $user): UserInterface
  27.     {
  28.         if (!$user instanceof TeamMate) {
  29.             throw new UnsupportedUserException(sprintf('Instances of "%s" are not supported.', get_debug_type($user)));
  30.         }
  32.         return $this->loadOidcUser($user->getUserIdentifier());
  33.     }
  35.     public function supportsClass(string $class): bool
  36.     {
  37.         return $class === TeamMate::class;
  38.     }
  40.     public function loadUserByIdentifier(string $identifier): UserInterface
  41.     {
  42.         $user = $this->repository->findByEmail($identifier);
  43.         $this->assertUserFound($user, $identifier);
  45.         if (!$user->isAllowedPasswordAuthentication()) {
  46.             throw new AccessDeniedException();
  47.         }
  49.         return $user;
  50.     }
  52.     public function loadUserByUsername(string $username): UserInterface
  53.     {
  54.         return $this->loadUserByIdentifier($username);
  55.     }
  57.     public function ensureUserExists(string $userIdentifier, OidcUserData $userData): void
  58.     {
  59.         $user = $this->repository->findBySsoIdentifier($userIdentifier);
  61.         if (null === $user) {
  62.             $email = $userData->getEmail();
  63.             if (is_string($email) && '' !== $email) {
  64.                 $user = $this->repository->findByEmail($email);
  65.             }
  67.             if (null === $user) {
  68.                 $user = $this->factory->create($userIdentifier, $userData);
  69.             } else {
  70.                 $this->relinkSsoIdentifier($user, $userIdentifier);
  71.                 $this->factory->update($user, $userData);
  72.             }
  73.         } else {
  74.             $this->factory->update($user, $userData);
  75.         }
  77.         $this->repository->save($user);
  78.     }
  80.     public function loadOidcUser(string $userIdentifier): UserInterface
  81.     {
  82.         $user = $this->repository->findBySsoIdentifier($userIdentifier);
  83.         $this->assertUserFound($user, $userIdentifier);
  85.         return $user;
  86.     }
  88.     private function relinkSsoIdentifier(TeamMate $user, string $ssoIdentifier): void
  89.     {
  90.         $property = new \ReflectionProperty(TeamMate::class, 'ssoIdentifier');
  91.         $property->setValue($user, $ssoIdentifier);
  92.     }
  94.     private function assertUserFound(?UserInterface $user, int|string $identifier): void
  95.     {
  96.         if (null === $user) {
  97.             $ex = new UserNotFoundException();
  98.             $ex->setUserIdentifier((string) $identifier);
  99.             throw $ex;
  100.         }
  101.     }
  102. }