|
1
|
|
|
<?php |
|
2
|
|
|
|
|
3
|
|
|
/* For licensing terms, see /license.txt */ |
|
4
|
|
|
|
|
5
|
|
|
declare(strict_types=1); |
|
6
|
|
|
|
|
7
|
|
|
namespace Chamilo\CoreBundle\Security\Authenticator\OAuth2; |
|
8
|
|
|
|
|
9
|
|
|
use Chamilo\CoreBundle\Entity\User; |
|
10
|
|
|
use League\OAuth2\Client\Token\AccessToken; |
|
11
|
|
|
use Stevenmaguire\OAuth2\Client\Provider\KeycloakResourceOwner; |
|
12
|
|
|
use Symfony\Component\HttpFoundation\Request; |
|
13
|
|
|
|
|
14
|
|
|
class KeycloakAuthenticator extends AbstractAuthenticator |
|
15
|
|
|
{ |
|
16
|
|
|
protected string $providerName = 'keycloak'; |
|
17
|
|
|
|
|
18
|
|
|
public function supports(Request $request): ?bool |
|
19
|
|
|
{ |
|
20
|
|
|
return 'chamilo.oauth2_keycloak_check' === $request->attributes->get('_route'); |
|
21
|
|
|
} |
|
22
|
|
|
|
|
23
|
|
|
protected function userLoader(AccessToken $accessToken): User |
|
24
|
|
|
{ |
|
25
|
|
|
/** @var KeycloakResourceOwner $resourceOwner */ |
|
26
|
|
|
$resourceOwner = $this->client->fetchUserFromToken($accessToken); |
|
27
|
|
|
|
|
28
|
|
|
$user = $this->userRepository->findOneBy(['username' => $resourceOwner->getUsername()]) |
|
29
|
|
|
?: |
|
30
|
|
|
$this->userRepository->findOneBy(['username' => $resourceOwner->getId()]); |
|
31
|
|
|
|
|
32
|
|
|
if (!$user) { |
|
33
|
|
|
$user = (new User()) |
|
34
|
|
|
->setCreatorId($this->userRepository->getRootUser()->getId()) |
|
35
|
|
|
; |
|
36
|
|
|
} |
|
37
|
|
|
|
|
38
|
|
|
$username = $resourceOwner->getUsername() ?: $resourceOwner->getId(); |
|
39
|
|
|
|
|
40
|
|
|
$user |
|
41
|
|
|
->setFirstname($resourceOwner->getFirstName()) |
|
42
|
|
|
->setLastname($resourceOwner->getLastName()) |
|
43
|
|
|
->setEmail($resourceOwner->getEmail()) |
|
44
|
|
|
->setUsername($username) |
|
45
|
|
|
->setPlainPassword('keycloak') |
|
46
|
|
|
->setStatus(STUDENT) |
|
47
|
|
|
->setAuthSource('keycloak') |
|
48
|
|
|
->setRoleFromStatus(STUDENT) |
|
49
|
|
|
; |
|
50
|
|
|
|
|
51
|
|
|
$this->userRepository->updateUser($user); |
|
52
|
|
|
|
|
53
|
|
|
$url = $this->urlHelper->getCurrent(); |
|
54
|
|
|
$url->addUser($user); |
|
55
|
|
|
|
|
56
|
|
|
$this->entityManager->flush(); |
|
57
|
|
|
|
|
58
|
|
|
return $user; |
|
59
|
|
|
} |
|
60
|
|
|
} |
|
61
|
|
|
|