Completed
Pull Request — dev (#24)
by
unknown
03:54
created

DefaultController::securityTestAction()   A

Complexity

Conditions 1
Paths 1

Size

Total Lines 4
Code Lines 2

Duplication

Lines 0
Ratio 0 %

Code Coverage

Tests 0
CRAP Score 2

Importance

Changes 0
Metric Value
c 0
b 0
f 0
dl 0
loc 4
ccs 0
cts 2
cp 0
rs 10
cc 1
eloc 2
nc 1
nop 0
crap 2
1
<?php
2
3
namespace AppBundle\Controller\Api;
4
5
use AppBundle\Entity\User;
6
use Sensio\Bundle\FrameworkExtraBundle\Configuration\Method;
7
use Symfony\Bundle\FrameworkBundle\Controller\Controller;
8
use Symfony\Component\HttpFoundation\JsonResponse;
9
use Symfony\Component\HttpFoundation\Request;
10
use Symfony\Component\Routing\Annotation\Route;
11
12
class DefaultController extends Controller
13
{
14
    /**
15
16
     * @param Request $request
17
     * @Route("/login", name="api_login")
18
     * @Method("POST")
19
     *
20
     * @return JsonResponse
21
     */
22
    public function loginAction(Request $request)
23
    {
24
        $data = json_decode($request->getContent(), true);
25
26
        /** @var User $user */
27
        $user = $this->getDoctrine()->getRepository('AppBundle:User')
28
            ->findOneBy(['email' => $data['email']]);
29
30
        if (!$user) {
31
            return $this->json(['message' => 'Bad credentials'], 401);
32
        }
33
34
        $result = $this->get('security.encoder_factory')
35
            ->getEncoder($user)
36
            ->isPasswordValid($user->getPassword(), $data['password'], null);
37
        if (!$result) {
38
            return $this->json(['message' => 'Bad credentials'], 401);
39
        }
40
41
        $token = base_convert(sha1(uniqid(mt_rand(), true)), 16, 36);
42
43
        $em = $this->getDoctrine()
44
            ->getManager();
45
        $user->setApiToken($token);
46
47
        $em->persist($user);
48
49
        $em->flush();
50
51
        return $this->json(['X-AUTH-TOKEN' => $token]);
52
    }
53
54
    /**
55
     * @Route("/user", name="user")
56
     * @Method("GET")
57
     *
58
     * @return JsonResponse
59
     */
60
    public function securityTestAction()
61
    {
62
        return $this->json(['autorization' => 'works!']);
63
    }
64
}
65