← Back
Editing: ResetPasswordController.php
<?php namespace App\Controller; use App\Entity\User; use App\Form\ChangePasswordFormType; use App\Form\ResetPasswordRequestFormType; use Doctrine\ORM\EntityManagerInterface; use Symfony\Bridge\Twig\Mime\TemplatedEmail; use Symfony\Bundle\FrameworkBundle\Controller\AbstractController; use Symfony\Component\HttpFoundation\RedirectResponse; use Symfony\Component\HttpFoundation\Request; use Symfony\Component\HttpFoundation\Response; use Symfony\Component\Mailer\Exception\TransportExceptionInterface; use Symfony\Component\Mailer\MailerInterface; use Symfony\Component\Mime\Address; use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface; use Symfony\Component\Routing\Annotation\Route; use SymfonyCasts\Bundle\ResetPassword\Controller\ResetPasswordControllerTrait; use SymfonyCasts\Bundle\ResetPassword\Exception\ResetPasswordExceptionInterface; use SymfonyCasts\Bundle\ResetPassword\ResetPasswordHelperInterface; #[Route(path: '/reset-password')] class ResetPasswordController extends AbstractController { use ResetPasswordControllerTrait; private ResetPasswordHelperInterface $resetPasswordHelper; public function __construct(ResetPasswordHelperInterface $resetPasswordHelper) { $this->resetPasswordHelper = $resetPasswordHelper; } /** * Display & process form to request a password reset. * * @throws TransportExceptionInterface */ #[Route(path: '', name: 'app_forgot_password_request')] public function request(Request $request, MailerInterface $mailer, EntityManagerInterface $em): Response { $form = $this->createForm(ResetPasswordRequestFormType::class); $form->handleRequest($request); if ($form->isSubmitted() && $form->isValid()) { return $this->processSendingPasswordResetEmail( $form->get('email')->getData(), $mailer, $em ); } return $this->render('reset_password/request.html.twig', [ 'requestForm' => $form->createView(), ]); } /** * Confirmation page after a user has requested a password reset. */ #[Route(path: '/check-email', name: 'app_check_email')] public function checkEmail(): Response { // We prevent users from directly accessing this page if (!$this->canCheckEmail()) { return $this->redirectToRoute('app_forgot_password_request'); } return $this->render('reset_password/check_email.html.twig', [ 'tokenLifetime' => $this->resetPasswordHelper->getTokenLifetime(), ]); } /** * Validates and process the reset URL that the user clicked in their email. */ #[Route(path: '/reset/{token}', name: 'app_reset_password')] public function reset( Request $request, UserPasswordHasherInterface $passwordHasher, EntityManagerInterface $em, ?string $token = null ): Response { if ($token) { // We store the token in session and remove it from the URL, to avoid the URL being // loaded in a browser and potentially leaking the token to 3rd party JavaScript. $this->storeTokenInSession($token); return $this->redirectToRoute('app_reset_password'); } $token = $this->getTokenFromSession(); if (null === $token) { throw $this->createNotFoundException('No reset password token found in the URL or in the session.'); } try { $user = $this->resetPasswordHelper->validateTokenAndFetchUser($token); } catch (ResetPasswordExceptionInterface $e) { $this->addFlash( 'reset_password_error', sprintf( 'There was a problem validating your reset request - %s', $e->getReason() ) ); return $this->redirectToRoute('app_forgot_password_request'); } // The token is valid; allow the user to change their password. $form = $this->createForm(ChangePasswordFormType::class); $form->handleRequest($request); if ($form->isSubmitted() && $form->isValid()) { // A password reset token should be used only once, remove it. $this->resetPasswordHelper->removeResetRequest($token); // Encode the plain password, and set it. $encodedPassword = $passwordHasher->hashPassword( $user, $form->get('plainPassword')->getData() ); $user->setPassword($encodedPassword); $em->flush(); // The session is cleaned up after the password has been changed. $this->cleanSessionAfterReset(); if (in_array('ROLE_AGENT', $user->getArrayRoles())) { return $this->redirectToRoute('redirect_app'); } return $this->redirectToRoute('homepage'); } return $this->render('reset_password/reset.html.twig', [ 'resetForm' => $form->createView(), ]); } /** * @throws TransportExceptionInterface */ private function processSendingPasswordResetEmail( string $emailFormData, MailerInterface $mailer, EntityManagerInterface $em ): RedirectResponse { $user = $em->getRepository(User::class)->findOneBy([ 'email' => $emailFormData, ]); // Marks that you are allowed to see the app_check_email page. $this->setCanCheckEmailInSession(); // Do not reveal whether a user account was found or not. if (!$user) { return $this->redirectToRoute('app_check_email'); } try { $resetToken = $this->resetPasswordHelper->generateResetToken($user); } catch (ResetPasswordExceptionInterface $e) { $this->addFlash( 'reset_password_error', sprintf( 'Il y a eu un problème lors de la réinitialisation de votre mot de passe - %s', $e->getReason() ) ); return $this->redirectToRoute('app_forgot_password_request'); } $email = (new TemplatedEmail()) ->from(new Address('contact@cleanmanager.com', 'Clean Manager')) ->to($user->getEmail()) ->subject('Votre demande de réinitialisation de mot de passe') ->htmlTemplate('reset_password/email.html.twig') ->context([ 'resetToken' => $resetToken, 'tokenLifetime' => $this->resetPasswordHelper->getTokenLifetime(), ]); $mailer->send($email); return $this->redirectToRoute('app_check_email'); } /** * @return Response */ #[Route(path: '/redirect-app', name: 'redirect_app')] public function redirectApp() { return $this->render('reset_password/redirect_app.html.twig'); } }
Save File
Cancel