vendor/shopware/platform/src/Storefront/Controller/AuthController.php line 215

Open in your IDE?
  1. <?php declare(strict_types=1);
  3. namespace Shopware\Storefront\Controller;
  5. use Shopware\Core\Checkout\Cart\SalesChannel\CartService;
  6. use Shopware\Core\Checkout\Customer\Exception\BadCredentialsException;
  7. use Shopware\Core\Checkout\Customer\Exception\CustomerNotFoundByHashException;
  8. use Shopware\Core\Checkout\Customer\Exception\CustomerNotFoundException;
  9. use Shopware\Core\Checkout\Customer\Exception\CustomerRecoveryHashExpiredException;
  10. use Shopware\Core\Checkout\Customer\Exception\InactiveCustomerException;
  11. use Shopware\Core\Checkout\Customer\SalesChannel\AbstractLoginRoute;
  12. use Shopware\Core\Checkout\Customer\SalesChannel\AbstractLogoutRoute;
  13. use Shopware\Core\Checkout\Customer\SalesChannel\AbstractResetPasswordRoute;
  14. use Shopware\Core\Checkout\Customer\SalesChannel\AbstractSendPasswordRecoveryMailRoute;
  15. use Shopware\Core\Content\Category\Exception\CategoryNotFoundException;
  16. use Shopware\Core\Framework\Context;
  17. use Shopware\Core\Framework\DataAbstractionLayer\EntityRepositoryInterface;
  18. use Shopware\Core\Framework\DataAbstractionLayer\Exception\InconsistentCriteriaIdsException;
  19. use Shopware\Core\Framework\DataAbstractionLayer\Search\Criteria;
  20. use Shopware\Core\Framework\DataAbstractionLayer\Search\Filter\EqualsFilter;
  21. use Shopware\Core\Framework\Routing\Annotation\RouteScope;
  22. use Shopware\Core\Framework\Routing\Annotation\Since;
  23. use Shopware\Core\Framework\Routing\Exception\MissingRequestParameterException;
  24. use Shopware\Core\Framework\Validation\DataBag\RequestDataBag;
  25. use Shopware\Core\Framework\Validation\Exception\ConstraintViolationException;
  26. use Shopware\Core\System\SalesChannel\SalesChannelContext;
  27. use Shopware\Storefront\Framework\Routing\RequestTransformer;
  28. use Shopware\Storefront\Page\Account\Login\AccountLoginPageLoader;
  29. use Symfony\Component\HttpFoundation\Request;
  30. use Symfony\Component\HttpFoundation\Response;
  31. use Symfony\Component\HttpKernel\Exception\UnauthorizedHttpException;
  32. use Symfony\Component\Routing\Annotation\Route;
  34. /**
  35.  * @RouteScope(scopes={"storefront"})
  36.  */
  37. class AuthController extends StorefrontController
  38. {
  39.     /**
  40.      * @var AccountLoginPageLoader
  41.      */
  42.     private $loginPageLoader;
  44.     /**
  45.      * @var EntityRepositoryInterface
  46.      */
  47.     private $customerRecoveryRepository;
  49.     /**
  50.      * @var AbstractSendPasswordRecoveryMailRoute
  51.      */
  52.     private $sendPasswordRecoveryMailRoute;
  54.     /**
  55.      * @var AbstractResetPasswordRoute
  56.      */
  57.     private $resetPasswordRoute;
  59.     /**
  60.      * @var AbstractLoginRoute
  61.      */
  62.     private $loginRoute;
  64.     /**
  65.      * @var AbstractLogoutRoute
  66.      */
  67.     private $logoutRoute;
  69.     /**
  70.      * @var CartService
  71.      */
  72.     private $cartService;
  74.     public function __construct(
  75.         AccountLoginPageLoader $loginPageLoader,
  76.         EntityRepositoryInterface $customerRecoveryRepository,
  77.         AbstractSendPasswordRecoveryMailRoute $sendPasswordRecoveryMailRoute,
  78.         AbstractResetPasswordRoute $resetPasswordRoute,
  79.         AbstractLoginRoute $loginRoute,
  80.         AbstractLogoutRoute $logoutRoute,
  81.         CartService $cartService
  82.     ) {
  83.         $this->loginPageLoader = $loginPageLoader;
  84.         $this->customerRecoveryRepository = $customerRecoveryRepository;
  85.         $this->sendPasswordRecoveryMailRoute = $sendPasswordRecoveryMailRoute;
  86.         $this->resetPasswordRoute = $resetPasswordRoute;
  87.         $this->loginRoute = $loginRoute;
  88.         $this->logoutRoute = $logoutRoute;
  89.         $this->cartService = $cartService;
  90.     }
  92.     /**
  93.      * @Since("6.0.0.0")
  94.      * @Route("/account/login", name="frontend.account.login.page", methods={"GET"})
  95.      */
  96.     public function loginPage(Request $request, RequestDataBag $data, SalesChannelContext $context): Response
  97.     {
  98.         /** @var string $redirect */
  99.         $redirect = $request->get('redirectTo', 'frontend.account.home.page');
  101.         $customer = $context->getCustomer();
  103.         if ($customer !== null && $customer->getGuest() === false) {
  104.             $request->request->set('redirectTo', $redirect);
  106.             return $this->createActionResponse($request);
  107.         }
  109.         $page = $this->loginPageLoader->load($request, $context);
  111.         return $this->renderStorefront('@Storefront/storefront/page/account/register/index.html.twig', [
  112.             'redirectTo' => $redirect,
  113.             'redirectParameters' => $request->get('redirectParameters', json_encode([])),
  114.             'page' => $page,
  115.             'loginError' => (bool) $request->get('loginError'),
  116.             'errorSnippet' => $request->get('errorSnippet'),
  117.             'data' => $data,
  118.         ]);
  119.     }
  121.     /**
  122.      * @Since("6.3.4.1")
  123.      * @Route("/account/guest/login", name="frontend.account.guest.login.page", methods={"GET"})
  124.      */
  125.     public function guestLoginPage(Request $request, SalesChannelContext $context): Response
  126.     {
  127.         /** @var string $redirect */
  128.         $redirect = $request->get('redirectTo', 'frontend.account.home.page');
  130.         $customer = $context->getCustomer();
  132.         if ($customer !== null) {
  133.             $request->request->set('redirectTo', $redirect);
  135.             return $this->createActionResponse($request);
  136.         }
  138.         if ((bool) $request->get('loginError')) {
  139.             $this->addFlash(self::DANGER, $this->trans('account.orderGuestLoginWrongCredentials'));
  140.         }
  142.         $page = $this->loginPageLoader->load($request, $context);
  144.         return $this->renderStorefront('@Storefront/storefront/page/account/guest-auth.html.twig', [
  145.             'redirectTo' => $redirect,
  146.             'redirectParameters' => $request->get('redirectParameters', json_encode([])),
  147.             'page' => $page,
  148.         ]);
  149.     }
  151.     /**
  152.      * @Since("6.0.0.0")
  153.      * @Route("/account/logout", name="frontend.account.logout.page", methods={"GET"})
  154.      */
  155.     public function logout(Request $request, SalesChannelContext $context, RequestDataBag $dataBag): Response
  156.     {
  157.         if ($context->getCustomer() === null) {
  158.             return $this->redirectToRoute('frontend.account.login.page');
  159.         }
  161.         try {
  162.             $this->logoutRoute->logout($context, $dataBag);
  163.             $this->addFlash(self::SUCCESS, $this->trans('account.logoutSucceeded'));
  165.             $parameters = [];
  166.         } catch (ConstraintViolationException $formViolations) {
  167.             $parameters = ['formViolations' => $formViolations];
  168.         }
  170.         return $this->redirectToRoute('frontend.account.login.page', $parameters);
  171.     }
  173.     /**
  174.      * @Since("6.0.0.0")
  175.      * @Route("/account/login", name="frontend.account.login", methods={"POST"}, defaults={"XmlHttpRequest"=true})
  176.      */
  177.     public function login(Request $request, RequestDataBag $data, SalesChannelContext $context): Response
  178.     {
  179.         if ($context->getCustomer()) {
  180.             return $this->createActionResponse($request);
  181.         }
  183.         try {
  184.             $token = $this->loginRoute->login($data, $context)->getToken();
  185.             if (!empty($token)) {
  186.                 $this->addCartErrors($this->cartService->getCart($token, $context));
  188.                 return $this->createActionResponse($request);
  189.             }
  190.         } catch (BadCredentialsException | UnauthorizedHttpException | InactiveCustomerException $e) {
  191.             if ($e instanceof InactiveCustomerException) {
  192.                 $errorSnippet = $e->getSnippetKey();
  193.             }
  194.         }
  196.         $data->set('password', null);
  198.         return $this->forwardToRoute(
  199.             'frontend.account.login.page',
  200.             [
  201.                 'loginError' => true,
  202.                 'errorSnippet' => $errorSnippet ?? null,
  203.             ]
  204.         );
  205.     }
  207.     /**
  208.      * @Since("6.1.0.0")
  209.      * @Route("/account/recover", name="frontend.account.recover.page", methods={"GET"})
  210.      *
  211.      * @throws CategoryNotFoundException
  212.      * @throws InconsistentCriteriaIdsException
  213.      * @throws MissingRequestParameterException
  214.      */
  215.     public function recoverAccountForm(Request $request, SalesChannelContext $context): Response
  216.     {
  217.         $page = $this->loginPageLoader->load($request, $context);
  219.         return $this->renderStorefront('@Storefront/storefront/page/account/profile/recover-password.html.twig', [
  220.             'page' => $page,
  221.         ]);
  222.     }
  224.     /**
  225.      * @Since("6.1.0.0")
  226.      * @Route("/account/recover", name="frontend.account.recover.request", methods={"POST"})
  227.      */
  228.     public function generateAccountRecovery(Request $request, RequestDataBag $data, SalesChannelContext $context): Response
  229.     {
  230.         try {
  231.             $data->get('email')
  232.                 ->set('storefrontUrl', $request->attributes->get(RequestTransformer::STOREFRONT_URL));
  234.             $this->sendPasswordRecoveryMailRoute->sendRecoveryMail(
  235.                 $data->get('email')->toRequestDataBag(),
  236.                 $context,
  237.                 false
  238.             );
  240.             $this->addFlash(self::SUCCESS, $this->trans('account.recoveryMailSend'));
  241.         } catch (CustomerNotFoundException $e) {
  242.             $this->addFlash(self::SUCCESS, $this->trans('account.recoveryMailSend'));
  243.         } catch (InconsistentCriteriaIdsException $e) {
  244.             $this->addFlash(self::DANGER, $this->trans('error.message-default'));
  245.         }
  247.         return $this->redirectToRoute('frontend.account.recover.page');
  248.     }
  250.     /**
  251.      * @Since("6.1.0.0")
  252.      * @Route("/account/recover/password", name="frontend.account.recover.password.page", methods={"GET"})
  253.      *
  254.      * @throws CategoryNotFoundException
  255.      * @throws InconsistentCriteriaIdsException
  256.      * @throws MissingRequestParameterException
  257.      */
  258.     public function resetPasswordForm(Request $request, SalesChannelContext $context): Response
  259.     {
  260.         $page = $this->loginPageLoader->load($request, $context);
  261.         $hash = $request->get('hash');
  263.         if (!$hash) {
  264.             $this->addFlash(self::DANGER, $this->trans('account.passwordHashNotFound'));
  266.             return $this->redirectToRoute('frontend.account.recover.request');
  267.         }
  269.         $customerHashCriteria = new Criteria();
  270.         $customerHashCriteria->addFilter(new EqualsFilter('hash', $hash));
  272.         $customerRecovery = $this->customerRecoveryRepository
  273.             ->search($customerHashCriteria, $context->getContext())
  274.             ->first();
  276.         if ($customerRecovery === null) {
  277.             $this->addFlash(self::DANGER, $this->trans('account.passwordHashNotFound'));
  279.             return $this->redirectToRoute('frontend.account.recover.request');
  280.         }
  282.         if (!$this->checkHash($hash, $context->getContext())) {
  283.             $this->addFlash(self::DANGER, $this->trans('account.passwordHashExpired'));
  285.             return $this->redirectToRoute('frontend.account.recover.request');
  286.         }
  288.         return $this->renderStorefront('@Storefront/storefront/page/account/profile/reset-password.html.twig', [
  289.             'page' => $page,
  290.             'hash' => $hash,
  291.             'formViolations' => $request->get('formViolations'),
  292.         ]);
  293.     }
  295.     /**
  296.      * @Since("6.1.0.0")
  297.      * @Route("/account/recover/password", name="frontend.account.recover.password.reset", methods={"POST"})
  298.      *
  299.      * @throws InconsistentCriteriaIdsException
  300.      */
  301.     public function resetPassword(RequestDataBag $data, SalesChannelContext $context): Response
  302.     {
  303.         $hash = $data->get('password')->get('hash');
  305.         try {
  306.             $pw = $data->get('password');
  308.             $this->resetPasswordRoute->resetPassword($pw->toRequestDataBag(), $context);
  310.             $this->addFlash(self::SUCCESS, $this->trans('account.passwordChangeSuccess'));
  311.         } catch (ConstraintViolationException $formViolations) {
  312.             $this->addFlash(self::DANGER, $this->trans('account.passwordChangeNoSuccess'));
  314.             return $this->forwardToRoute(
  315.                 'frontend.account.recover.password.page',
  316.                 ['hash' => $hash, 'formViolations' => $formViolations, 'passwordFormViolation' => true]
  317.             );
  318.         } catch (CustomerNotFoundByHashException $e) {
  319.             $this->addFlash(self::DANGER, $this->trans('account.passwordChangeNoSuccess'));
  321.             return $this->forwardToRoute('frontend.account.recover.request');
  322.         } catch (CustomerRecoveryHashExpiredException $e) {
  323.             $this->addFlash(self::DANGER, $this->trans('account.passwordHashExpired'));
  325.             return $this->forwardToRoute('frontend.account.recover.request');
  326.         }
  328.         return $this->redirectToRoute('frontend.account.profile.page');
  329.     }
  331.     private function checkHash(string $hash, Context $context): bool
  332.     {
  333.         $criteria = new Criteria();
  334.         $criteria->addFilter(new EqualsFilter('hash', $hash));
  336.         $recovery = $this->customerRecoveryRepository->search($criteria, $context)->first();
  338.         $validDateTime = (new \DateTime())->sub(new \DateInterval('PT2H'));
  340.         return $recovery && $validDateTime < $recovery->getCreatedAt();
  341.     }
  342. }