src/Security/JWTAuthenticator.php line 25

  1. <?php
  2. /**
  3.  * Created by PhpStorm.
  4.  * User: JMR
  5.  * Date: 25/10/2024
  6.  * Time: 09:12
  7.  */
  8. // src/Security/JWTAuthenticator.php
  9. namespace App\Security;
  11. use Lexik\Bundle\JWTAuthenticationBundle\Encoder\JWTEncoderInterface;
  12. use Symfony\Component\HttpFoundation\Request;
  13. use Symfony\Component\HttpFoundation\JsonResponse;
  14. use Symfony\Component\HttpFoundation\Response; // Import the correct Response class
  15. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  16. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  17. use Symfony\Component\Security\Core\Exception\CustomUserMessageAuthenticationException;
  18. use Symfony\Component\Security\Core\User\UserInterface;
  19. use Symfony\Component\Security\Core\User\UserProviderInterface;
  20. use Symfony\Component\Security\Http\Authenticator\AbstractAuthenticator;
  21. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  22. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  23. use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
  25. class JWTAuthenticator extends AbstractAuthenticator
  26. {
  27.     private $jwtEncoder;
  29.     public function __construct(JWTEncoderInterface $jwtEncoder)
  30.     {
  31.         $this->jwtEncoder = $jwtEncoder;
  32.     }
  34.     public function supports(Request $request): ?bool
  35.     {
  36.         // Check if the request contains the Authorization header
  37.         return $request->headers->has('x-authorization');
  38.     }
  40.     public function authenticate(Request $request): Passport
  41.     {
  42.         $authHeader = $request->headers->get('x-authorization');
  43.         $token = null;
  45.         if ($authHeader && str_starts_with($authHeader, 'Bearer ')) {
  46.             $token = substr($authHeader, 7);
  47.         }
  49.         /*if (!$token) {
  50.             throw new CustomUserMessageAuthenticationException('Token not provided');
  51.         }*/
  52. //var_dump($token);
  53.         $decodedData = $this->jwtEncoder->decode($token);
  55. //var_dump($decodedData);
  56.         /*if (!$decodedData) {
  57.             throw new CustomUserMessageAuthenticationException('Invalid token');
  58.         }*/
  60.         // Here you could fetch the user using the decoded data, e.g., decodedData['username']
  61.         return new SelfValidatingPassport(
  62.             new UserBadge($decodedData['username'])
  63.         );
  64.     }
  66.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
  67.     {
  68.         // No action needed on success, just return null to continue to the controller
  69.         return null;
  70.     }
  72.     public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
  73.     {
  74.         return new JsonResponse(['error' => $exception->getMessageKey()], 401);
  75.     }
  76. }