vendor/symfony/security-http/EventListener/PasswordMigratingListener.php line 35

Open in your IDE?
  1. <?php
  3. /*
  4.  * This file is part of the Symfony package.
  5.  *
  6.  * (c) Fabien Potencier <fabien@symfony.com>
  7.  *
  8.  * For the full copyright and license information, please view the LICENSE
  9.  * file that was distributed with this source code.
  10.  */
  12. namespace Symfony\Component\Security\Http\EventListener;
  14. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  15. use Symfony\Component\Security\Core\Encoder\EncoderFactoryInterface;
  16. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\PasswordUpgradeBadge;
  17. use Symfony\Component\Security\Http\Authenticator\Passport\UserPassportInterface;
  18. use Symfony\Component\Security\Http\Event\LoginSuccessEvent;
  20. /**
  21.  * @author Wouter de Jong <wouter@wouterj.nl>
  22.  *
  23.  * @final
  24.  * @experimental in 5.1
  25.  */
  26. class PasswordMigratingListener implements EventSubscriberInterface
  27. {
  28.     private $encoderFactory;
  30.     public function __construct(EncoderFactoryInterface $encoderFactory)
  31.     {
  32.         $this->encoderFactory = $encoderFactory;
  33.     }
  35.     public function onLoginSuccess(LoginSuccessEvent $event): void
  36.     {
  37.         $passport = $event->getPassport();
  38.         if (!$passport instanceof UserPassportInterface || !$passport->hasBadge(PasswordUpgradeBadge::class)) {
  39.             return;
  40.         }
  42.         /** @var PasswordUpgradeBadge $badge */
  43.         $badge = $passport->getBadge(PasswordUpgradeBadge::class);
  44.         $plaintextPassword = $badge->getAndErasePlaintextPassword();
  46.         if ('' === $plaintextPassword) {
  47.             return;
  48.         }
  50.         $user = $passport->getUser();
  51.         $passwordEncoder = $this->encoderFactory->getEncoder($user);
  52.         if (!$passwordEncoder->needsRehash($user->getPassword())) {
  53.             return;
  54.         }
  56.         $badge->getPasswordUpgrader()->upgradePassword($user, $passwordEncoder->encodePassword($plaintextPassword, $user->getSalt()));
  57.     }
  59.     public static function getSubscribedEvents(): array
  60.     {
  61.         return [LoginSuccessEvent::class => 'onLoginSuccess'];
  62.     }
  63. }