Bouss / boussimmo

src/Security/GoogleAuthenticator.php

<?php

namespace App\Security;

use App\Entity\User;
use App\Repository\UserRepository;
use DateTime;
use Doctrine\ORM\EntityManagerInterface;
use KnpU\OAuth2ClientBundle\Client\ClientRegistry;
use KnpU\OAuth2ClientBundle\Client\OAuth2ClientInterface;
use KnpU\OAuth2ClientBundle\Client\Provider\GoogleClient;
use KnpU\OAuth2ClientBundle\Security\Authenticator\SocialAuthenticator;
use League\OAuth2\Client\Token\AccessToken;
use Symfony\Component\HttpFoundation\RedirectResponse;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\Routing\RouterInterface;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Exception\AuthenticationException;
use Symfony\Component\Security\Core\User\UserProviderInterface;

class GoogleAuthenticator extends SocialAuthenticator
{
    public function __construct(
        private ClientRegistry $clientRegistry,
        private EntityManagerInterface $em,
        private RouterInterface $router,
        private UserRepository $userRepository
    ) {}

    /**
     * {@inheritDoc}
     */
    public function supports(Request $request): bool
    {
        return $request->attributes->get('_route') === 'connect_google_check';
    }

    /**
     * {@inheritDoc}
     */
    public function getCredentials(Request $request)
    {
        return $this->fetchAccessToken($this->getGoogleClient());
    }

    /**
     * {@inheritDoc}
     */
    public function getUser($credentials, UserProviderInterface $userProvider): User
    {
        /** @var AccessToken $accessToken */
        $accessToken = $credentials;
        $googleUser = $this->getGoogleClient()->fetchUserFromToken($accessToken);

        $user = $this->userRepository->findOneBy(['googleId' => $googleUser->getId()]);

        if (null === $user) {
            $user = (new User())
                ->setGoogleId($googleUser->getId())
                ->setEmail($googleUser->getEmail())

The method getEmail() does not exist on League\OAuth2\Client\Provider\ResourceOwnerInterface. It seems like you code against a sub-type of League\OAuth2\Client\Provider\ResourceOwnerInterface such as League\OAuth2\Client\Provider\GoogleUser.

                ->setAvatar($googleUser->getAvatar())

The method getAvatar() does not exist on League\OAuth2\Client\Provider\ResourceOwnerInterface. It seems like you code against a sub-type of League\OAuth2\Client\Provider\ResourceOwnerInterface such as League\OAuth2\Client\Provider\GoogleUser.

                ->setRefreshToken($accessToken->getRefreshToken());
            $this->em->persist($user);
        } else {
            $user->setRevokedAt(null);
            if (null !== $refreshToken = $accessToken->getRefreshToken()) {

The condition null !== $refreshToken = $accessToken->getRefreshToken() is always true.

                $user->setRefreshToken($refreshToken);
            }
        }

        $user
            ->setAccessToken($accessToken)
            ->setAccessTokenCreatedAt(new DateTime('@' . time()))
            ->setAccessTokenExpiresAt(new DateTime('@' . $accessToken->getExpires()));

        $this->em->flush();

        return $user;
    }

    /**
     * {@inheritDoc}
     */
    public function onAuthenticationSuccess(Request $request, TokenInterface $token, $providerKey): ?Response
    {
        return new RedirectResponse($this->router->generate('default_index'));
    }

    /**
     * {@inheritDoc}
     */
    public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
    {
        $message = strtr($exception->getMessageKey(), $exception->getMessageData());

        return new Response($message, Response::HTTP_FORBIDDEN);
    }

    /**
     * {@inheritDoc}
     */
    public function start(Request $request, AuthenticationException $authException = null): RedirectResponse|Response
    {
        return new RedirectResponse('/connect/', Response::HTTP_TEMPORARY_REDIRECT);
    }

    /**
     * @return GoogleClient
     */
    private function getGoogleClient(): OAuth2ClientInterface
    {
        return $this->clientRegistry->getClient('google');
    }
}