src/Controller/SecurityController.php line 71

  1. <?php
  3. namespace App\Controller;
  5. use App\Entity\Employee;
  6. use App\Entity\User;
  7. use App\Form\UserPasswordType;
  8. use Doctrine\ORM\EntityManagerInterface;
  9. use Doctrine\Persistence\ManagerRegistry;
  10. use Knp\Snappy\Pdf;
  11. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  12. use Symfony\Component\HttpFoundation\JsonResponse;
  13. use Symfony\Component\HttpFoundation\RedirectResponse;
  14. use Symfony\Component\HttpFoundation\Request;
  15. use Symfony\Component\HttpFoundation\Response;
  16. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  17. use Symfony\Component\Routing\Annotation\Route;
  18. use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
  21. class SecurityController extends AbstractController
  22. {
  23.     /**
  24.      * @var ManagerRegistry $doctrine
  25.      */
  26.     private ManagerRegistry $doctrine;
  28.     /**
  29.      * @param ManagerRegistry $doctrine
  30.      */
  31.     public function __construct(ManagerRegistry $doctrine)
  32.     {
  33.         $this->doctrine = $doctrine;
  34.     }
  36.     /**
  37.      * @Route("/inscription", name="security_registration")
  38.      * @param Request $request
  39.      * @param EntityManagerInterface $manager
  40.      * @param UserPasswordHasherInterface $encoder
  41.      * @return Response
  42.      */
  43.     public function registration(
  44.         Request $request,
  45.         EntityManagerInterface $manager,
  46.         UserPasswordHasherInterface $encoder
  47.     ): Response {
  48.         $user = new User();
  49. //        $form = $this->createForm(RegistrationType::class, $user);
  50. //        $form->handleRequest($request);
  52. //        if ($form->isSubmitted() && $form->isValid()) {
  53. //            $hash = $encoder->encodePassword($user, $user->getPassword());
  54. //            $user->setPassword($hash);
  55. //            $manager->persist($user);
  56. //            $manager->flush();
  57. //
  58. //            return $this->redirectToRoute('security_login');
  59. //        }
  61.         return $this->render('security/registration.html.twig', [
  62. //            'form' => $form->createView()
  63.         ]);
  64.     }
  66.     /**
  67.      * @Route("/login", name="security_login")
  68.      * @param AuthenticationUtils $authenticationUtils
  69.      * @return Response
  70.      */
  71.     public function login(AuthenticationUtils $authenticationUtils): Response
  72.     {
  73.         // diable local login only for prod
  74.         if (strtoupper($this->getParameter('app.env')) === "PROD")
  75.             return $this->redirectToRoute('security_ldap_login');
  77.         // get the login error if there is one
  78.         $error = $authenticationUtils->getLastAuthenticationError();
  80.         // last username entered by the user
  81.         $lastUsername = $authenticationUtils->getLastUsername();
  83.         return $this->render('security/login.html.twig', [
  84.             'last_username' => $lastUsername,
  85.             'error'         => $error,
  86.         ]);
  87.         // return $this->redirectToRoute('home');
  88.     }
  90.     /**
  91.      * @Route("/profile/{id}", name="profile")
  92.      * @param Request $request
  93.      * @param UserPasswordHasherInterface $encoder
  94.      * @param EntityManagerInterface $manager
  95.      * @param int $id
  96.      * @return RedirectResponse|Response
  97.      */
  98.     public function profile(
  99.         Request $request,
  100.         UserPasswordHasherInterface $encoder,
  101.         EntityManagerInterface $manager,
  102.         int $id = -1
  103.     ): RedirectResponse|Response {
  104.         $selfId = false;
  106.         if ($id !== -1 &&
  107.             !$this->isGranted("ROLE_IT") &&
  108.             !$this->isGranted("ROLE_API") &&
  109.             !$this->isGranted("ROLE_MANAGER") &&
  110.             !$this->isGranted("ROLE_RH") &&
  111.             !$this->isGranted("ROLE_MG") &&
  112.             !$this->isGranted("ROLE_ADMIN")
  113.         ) {
  114.             return $this->redirectToRoute('home');
  115.         }
  117.         if ($id !== -1) {
  118.             /**
  119.              * @var Employee $employee
  120.              */
  121.             $employee = $this->doctrine->getRepository(Employee::class)->findOneById($id);
  123.             /**
  124.              * @var User $user
  125.              */
  126.             $user = $employee->getUser();
  127.         } else {
  128.             /**
  129.              * @var User $user
  130.              */
  131.             $user = $this->getUser();
  132.             $employee = $user->getEmployee();
  133.         }
  134.         /**
  135.          * @var User $userConnected
  136.          */
  137.         $userConnected = $this->getUser();
  138.         if ($user != null && $user->getId() === $userConnected->getId()) {
  139.             $selfId = true;
  140.         }
  142.         $form = null;
  144.         if ($selfId === true) {
  145.             $form = $this->createForm(UserPasswordType::class, $user);
  146.             $form->handleRequest($request);
  148.             if ($form->isSubmitted() && $form->isValid()) {
  149.                 $hash = $encoder->hashPassword($user, $user->getPassword());
  150.                 $user->setPassword($hash);
  151.                 $manager->persist($user);
  152.                 $manager->flush();
  154.                 return $this->redirectToRoute('security_ldap_login');
  155.             }
  156.         }
  158.         $renderArg = [
  159.             'user' => $user,
  160.             'employeeByUser' => $employee,
  161.             'percentTasks' => ($employee !== NULL ? $employee->getPercentTasks() : 0),
  162.             'form' => NULL
  163.         ];
  164.         if ($form) {
  165.             $renderArg['form'] = $form->createView();
  166.         }
  168. //        return $this->render('security/profile.html.twig', $renderArg);
  169.         return $this->redirectToRoute('employee', [
  170.             'id' => $employee->getId(),
  171.         ]);
  172.     }
  174.     /**
  175.      * @Route ("/profilepdf/{id}", name="profilepdf")
  176.      * @param EntityManagerInterface $manager
  177.      * @param Pdf $snappy
  178.      * @param int $id
  179.      * @return Response
  180.      */
  181.     public function profilepdf(EntityManagerInterface $manager, Pdf $snappy, int $id = -1): Response
  182.     {
  183.         /**
  184.          * @var User $user
  185.          */
  186.         $user = $this->getUser();
  187.         if ($id !== -1) {
  188.             /**
  189.              * @var Employee $employee
  190.              */
  191.             $employee = $manager->getRepository(Employee::class)->findOneById($id);
  192.         } else {
  193.             /**
  194.              * @var Employee $employee
  195.              */
  196.             $employee = $user->getEmployee();
  197.         }
  198.         $html = $this->renderView('security/profilepdf.html.twig', [
  199.             'employee' => $employee,
  200.         ]);
  201.         $footer = $this->renderView('security/footer-pdf.html.twig');
  202.         $snappy->setOption("enable-local-file-access", true);
  203.         $snappy->setOption('disable-javascript', true);
  205.         return new Response(
  206.             $snappy->getOutputFromHtml($html, array(
  207.                 'footer-html' => $footer
  208.             )),
  209.             200,
  210.                 [
  211.                     "Content-Type" => 'application/pdf',
  212.                     "Content-Disposition" => 'attachement; filename="' . $employee->getName() . '_' . $employee->getFirstname() . '.pdf'
  213.                 ]
  214.             );
  215.     }
  217.     /**
  218.      * @Route("/employeeByUser/image/edition", name="edit_employeeByUser_image")
  219.      * @param EntityManagerInterface $manager
  220.      * @return JsonResponse
  221.      */
  222.     public function ajaxImageEmployeeByUser(EntityManagerInterface $manager): JsonResponse
  223.     {
  224.         if (isset($_FILES['fileAjax'])) {
  225.             $finalName = $_FILES['fileAjax']['name'];
  226.             $tmpname = explode('.', $finalName);
  227.             $newName = $tmpname[0] . '-' . uniqid('', false) . '.' . $tmpname[1];
  228.             $destination = $this->getParameter('kernel.project_dir').'/public/uploads/employee/images/'.$newName;
  229.             move_uploaded_file($_FILES['fileAjax']['tmp_name'], $destination);
  231.             /**
  232.              * @var User $user
  233.              */
  234.             $user = $this->getUser();
  235.             $employeeByUser = $user->getEmployee();
  236.             if ($employeeByUser) {
  237.                 $employeeByUser->setImageFilename($finalName);
  238.                 $manager->persist($employeeByUser);
  239.                 $manager->flush();
  240.             }
  241.             return new JsonResponse($finalName);
  242.         }
  243.         return new JsonResponse();
  244.     }
  246.     /**
  247.      * @Route("/employeeByUser/image/editiontest/{id}", name="edit_employeeByUser_image_test")
  248.      * @param EntityManagerInterface $manager
  249.      * @param int $id
  250.      * @return JsonResponse
  251.      */
  252.     public function ajaxImageEmployeeTest(
  253.         EntityManagerInterface $manager,
  254.         int $id = -1
  255.     ): JsonResponse {
  256.         if (isset($_POST["image"])) {
  257.             $data = $_POST["image"];
  258.             $image_array_1 = explode(";", $data);
  259.             $image_array_2 = explode(",", $image_array_1[1]);
  260.             $extension = explode('/', $image_array_1[0])[1];
  261.             $data = base64_decode($image_array_2[1]);
  263.             $newName =  uniqid('', false) . '.' . $extension;
  264.             $destination = $this->getParameter('kernel.project_dir').'/public/uploads/employee/images/'.$newName;
  266.             file_put_contents($destination, $data);
  268.             $employeeByUser = $this->doctrine->getRepository(Employee::class)->findOneBy(
  269.                 ['id' => $id]
  270.             );
  271.             if ($employeeByUser) {
  272.                 $employeeByUser->setImageFilename($newName);
  273.                 $manager->flush();
  275.                 return new JsonResponse($newName);
  276.             }
  277.             return new JsonResponse("Error : Employee by user no exist.");
  278.         }
  279.         return new JsonResponse("ko");
  280.     }
  282.     /**
  283.      * @Route("/logout", name="security_logout")
  284.      * @Route("/ldap_auth/logout", name="security_ldap_logout")
  285.      */
  286.     public function logout(): void {
  287.         // throw new \Exception('Will be intercepted before getting here');
  288.     }
  290.     /**
  291.      * @Route("/ldap_auth/login", name="security_ldap_login")
  292.      * @param AuthenticationUtils $authenticationUtils
  293.      * @return Response
  294.      */
  295.     public function ldap_login(AuthenticationUtils $authenticationUtils): Response
  296.     {
  297.         // diable lap login only for preprod
  298.         if (strtoupper($this->getParameter('app.env')) === "PREPROD")
  299.             return $this->redirectToRoute('security_login');
  301.         // get the login error if there is one
  302.         $error = $authenticationUtils->getLastAuthenticationError();
  304.         // last username entered by the user
  305.         $lastUsername = $authenticationUtils->getLastUsername();
  307.         return $this->render('security/login_ldap.html.twig', [
  308.             'last_username' => $lastUsername,
  309.             'error'         => $error,
  310.         ]);
  311.         // return $this->redirectToRoute('home');
  312.     }
  313. }