src/Security/JWTTokenAuthenticator.php line 45

Open in your IDE?
  1. <?php
  3. namespace App\Security;
  5. use Symfony\Component\HttpFoundation\Request;
  6. use Symfony\Component\HttpFoundation\Response;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  9. use Symfony\Component\Security\Core\User\UserProviderInterface;
  10. use Symfony\Component\Security\Http\Authenticator\AbstractAuthenticator;
  11. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  12. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  13. use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
  14. use Lexik\Bundle\JWTAuthenticationBundle\Services\JWTTokenManagerInterface;
  16. class JWTTokenAuthenticator extends AbstractAuthenticator
  17. {
  18.     private $jwtManager;
  19.     private $userProvider;
  21.     public function __construct(JWTTokenManagerInterface $jwtManager,
  22.                                 UserProviderInterface $userProvider
  23.     ) {
  24.         $this->jwtManager = $jwtManager;
  25.         $this->userProvider = $userProvider;
  26.     }
  28.     public function supports(Request $request): ?bool
  29.     {
  30.         return $request->headers->has('Authorization');
  31.     }
  33.     public function authenticate(Request $request): Passport
  34.     {
  35.         $authHeader = $request->headers->get('Authorization');
  37.         if (!$authHeader || 0 !== strpos($authHeader, 'Bearer ')) {
  38.             throw new AuthenticationException('No JWT token found');
  39.         }
  41.         $token = substr($authHeader, 7);
  42.         $data = $this->jwtManager->parse($token);
  44.         return new SelfValidatingPassport(
  45.             new UserBadge($data['email'], function ($userIdentifier) {
  46.                 return $this->userProvider->loadUserByUsername($userIdentifier);
  47.             })
  48.         );
  49.     }
  51.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
  52.     {
  53.         return null; // continue the request
  54.     }
  56.     public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
  57.     {
  58.         return new Response("Authentication Failed", Response::HTTP_UNAUTHORIZED);
  59.     }
  60. }