src/EventListener/Oauth2AuthExceptionListener.php line 54

Open in your IDE?
  1. <?php
  2. declare(strict_types=1);
  4. namespace App\EventListener;
  6. use Throwable;
  7. use App\Entity\User;
  8. use App\Exception\ApiException;
  9. use League\OAuth2\Server\RequestAccessTokenEvent;
  10. use Symfony\Component\HttpFoundation\JsonResponse;
  11. use Symfony\Component\HttpKernel\Exception\HttpException;
  12. use League\Bundle\OAuth2ServerBundle\Event\UserResolveEvent;
  13. use Symfony\Component\Security\Http\Event\LoginFailureEvent;
  14. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  15. use Symfony\Component\Security\Core\User\UserProviderInterface;
  16. use Symfony\Component\HttpKernel\Exception\HttpExceptionInterface;
  17. use Symfony\Component\Security\Core\Exception\AccessDeniedException;
  18. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  19. use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
  20. use Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface;
  22. use FOS\RestBundle\View\View;
  24. // https://github.com/thephpleague/oauth2-server-bundle/blob/master/docs/basic-setup.md
  25. // openssl genrsa -out private.key 2048
  26. // openssl rsa -in private.key -pubout -out public.key
  27. // bin/console league:oauth2-server:create-client mobile
  28. // bin/console league:oauth2-server:update-client 1528bea9771237d8d0eb83e32f653a3a --add-grant-type=refresh_token
  29. // bin/console league:oauth2-server:update-client 1528bea9771237d8d0eb83e32f653a3a --add-grant-type=client_credentials
  30. // bin/console league:oauth2-server:update-client 1528bea9771237d8d0eb83e32f653a3a --add-grant-type=password
  34. final class Oauth2AuthExceptionListener implements EventSubscriberInterface
  35. {
  36.    
  37.     public function __construct()
  38.     {
  39.     }
  43.     public function onUserAuthFailed(RequestAccessTokenEvent $event): void
  44.     {
  45.         // do something
  46.     }
  48.     public function onClientAuthFailed(RequestAccessTokenEvent $event): void
  49.     {
  50.         // do something
  51.         throw new AccessDeniedException('Access Denied');
  52.     }
  54.     public function onLoginFailure(LoginFailureEvent $event)
  55.     {
  56.         //if($event->getException() instanceof Throwable) {
  57.         //    throw $event;
  58.        // }
  59.         //$event->getException()->getCode();
  60.         //throw new ApiException($event->getException()->getCode(), $event->getException()->getMessage(), $event->getException()); 
  61.         //dd($event); die ("ok!");
  62.         //throw new AccessDeniedException($event->getException()->getMessage(), $event->getException());
  64.         // https://stackoverflow.com/questions/53139957/return-jsonresponse-when-i-use-an-authtokenauthenticator-symfony-3
  65.         // Skip if request is not an API-request
  66.         $request = $event->getRequest();
  67.         if (strpos($request->getPathInfo(), '/api/') !== 0 && strpos($request->getPathInfo(), '/oauth/') !== 0) {
  68.             return;
  69.         }
  70.          // API / OAuth route only
  71.         $exception = $event->getException();
  72.         $statusCode = $this->getStatusCodeFromException($exception);
  73.         $error = [
  74.             'code' => $statusCode,
  75.             //'error' => $this->getErrorTypeFromException($exception),
  76.             // Warning! Passing the exception message without checks is insecure.
  77.             // This will potentially leak sensitive information.
  78.             // Do not use this in production!
  79.             'message' => $exception->getMessage(),
  80.         ];
  81.         $response = new JsonResponse($error, $statusCode);
  82.         $event->setResponse($response);
  83.     }
  84.     
  85.     public static function getSubscribedEvents()
  86.     {
  87.         return [
  88.             LoginFailureEvent::class => 'onLoginFailure',
  89.         ];
  90.     }
  92.     private function getStatusCodeFromException(\Throwable $exception): int
  93.     {
  94.         if ($exception instanceof HttpException) {
  95.             return $exception->getStatusCode();
  96.         }
  97.         if ($exception instanceof HttpExceptionInterface) {
  98.             return $exception->getStatusCode();
  99.         }
  100.         
  101.         return 500;
  102.     }
  104.     private function getErrorTypeFromException(\Throwable $exception): string
  105.     {
  106.         $parts = explode('\\', get_class($exception));
  108.         return end($parts);
  109.     }
  110. }