src/Program/Security/Authenticator/ApiAuthenticator.php line 19

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Program\Security\Authenticator;
  7. use App\Program\Gateway\ProgramGateway;
  8. use Symfony\Component\HttpFoundation\JsonResponse;
  9. use Symfony\Component\HttpFoundation\Request;
  10. use Symfony\Component\HttpFoundation\Response;
  11. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  12. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  13. use Symfony\Component\Security\Core\Exception\CustomUserMessageAuthenticationException;
  14. use Symfony\Component\Security\Http\Authenticator\AbstractAuthenticator;
  15. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  16. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  17. use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
  19. final class ApiAuthenticator extends AbstractAuthenticator
  20. {
  21.     public function __construct(private ProgramGateway $userLoader)
  22.     {
  23.     }
  25.     public function supports(Request $request): ?bool
  26.     {
  27.         return $request->headers->has('X-AUTH-TOKEN');
  28.     }
  30.     public function authenticate(Request $request): Passport
  31.     {
  32.         $apiKey = $request->headers->get('X-AUTH-TOKEN');
  34.         if (null === $apiKey) {
  35.             throw new CustomUserMessageAuthenticationException('No API key provided');
  36.         }
  38.         return new SelfValidatingPassport(new UserBadge($apiKey, [$this->userLoader, 'loadUserByIdentifier']));
  39.     }
  41.     public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
  42.     {
  43.         return null;
  44.     }
  46.     public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
  47.     {
  48.         $data = [
  49.             'message' => strtr($exception->getMessageKey(), $exception->getMessageData()),
  50.         ];
  52.         return new JsonResponse($data, Response::HTTP_UNAUTHORIZED);
  53.     }
  54. }