vendor/shopware/storefront/Controller/AuthController.php line 127

Open in your IDE?
  1. <?php declare(strict_types=1);
  3. namespace Shopware\Storefront\Controller;
  5. use Shopware\Core\Checkout\Cart\SalesChannel\CartService;
  6. use Shopware\Core\Checkout\Customer\Exception\BadCredentialsException;
  7. use Shopware\Core\Checkout\Customer\Exception\CustomerAuthThrottledException;
  8. use Shopware\Core\Checkout\Customer\Exception\CustomerNotFoundByHashException;
  9. use Shopware\Core\Checkout\Customer\Exception\CustomerNotFoundException;
  10. use Shopware\Core\Checkout\Customer\Exception\CustomerRecoveryHashExpiredException;
  11. use Shopware\Core\Checkout\Customer\Exception\InactiveCustomerException;
  12. use Shopware\Core\Checkout\Customer\SalesChannel\AbstractLoginRoute;
  13. use Shopware\Core\Checkout\Customer\SalesChannel\AbstractLogoutRoute;
  14. use Shopware\Core\Checkout\Customer\SalesChannel\AbstractResetPasswordRoute;
  15. use Shopware\Core\Checkout\Customer\SalesChannel\AbstractSendPasswordRecoveryMailRoute;
  16. use Shopware\Core\Framework\DataAbstractionLayer\Exception\InconsistentCriteriaIdsException;
  17. use Shopware\Core\Framework\Feature;
  18. use Shopware\Core\Framework\Log\Package;
  19. use Shopware\Core\Framework\RateLimiter\Exception\RateLimitExceededException;
  20. use Shopware\Core\Framework\Routing\Annotation\Since;
  21. use Shopware\Core\Framework\Validation\DataBag\RequestDataBag;
  22. use Shopware\Core\Framework\Validation\Exception\ConstraintViolationException;
  23. use Shopware\Core\PlatformRequest;
  24. use Shopware\Core\System\SalesChannel\Context\SalesChannelContextServiceInterface;
  25. use Shopware\Core\System\SalesChannel\Context\SalesChannelContextServiceParameters;
  26. use Shopware\Core\System\SalesChannel\SalesChannelContext;
  27. use Shopware\Storefront\Checkout\Cart\SalesChannel\StorefrontCartFacade;
  28. use Shopware\Storefront\Framework\Routing\Annotation\NoStore;
  29. use Shopware\Storefront\Framework\Routing\RequestTransformer;
  30. use Shopware\Storefront\Page\Account\Login\AccountGuestLoginPageLoadedHook;
  31. use Shopware\Storefront\Page\Account\Login\AccountLoginPageLoadedHook;
  32. use Shopware\Storefront\Page\Account\Login\AccountLoginPageLoader;
  33. use Shopware\Storefront\Page\Account\RecoverPassword\AccountRecoverPasswordPage;
  34. use Shopware\Storefront\Page\Account\RecoverPassword\AccountRecoverPasswordPageLoadedHook;
  35. use Shopware\Storefront\Page\Account\RecoverPassword\AccountRecoverPasswordPageLoader;
  36. use Symfony\Component\HttpFoundation\Request;
  37. use Symfony\Component\HttpFoundation\Response;
  38. use Symfony\Component\HttpKernel\Exception\UnauthorizedHttpException;
  39. use Symfony\Component\Routing\Annotation\Route;
  41. /**
  42.  * @Route(defaults={"_routeScope"={"storefront"}})
  43.  *
  44.  * @deprecated tag:v6.5.0 - reason:becomes-internal - Will be internal
  45.  */
  46. #[Package('storefront')]
  47. class AuthController extends StorefrontController
  48. {
  49.     private AccountLoginPageLoader $loginPageLoader;
  51.     private AbstractSendPasswordRecoveryMailRoute $sendPasswordRecoveryMailRoute;
  53.     private AbstractResetPasswordRoute $resetPasswordRoute;
  55.     private AbstractLoginRoute $loginRoute;
  57.     private AbstractLogoutRoute $logoutRoute;
  59.     private StorefrontCartFacade $cartFacade;
  61.     private AccountRecoverPasswordPageLoader $recoverPasswordPageLoader;
  63.     private SalesChannelContextServiceInterface $salesChannelContext;
  65.     private CartService $cartService;
  67.     /**
  68.      * @internal
  69.      */
  70.     public function __construct(
  71.         AccountLoginPageLoader $loginPageLoader,
  72.         AbstractSendPasswordRecoveryMailRoute $sendPasswordRecoveryMailRoute,
  73.         AbstractResetPasswordRoute $resetPasswordRoute,
  74.         AbstractLoginRoute $loginRoute,
  75.         AbstractLogoutRoute $logoutRoute,
  76.         StorefrontCartFacade $cartFacade,
  77.         AccountRecoverPasswordPageLoader $recoverPasswordPageLoader,
  78.         SalesChannelContextServiceInterface $salesChannelContextService,
  79.     CartService $cartService
  80.     ) {
  81.         $this->loginPageLoader = $loginPageLoader;
  82.         $this->sendPasswordRecoveryMailRoute = $sendPasswordRecoveryMailRoute;
  83.         $this->resetPasswordRoute = $resetPasswordRoute;
  84.         $this->loginRoute = $loginRoute;
  85.         $this->logoutRoute = $logoutRoute;
  86.         $this->cartFacade = $cartFacade;
  87.         $this->recoverPasswordPageLoader = $recoverPasswordPageLoader;
  88.         $this->salesChannelContext = $salesChannelContextService;
  89.     $this->cartService = $cartService;
  90.     }
  92.     /**
  93.      * @Since("6.0.0.0")
  94.      * @Route("/account/login", name="frontend.account.login.page", methods={"GET"})
  95.      * @NoStore
  96.      */
  97.     public function loginPage(Request $request, RequestDataBag $data, SalesChannelContext $context): Response
  98.     {
  99.         /** @var string $redirect */
  100.         // $redirect = $request->get('redirectTo', 'frontend.account.home.page');
  102.     if ($this->cartService->getCart($context->getToken(), $context)->getLineItems()->count() > 0) {
  103.             $redirect = $request->get('redirectTo', 'frontend.checkout.confirm.page');
  104.         } else {
  105.             $redirect = $request->get('redirectTo', 'frontend.account.home.page');
  106.         }
  108.         $customer = $context->getCustomer();
  110.         if ($customer !== null && $customer->getGuest() === false) {
  111.             $request->request->set('redirectTo', $redirect);
  113.             return $this->createActionResponse($request);
  114.         }
  116.         $page = $this->loginPageLoader->load($request, $context);
  118.         $this->hook(new AccountLoginPageLoadedHook($page, $context));
  120.         return $this->renderStorefront('@Storefront/storefront/page/account/register/index.html.twig', [
  121.             'redirectTo' => $redirect,
  122.             'redirectParameters' => $request->get('redirectParameters', json_encode([])),
  123.             'page' => $page,
  124.             'loginError' => (bool) $request->get('loginError'),
  125.             'waitTime' => $request->get('waitTime'),
  126.             'errorSnippet' => $request->get('errorSnippet'),
  127.             'data' => $data,
  128.         ]);
  129.     }
  131.     /**
  132.      * @Since("6.3.4.1")
  133.      * @Route("/account/guest/login", name="frontend.account.guest.login.page", methods={"GET"})
  134.      * @NoStore
  135.      */
  136.     public function guestLoginPage(Request $request, SalesChannelContext $context): Response
  137.     {
  138.         /** @var string $redirect */
  139.         $redirect = $request->get('redirectTo', 'frontend.account.home.page');
  141.         $customer = $context->getCustomer();
  143.         if ($customer !== null) {
  144.             $request->request->set('redirectTo', $redirect);
  146.             return $this->createActionResponse($request);
  147.         }
  149.         $waitTime = (int) $request->get('waitTime');
  150.         if ($waitTime) {
  151.             $this->addFlash(self::INFO, $this->trans('account.loginThrottled', ['%seconds%' => $waitTime]));
  152.         }
  154.         if ((bool) $request->get('loginError')) {
  155.             $this->addFlash(self::DANGER, $this->trans('account.orderGuestLoginWrongCredentials'));
  156.         }
  158.         $page = $this->loginPageLoader->load($request, $context);
  160.         $this->hook(new AccountGuestLoginPageLoadedHook($page, $context));
  162.         return $this->renderStorefront('@Storefront/storefront/page/account/guest-auth.html.twig', [
  163.             'redirectTo' => $redirect,
  164.             'redirectParameters' => $request->get('redirectParameters', json_encode([])),
  165.             'page' => $page,
  166.         ]);
  167.     }
  169.     /**
  170.      * @Since("6.0.0.0")
  171.      * @Route("/account/logout", name="frontend.account.logout.page", methods={"GET"})
  172.      */
  173.     public function logout(Request $request, SalesChannelContext $context, RequestDataBag $dataBag): Response
  174.     {
  175.         if ($context->getCustomer() === null) {
  176.             return $this->redirectToRoute('frontend.account.login.page');
  177.         }
  179.         try {
  180.             $this->logoutRoute->logout($context, $dataBag);
  181.             $this->addFlash(self::SUCCESS, $this->trans('account.logoutSucceeded'));
  183.             $parameters = [];
  184.         } catch (ConstraintViolationException $formViolations) {
  185.             $parameters = ['formViolations' => $formViolations];
  186.         }
  188.         return $this->redirectToRoute('frontend.account.login.page', $parameters);
  189.     }
  191.     /**
  192.      * @Since("6.0.0.0")
  193.      * @Route("/account/login", name="frontend.account.login", methods={"POST"}, defaults={"XmlHttpRequest"=true})
  194.      */
  195.     public function login(Request $request, RequestDataBag $data, SalesChannelContext $context): Response
  196.     {
  197.         $customer = $context->getCustomer();
  199.         if ($customer !== null && $customer->getGuest() === false) {
  200.             return $this->createActionResponse($request);
  201.         }
  203.         try {
  204.             $token = $this->loginRoute->login($data, $context)->getToken();
  205.             $cartBeforeNewContext = $this->cartFacade->get($token, $context);
  207.             $newContext = $this->salesChannelContext->get(
  208.                 new SalesChannelContextServiceParameters(
  209.                     $context->getSalesChannelId(),
  210.                     $token,
  211.                     $context->getLanguageIdChain()[0],
  212.                     $context->getCurrencyId(),
  213.                     $context->getDomainId(),
  214.                     $context->getContext()
  215.                 )
  216.             );
  218.             // Update the sales channel context for CacheResponseSubscriber
  219.             $request->attributes->set(PlatformRequest::ATTRIBUTE_SALES_CHANNEL_CONTEXT_OBJECT, $newContext);
  221.             if (!empty($token)) {
  222.                 $this->addCartErrors($cartBeforeNewContext);
  224.                 return $this->createActionResponse($request);
  225.             }
  226.         } catch (BadCredentialsException | UnauthorizedHttpException | InactiveCustomerException | CustomerAuthThrottledException $e) {
  227.             if ($e instanceof InactiveCustomerException) {
  228.                 $errorSnippet = $e->getSnippetKey();
  229.             }
  231.             if ($e instanceof CustomerAuthThrottledException) {
  232.                 $waitTime = $e->getWaitTime();
  233.             }
  234.         }
  236.         $data->set('password', null);
  238.         return $this->forwardToRoute(
  239.             'frontend.account.login.page',
  240.             [
  241.                 'loginError' => true,
  242.                 'errorSnippet' => $errorSnippet ?? null,
  243.                 'waitTime' => $waitTime ?? null,
  244.             ]
  245.         );
  246.     }
  248.     /**
  249.      * @Since("6.1.0.0")
  250.      * @Route("/account/recover", name="frontend.account.recover.page", methods={"GET"})
  251.      */
  252.     public function recoverAccountForm(Request $request, SalesChannelContext $context): Response
  253.     {
  254.         $page = $this->loginPageLoader->load($request, $context);
  256.         return $this->renderStorefront('@Storefront/storefront/page/account/profile/recover-password.html.twig', [
  257.             'page' => $page,
  258.         ]);
  259.     }
  261.     /**
  262.      * @Since("6.1.0.0")
  263.      * @Route("/account/recover", name="frontend.account.recover.request", methods={"POST"})
  264.      */
  265.     public function generateAccountRecovery(Request $request, RequestDataBag $data, SalesChannelContext $context): Response
  266.     {
  267.         try {
  268.             $data->get('email')
  269.                 ->set('storefrontUrl', $request->attributes->get(RequestTransformer::STOREFRONT_URL));
  271.             $this->sendPasswordRecoveryMailRoute->sendRecoveryMail(
  272.                 $data->get('email')->toRequestDataBag(),
  273.                 $context,
  274.                 false
  275.             );
  277.             $this->addFlash(self::SUCCESS, $this->trans('account.recoveryMailSend'));
  278.         } catch (CustomerNotFoundException $e) {
  279.             $this->addFlash(self::SUCCESS, $this->trans('account.recoveryMailSend'));
  280.         } catch (InconsistentCriteriaIdsException $e) {
  281.             $this->addFlash(self::DANGER, $this->trans('error.message-default'));
  282.         } catch (RateLimitExceededException $e) {
  283.             $this->addFlash(self::INFO, $this->trans('error.rateLimitExceeded', ['%seconds%' => $e->getWaitTime()]));
  284.         }
  286.         return $this->redirectToRoute('frontend.account.recover.page');
  287.     }
  289.     /**
  290.      * @Since("6.1.0.0")
  291.      * @Route("/account/recover/password", name="frontend.account.recover.password.page", methods={"GET"})
  292.      */
  293.     public function resetPasswordForm(Request $request, SalesChannelContext $context): Response
  294.     {
  295.         /** @deprecated tag:v6.5.0 - call to loginPageLoader and $loginPage will be removed */
  296.         $loginPage = null;
  297.         if (!Feature::isActive('v6.5.0.0')) {
  298.             $loginPage = $this->loginPageLoader->load($request, $context);
  299.         }
  301.         /** @var ?string $hash */
  302.         $hash = $request->get('hash');
  304.         if (!$hash || !\is_string($hash)) {
  305.             $this->addFlash(self::DANGER, $this->trans('account.passwordHashNotFound'));
  307.             return $this->redirectToRoute('frontend.account.recover.request');
  308.         }
  310.         try {
  311.             $page = $this->recoverPasswordPageLoader->load($request, $context, $hash);
  312.         } catch (ConstraintViolationException $e) {
  313.             $this->addFlash(self::DANGER, $this->trans('account.passwordHashNotFound'));
  315.             return $this->redirectToRoute('frontend.account.recover.request');
  316.         }
  318.         $this->hook(new AccountRecoverPasswordPageLoadedHook($page, $context));
  320.         if ($page->getHash() === null || $page->isHashExpired()) {
  321.             $this->addFlash(self::DANGER, $this->trans('account.passwordHashNotFound'));
  323.             return $this->redirectToRoute('frontend.account.recover.request');
  324.         }
  326.         if (Feature::isActive('v6.5.0.0')) {
  327.             return $this->renderStorefront('@Storefront/storefront/page/account/profile/reset-password.html.twig', [
  328.                 'page' => $page,
  329.                 'formViolations' => $request->get('formViolations'),
  330.             ]);
  331.         }
  333.         /** @deprecated tag:v6.5.0 - page will be instance of AccountRecoverPasswordPage and $hash will be moved to $page.getHash() */
  334.         return $this->renderStorefront('@Storefront/storefront/page/account/profile/reset-password.html.twig', [
  335.             'page' => $loginPage,
  336.             'hash' => $hash,
  337.             'formViolations' => $request->get('formViolations'),
  338.         ]);
  339.     }
  341.     /**
  342.      * @Since("6.1.0.0")
  343.      * @Route("/account/recover/password", name="frontend.account.recover.password.reset", methods={"POST"})
  344.      */
  345.     public function resetPassword(RequestDataBag $data, SalesChannelContext $context): Response
  346.     {
  347.         $hash = $data->get('password')->get('hash');
  349.         try {
  350.             $pw = $data->get('password');
  352.             $this->resetPasswordRoute->resetPassword($pw->toRequestDataBag(), $context);
  354.             $this->addFlash(self::SUCCESS, $this->trans('account.passwordChangeSuccess'));
  355.         } catch (ConstraintViolationException $formViolations) {
  356.             $this->addFlash(self::DANGER, $this->trans('account.passwordChangeNoSuccess'));
  358.             return $this->forwardToRoute(
  359.                 'frontend.account.recover.password.page',
  360.                 ['hash' => $hash, 'formViolations' => $formViolations, 'passwordFormViolation' => true]
  361.             );
  362.         } catch (CustomerNotFoundByHashException $e) {
  363.             $this->addFlash(self::DANGER, $this->trans('account.passwordChangeNoSuccess'));
  365.             return $this->forwardToRoute('frontend.account.recover.request');
  366.         } catch (CustomerRecoveryHashExpiredException $e) {
  367.             $this->addFlash(self::DANGER, $this->trans('account.passwordHashExpired'));
  369.             return $this->forwardToRoute('frontend.account.recover.request');
  370.         }
  372.         return $this->redirectToRoute('frontend.account.profile.page');
  373.     }
  374. }