Silverback\ApiComponentsBundle\Security\UserChecker

Complexity

Total Complexity

9

Size/Duplication

Total Lines	34
Duplicated Lines	0 %

Test Coverage

Coverage

88.89%

Importance

Changes	1
Bugs	0	Features	0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	3	1
B	checkPreAuth()	0	20	7
A	checkPostAuth()	0	2	1

<?php

/*
 * This file is part of the Silverback API Components Bundle Project
 *
 * (c) Daniel West <daniel@silverback.is>
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

declare(strict_types=1);

namespace Silverback\ApiComponentsBundle\Security;

use Silverback\ApiComponentsBundle\Entity\User\AbstractUser;
use Silverback\ApiComponentsBundle\Exception\UserDisabledException;
use Silverback\ApiComponentsBundle\Exception\UserEmailAddressUnverified;
use Symfony\Component\Security\Core\Exception\CustomUserMessageAccountStatusException;
use Symfony\Component\Security\Core\User\UserCheckerInterface;
use Symfony\Component\Security\Core\User\UserInterface;

class UserChecker implements UserCheckerInterface
{
    private bool $denyUnverifiedLogin;

    public function __construct(bool $denyUnverifiedLogin = true)
    {
        $this->denyUnverifiedLogin = $denyUnverifiedLogin;
    }

    public function checkPreAuth(UserInterface $user): void
    {
        if (!$user instanceof AbstractUser) {
            return;
        }

        if (!$user->isEnabled()) {
            $message = 'Your account is currently disabled.';
            if (class_exists(CustomUserMessageAccountStatusException::class)) {
                throw new CustomUserMessageAccountStatusException($message);
            }
            throw new UserDisabledException($message);
        }

        if ($this->denyUnverifiedLogin && !$user->isEmailAddressVerified()) {
            $message = 'Please verify your email address before logging in. If you did not receive a confirmation email please try resetting your password using the forgot password feature.';
            if (class_exists(CustomUserMessageAccountStatusException::class)) {
                throw new CustomUserMessageAccountStatusException($message);
            }
            throw new UserEmailAddressUnverified($message);
        }
    }

    public function checkPostAuth(UserInterface $user): void
    {
    }
}