MauticPlugin\MauticLdapAuthBundle\EventListener\UserSubscriber

Complexity

Total Complexity

13

Size/Duplication

Total Lines	101
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	getSubscribedEvents()	0	4	1
B	onUserFormAuthentication()	0	26	9
A	__construct()	0	3	1
A	authenticateService()	0	32	2

<?php
/**
 * @package     Mautic
 * @copyright   2019 Monogramm. All rights reserved
 * @author      Monogramm
 * @link        https://www.monogramm.io
 * @license     GNU/AGPLv3 http://www.gnu.org/licenses/agpl.html
 */

namespace MauticPlugin\MauticLdapAuthBundle\EventListener;

use Mautic\CoreBundle\Helper\CoreParametersHelper;
use Mautic\PluginBundle\Integration\AbstractSsoFormIntegration;
use Mautic\UserBundle\Entity\User;
use Mautic\UserBundle\Event\AuthenticationEvent;
use Mautic\UserBundle\UserEvents;
use Symfony\Component\EventDispatcher\EventSubscriberInterface;
use Symfony\Component\HttpFoundation\RedirectResponse;
use Symfony\Component\HttpFoundation\Response;

/**
 * Class UserSubscriber
 */
class UserSubscriber implements EventSubscriberInterface
{
    /**
     * @var CoreParametersHelper
     */
    private $parametersHelper;

    private $supportedServices = array(
        'LdapAuth',
    );

    public function __construct(CoreParametersHelper $parametersHelper)
    {
        $this->parametersHelper = $parametersHelper;
    }

    /**
     * @return array
     */
    public static function getSubscribedEvents()
    {
        return array(
            UserEvents::USER_FORM_AUTHENTICATION => array('onUserFormAuthentication', 0),
        );
    }

    /**
     * Authenticate via the form using users defined in LDAP server(s).
     *
     * @param AuthenticationEvent $event
     *
     * @return bool|void
     */
    public function onUserFormAuthentication(AuthenticationEvent $event)
    {
        $username = $event->getUsername();
        $password = $event->getToken()->getCredentials();

        $integration = null;
        $result = false;
        if ($authenticatingService = $event->getAuthenticatingService()) {
            if (in_array($authenticatingService, $this->supportedServices)
                && $integration = $event->getIntegration($authenticatingService)) {
                $result = $this->authenticateService($integration, $username, $password);
            }
        } else {
            foreach ($this->supportedServices as $supportedService) {
                if ($integration = $event->getIntegration($supportedService)) {
                    $authenticatingService = $supportedService;
                    $result = $this->authenticateService($integration, $username, $password);
                    break;
                }
            }
        }

        if ($integration && $result instanceof User) {
            $event->setIsAuthenticated($authenticatingService, $result, $integration->shouldAutoCreateNewUser());
        } elseif ($result instanceof Response) {
            $event->setResponse($result);
        } // else do nothing
    }

    /**
     * @param AbstractSsoFormIntegration $integration
     * @param string                     $username
     * @param string                     $password
     *
     * @return bool|RedirectResponse
     */
    private function authenticateService(AbstractSsoFormIntegration $integration, $username, $password)
    {
        $settings = [
            'hostname'      => $this->parametersHelper->getParameter('ldap_auth_host'),
            'port'          => $this->parametersHelper->getParameter('ldap_auth_port', 389),
            'ssl'           => $this->parametersHelper->getParameter('ldap_auth_ssl', false),
            'starttls'      => $this->parametersHelper->getParameter('ldap_auth_starttls', true),
            'version'       => $this->parametersHelper->getParameter('ldap_auth_version', 3),
            // TODO Coming feature: Bind DN
            //'bind_dn'       => $this->parametersHelper->getParameter('ldap_auth_bind_dn'),
            //'bind_passwd'   => $this->parametersHelper->getParameter('ldap_auth_bind_passwd'),
            'base_dn'       => $this->parametersHelper->getParameter('ldap_auth_base_dn'),
            'user_query'    => $this->parametersHelper->getParameter('ldap_auth_user_query', ''),
            'is_ad'         => $this->parametersHelper->getParameter('ldap_auth_isactivedirectory', false),
            'ad_domain'     => $this->parametersHelper->getParameter('ldap_auth_activedirectory_domain', null),
            'user_key'      => $this->parametersHelper->getParameter('ldap_auth_username_attribute', 'uid'),
            'user_email'    => $this->parametersHelper->getParameter('ldap_auth_email_attribute', 'mail'),
            'user_firstname'=> $this->parametersHelper->getParameter('ldap_auth_firstname_attribute', 'givenName'),
            'user_lastname' => $this->parametersHelper->getParameter('ldap_auth_lastname_attribute', 'sn'),
            'user_fullname' => $this->parametersHelper->getParameter('ldap_auth_fullname_attribute', 'displayName'),
        ];

        $parameters = [
            'login'     => $username,
            'password'  => $password,
        ];

        if ($authenticatedUser = $integration->ssoAuthCallback($settings, $parameters)) {
            return $authenticatedUser;
        }

        return false;
    }
}