src/Controller/ResetPasswordController.php line 38

Open in your IDE?
  1. <?php
  2. namespace App\Controller;
  3. use App\Entity\User;
  4. use App\Form\ChangePasswordFormType;
  5. use App\Form\ResetPasswordRequestFormType;
  6. use Doctrine\ORM\EntityManagerInterface;
  7. use Symfony\Bridge\Twig\Mime\TemplatedEmail;
  8. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  9. use Symfony\Component\HttpFoundation\RedirectResponse;
  10. use Symfony\Component\HttpFoundation\Request;
  11. use Symfony\Component\HttpFoundation\Response;
  12. use Symfony\Component\Mailer\MailerInterface;
  13. use Symfony\Component\Mime\Address;
  14. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  15. use Symfony\Component\Routing\Annotation\Route;
  16. use Symfony\Contracts\Translation\TranslatorInterface;
  17. use SymfonyCasts\Bundle\ResetPassword\Controller\ResetPasswordControllerTrait;
  18. use SymfonyCasts\Bundle\ResetPassword\Exception\ResetPasswordExceptionInterface;
  19. use SymfonyCasts\Bundle\ResetPassword\ResetPasswordHelperInterface;
  20. #[Route('/reset-password')]
  21. class ResetPasswordController extends AbstractController
  22. {
  23.     use ResetPasswordControllerTrait;
  24.     public function __construct(
  25.         private ResetPasswordHelperInterface $resetPasswordHelper,
  26.         private EntityManagerInterface $entityManager
  27.     ) {
  28.     }
  29.     /**
  30.      * Display & process form to request a password reset.
  31.      */
  32.     #[Route(''name'app_forgot_password_request')]
  33.     public function request(Request $requestMailerInterface $mailerTranslatorInterface $translator): Response
  34.     {
  35.         $form $this->createForm(ResetPasswordRequestFormType::class);
  36.         $form->handleRequest($request);
  37.         if ($form->isSubmitted() && $form->isValid()) {
  38.             return $this->processSendingPasswordResetEmail(
  39.                 $form->get('email')->getData(),
  40.                 $mailer,
  41.                 $translator
  42.             );
  43.         }
  44.         return $this->render('reset_password/request.html.twig', [
  45.             'requestForm' => $form->createView(),
  46.         ]);
  47.     }
  48.     private function processSendingPasswordResetEmail(string $emailFormDataMailerInterface $mailerTranslatorInterface $translator): RedirectResponse
  49.     {
  50.         $user $this->entityManager->getRepository(User::class)->findOneBy([
  51.             'email' => $emailFormData,
  52.         ]);
  53.         // Do not reveal whether a user account was found or not.
  54.         if (!$user) {
  55.             return $this->redirectToRoute('app_check_email');
  56.         }
  57.         try {
  58.             $resetToken $this->resetPasswordHelper->generateResetToken($user);
  59.         } catch (ResetPasswordExceptionInterface $e) {
  60.             // If you want to tell the user why a reset email was not sent, uncomment
  61.             // the lines below and change the redirect to 'app_forgot_password_request'.
  62.             // Caution: This may reveal if a user is registered or not.
  63.             //
  64.             $this->addFlash(
  65.                 'reset_password_error',
  66.                 sprintf(
  67.                     '%s - %s',
  68.                     $translator->trans(ResetPasswordExceptionInterface::MESSAGE_PROBLEM_HANDLE, [], 'ResetPasswordBundle'),
  69.                     $translator->trans($e->getReason(), [], 'ResetPasswordBundle')
  70.                 )
  71.             );
  72.             return $this->redirectToRoute('app_check_email');
  73.         }
  74.         $email = (new TemplatedEmail())
  75.             ->from(new Address('hello@styleesh.co''AssoPro'))
  76.             ->to($user->getEmail())
  77.             ->subject('Your password reset request')
  78.             ->htmlTemplate('reset_password/email.html.twig')
  79.             ->context([
  80.                 'resetToken' => $resetToken,
  81.             ]);
  82.         $mailer->send($email);
  83.         // Store the token object in session for retrieval in check-email route.
  84.         $this->setTokenObjectInSession($resetToken);
  85.         return $this->redirectToRoute('app_check_email');
  86.     }
  87.     /**
  88.      * Confirmation page after a user has requested a password reset.
  89.      */
  90.     #[Route('/check-email'name'app_check_email')]
  91.     public function checkEmail(): Response
  92.     {
  93.         // Generate a fake token if the user does not exist or someone hit this page directly.
  94.         // This prevents exposing whether or not a user was found with the given email address or not
  95.         if (null === ($resetToken $this->getTokenObjectFromSession())) {
  96.             $resetToken $this->resetPasswordHelper->generateFakeResetToken();
  97.         }
  98.         return $this->render('reset_password/check_email.html.twig', [
  99.             'resetToken' => $resetToken,
  100.         ]);
  101.     }
  102.     /**
  103.      * Validates and process the reset URL that the user clicked in their email.
  104.      */
  105.     #[Route('/reset/{token}'name'app_reset_password')]
  106.     public function reset(Request $requestUserPasswordHasherInterface $passwordHasherTranslatorInterface $translatorstring $token null): Response
  107.     {
  108.         if (null === $token) {
  109.             throw $this->createNotFoundException('No reset password token found in the URL or in the session.');
  110.         }
  111.         try {
  112.             $user $this->resetPasswordHelper->validateTokenAndFetchUser($token);
  113.         } catch (ResetPasswordExceptionInterface $e) {
  114.             $this->addFlash(
  115.                 'reset_password_error',
  116.                 sprintf(
  117.                     '%s - %s',
  118.                     $translator->trans(ResetPasswordExceptionInterface::MESSAGE_PROBLEM_VALIDATE, [], 'ResetPasswordBundle'),
  119.                     $translator->trans($e->getReason(), [], 'ResetPasswordBundle')
  120.                 )
  121.             );
  122.             return $this->redirectToRoute('app_forgot_password_request');
  123.         }
  124.         // The token is valid; allow the user to change their password.
  125.         $form $this->createForm(ChangePasswordFormType::class);
  126.         $form->handleRequest($request);
  127.         if ($form->isSubmitted() && $form->isValid()) {
  128.             // A password reset token should be used only once, remove it.
  129.             $this->resetPasswordHelper->removeResetRequest($token);
  130.             // Encode(hash) the plain password, and set it.
  131.             $encodedPassword $passwordHasher->hashPassword(
  132.                 $user,
  133.                 $form->get('plainPassword')->getData()
  134.             );
  135.             $user->setPassword($encodedPassword);
  136.             $this->entityManager->flush();
  137.             // The session is cleaned up after the password has been changed.
  138.             $this->cleanSessionAfterReset();
  139.             return $this->redirectToRoute('app_reset_password_success');
  140.         }
  141.         return $this->render('reset_password/reset.html.twig', [
  142.             'resetForm' => $form->createView(),
  143.         ]);
  144.     }
  145.     #[Route('/success'name'app_reset_password_success')]
  146.     public function success(): Response
  147.     {
  148.         return $this->render('reset_password/success.html.twig', [
  149.         ]);
  150.     }
  151. }