for testing and deploying your application
for finding and fixing issues
for empowering human code reviews
<?php
namespace ProjetNormandie\UserBundle\Controller\ResetPassword;
use Doctrine\ORM\EntityManagerInterface;
use Exception;
use ProjetNormandie\UserBundle\Entity\User;
use ProjetNormandie\UserBundle\Security\Event\SecurityEventTypeEnum;
use ProjetNormandie\UserBundle\Security\SecurityHistoryManager;
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\HttpFoundation\Exception\BadRequestException;
use Symfony\Component\HttpFoundation\JsonResponse;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpKernel\Attribute\AsController;
#[AsController]
class ConfirmPassword extends AbstractController
{
public function __construct(
private readonly EntityManagerInterface $em,
private readonly SecurityHistoryManager $securityHistoryManager
) {
}
/**
* @throws Exception
*/
public function __invoke(Request $request): JsonResponse
$data = json_decode($request->getContent(), true);
$token = $data['token'];
$plainPassword = $data['plainPassword'];
$user = $this->em->getRepository(User::class)->findOneBy(['confirmationToken' => $token]);
if (null === $user) {
throw new BadRequestException();
$user->setPlainPassword($plainPassword);
$user->setConfirmationToken(null);
$this->em->flush();
// Log security event
$this->securityHistoryManager->recordEvent($user, SecurityEventTypeEnum::PASSWORD_RESET_COMPLETE, [
'email' => $user->getEmail()
]);
return new JsonResponse(['success' => true]);
projet-normandie /
user-bundle
