vendor/scheb/2fa-bundle/Security/Http/EventListener/AbstractCheckCodeListener.php line 24

  1. <?php
  3. declare(strict_types=1);
  5. namespace Scheb\TwoFactorBundle\Security\Http\EventListener;
  7. use Scheb\TwoFactorBundle\Security\Http\Authenticator\Passport\Credentials\TwoFactorCodeCredentials;
  8. use Scheb\TwoFactorBundle\Security\TwoFactor\Provider\PreparationRecorderInterface;
  9. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  10. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  11. use Symfony\Component\Security\Http\Event\CheckPassportEvent;
  12. use function assert;
  13. use function sprintf;
  15. /**
  16.  * @internal
  17.  */
  18. abstract class AbstractCheckCodeListener implements EventSubscriberInterface
  19. {
  20.     public function __construct(private PreparationRecorderInterface $preparationRecorder)
  21.     {
  22.     }
  24.     public function checkPassport(CheckPassportEvent $event): void
  25.     {
  26.         $passport = $event->getPassport();
  27.         if (!$passport->hasBadge(TwoFactorCodeCredentials::class)) {
  28.             return;
  29.         }
  31.         $credentialsBadge = $passport->getBadge(TwoFactorCodeCredentials::class);
  32.         assert($credentialsBadge instanceof TwoFactorCodeCredentials);
  33.         if ($credentialsBadge->isResolved()) {
  34.             return;
  35.         }
  37.         $credentialsBadge = $passport->getBadge(TwoFactorCodeCredentials::class);
  38.         assert($credentialsBadge instanceof TwoFactorCodeCredentials);
  39.         $token = $credentialsBadge->getTwoFactorToken();
  40.         $providerName = $token->getCurrentTwoFactorProvider();
  41.         if (!$providerName) {
  42.             throw new AuthenticationException('There is no active two-factor provider.');
  43.         }
  45.         if (!$this->preparationRecorder->isTwoFactorProviderPrepared($token->getFirewallName(), $providerName)) {
  46.             throw new AuthenticationException(sprintf('The two-factor provider "%s" has not been prepared.', $providerName));
  47.         }
  49.         if (!$this->isValidCode($providerName, $token->getUser(), $credentialsBadge->getCode())) {
  50.             return;
  51.         }
  53.         $token->setTwoFactorProviderComplete($providerName);
  54.         $credentialsBadge->markResolved();
  55.     }
  57.     abstract protected function isValidCode(string $providerName, object $user, string $code): bool;
  58. }