58 lines
2.1 KiB
PHP
58 lines
2.1 KiB
PHP
<?php
|
|
|
|
namespace App\User\Framework\Security;
|
|
|
|
use App\User\Framework\Entity\User;
|
|
use App\User\Framework\Repository\UserRepository;
|
|
use Drenso\OidcBundle\Exception\OidcException;
|
|
use Drenso\OidcBundle\Model\OidcTokens;
|
|
use Drenso\OidcBundle\Model\OidcUserData;
|
|
use Drenso\OidcBundle\Security\UserProvider\OidcUserProviderInterface;
|
|
use Symfony\Component\PasswordHasher\PasswordHasherInterface;
|
|
use Symfony\Component\Security\Core\Exception\UnsupportedUserException;
|
|
use Symfony\Component\Security\Core\Exception\UserNotFoundException;
|
|
use Symfony\Component\Security\Core\User\OidcUser;
|
|
use Symfony\Component\Security\Core\User\UserInterface;
|
|
|
|
class OidcUserProvider implements OidcUserProviderInterface
|
|
{
|
|
public function __construct(
|
|
private readonly UserRepository $userRepository,
|
|
) {}
|
|
|
|
public function ensureUserExists(string $userIdentifier, OidcUserData $userData, OidcTokens $tokens): void
|
|
{
|
|
$user = $this->userRepository->findOneBy(['email' => $userIdentifier]);
|
|
|
|
if (null === $user) {
|
|
$user = new User()
|
|
->setEmail(!empty($userData->getEmail()) ? $userData->getEmail() : $userData->getSub())
|
|
->setName(!empty($userData->getFullName()) ? $userData->getFullName() : $userData->getGivenName())
|
|
->setPassword('n/a')
|
|
;
|
|
$this->userRepository->getEntityManager()->persist($user);
|
|
$this->userRepository->getEntityManager()->flush();
|
|
}
|
|
}
|
|
|
|
public function loadOidcUser(string $userIdentifier): UserInterface
|
|
{
|
|
return $this->userRepository->findOneBy(['email' => $userIdentifier]);
|
|
}
|
|
|
|
public function refreshUser(UserInterface $user): UserInterface
|
|
{
|
|
return $this->userRepository->findOneBy(['email' => $user->getUserIdentifier()]);
|
|
}
|
|
|
|
public function supportsClass(string $class): bool
|
|
{
|
|
return User::class === $class || OidcUser::class === $class;
|
|
}
|
|
|
|
public function loadUserByIdentifier(string $identifier): UserInterface
|
|
{
|
|
return $this->userRepository->findOneBy(['email' => $identifier]);
|
|
}
|
|
}
|