src/Controller/ResetPasswordController.php line 42

Open in your IDE?
  1. <?php
  3. namespace App\Controller;
  5. use App\Entity\User;
  6. use App\Form\ChangePasswordFormType;
  7. use App\Form\ResetPasswordRequestFormType;
  8. use PHPMailer\PHPMailer\PHPMailer;
  9. use Symfony\Bridge\Twig\Mime\TemplatedEmail;
  10. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  11. use Symfony\Component\HttpFoundation\RedirectResponse;
  12. use Symfony\Component\HttpFoundation\Request;
  13. use Symfony\Component\HttpFoundation\Response;
  14. use Symfony\Component\Mailer\MailerInterface;
  15. use Symfony\Component\Mailer\Transport\SendmailTransport;
  16. use Symfony\Component\Mime\Address;
  17. use Symfony\Component\Routing\Annotation\Route;
  18. use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;
  19. use SymfonyCasts\Bundle\ResetPassword\Controller\ResetPasswordControllerTrait;
  20. use SymfonyCasts\Bundle\ResetPassword\Exception\ResetPasswordExceptionInterface;
  21. use SymfonyCasts\Bundle\ResetPassword\ResetPasswordHelperInterface;
  23. /**
  24.  * @Route("/reset-password")
  25.  */
  26. class ResetPasswordController extends AbstractController
  27. {
  28.     use ResetPasswordControllerTrait;
  30.     private $resetPasswordHelper;
  32.     public function __construct(ResetPasswordHelperInterface $resetPasswordHelper)
  33.     {
  34.         $this->resetPasswordHelper = $resetPasswordHelper;
  35.     }
  37.     /**
  38.      * Display & process form to request a password reset.
  39.      *
  40.      * @Route("", name="app_forgot_password_request")
  41.      */
  42.     public function request(Request $request, MailerInterface $mailer): Response
  43.     {
  44.         $form = $this->createForm(ResetPasswordRequestFormType::class);
  45.         $form->handleRequest($request);
  47.         if ($form->isSubmitted() && $form->isValid()) {
  48.             return $this->processSendingPasswordResetEmail(
  49.                 $form->get('email')->getData(),
  50.                 $mailer
  51.             );
  52.         }
  53.         /*if ( $request->get('_nu') ){
  54.             $this->addFlash('reset_password_error', 'Cette adresse email n\'existe pas');
  55.         }*/
  56.         return $this->render('reset_password/request.html.twig', [
  57.             'requestForm' => $form->createView(),
  58.         ]);
  59.     }
  61.     /**
  62.      * Confirmation page after a user has requested a password reset.
  63.      *
  64.      * @Route("/check-email", name="app_check_email")
  65.      */
  66.     public function checkEmail(): Response
  67.     {
  68.         // We prevent users from directly accessing this page
  69.         if (null === ($resetToken = $this->getTokenObjectFromSession())) {
  70.             return $this->redirectToRoute('app_forgot_password_request', ['_nu' => md5(time())]);
  71.         }
  73.         return $this->render('reset_password/check_email.html.twig', [
  74.             'resetToken' => $resetToken,
  75.         ]);
  76.     }
  78.     /**
  79.      * Validates and process the reset URL that the user clicked in their email.
  80.      *
  81.      * @Route("/reset/{token}", name="app_reset_password")
  82.      */
  83.     public function reset(Request $request, UserPasswordEncoderInterface $passwordEncoder, string $token = null): Response
  84.     {
  85.         if ($token) {
  86.             // We store the token in session and remove it from the URL, to avoid the URL being
  87.             // loaded in a browser and potentially leaking the token to 3rd party JavaScript.
  88.             $this->storeTokenInSession($token);
  90.             return $this->redirectToRoute('app_reset_password');
  91.         }
  93.         $token = $this->getTokenFromSession();
  94.         if (null === $token) {
  95.             throw $this->createNotFoundException('No reset password token found in the URL or in the session.');
  96.         }
  98.         try {
  99.             $user = $this->resetPasswordHelper->validateTokenAndFetchUser($token);
  100.         } catch (ResetPasswordExceptionInterface $e) {
  101.             $this->addFlash('reset_password_error', sprintf(
  102.                 'There was a problem validating your reset request - %s',
  103.                 $e->getReason()
  104.             ));
  106.             return $this->redirectToRoute('app_forgot_password_request');
  107.         }
  109.         // The token is valid; allow the user to change their password.
  110.         $form = $this->createForm(ChangePasswordFormType::class);
  111.         $form->handleRequest($request);
  113.         if ($form->isSubmitted() && $form->isValid()) {
  114.             // A password reset token should be used only once, remove it.
  115.             $this->resetPasswordHelper->removeResetRequest($token);
  117.             // Encode the plain password, and set it.
  118.             $encodedPassword = $passwordEncoder->encodePassword(
  119.                 $user,
  120.                 $form->get('plainPassword')->getData()
  121.             );
  123.             $user->setPassword($encodedPassword);
  124.             $this->getDoctrine()->getManager()->flush();
  126.             // The session is cleaned up after the password has been changed.
  127.             $this->cleanSessionAfterReset();
  129.             return $this->redirectToRoute('app_login');
  130.         }
  132.         return $this->render('reset_password/reset.html.twig', [
  133.             'resetForm' => $form->createView(),
  134.         ]);
  135.     }
  137.     private function processSendingPasswordResetEmail(string $emailFormData, MailerInterface $mailer): RedirectResponse
  138.     {
  139.         $user = $this->getDoctrine()->getRepository(User::class)->findOneBy([
  140.             'email' => $emailFormData,
  141.         ]);
  143.         // Do not reveal whether a user account was found or not.
  144.         if (!$user) {
  145.             $this->addFlash('reset_password_error', 'Cette adresse email n\'existe pas');
  146.             return $this->redirectToRoute('app_check_email');
  147.         }
  149.         try {
  150.             $resetToken = $this->resetPasswordHelper->generateResetToken($user);
  151.         } catch (ResetPasswordExceptionInterface $e) {
  152.             // If you want to tell the user why a reset email was not sent, uncomment
  153.             // the lines below and change the redirect to 'app_forgot_password_request'.
  154.             // Caution: This may reveal if a user is registered or not.
  155.             //
  156.             // $this->addFlash('reset_password_error', sprintf(
  157.             //     'There was a problem handling your password reset request - %s',
  158.             //     $e->getReason()
  159.             // ));
  160.             $this->addFlash('reset_password_error', $e->getReason());
  161.             return $this->redirectToRoute('app_check_email');
  162.         }
  163.         /*$transport = new SendmailTransport();
  164.         $email = (new TemplatedEmail())
  165.             ->from(new Address('contact@yziprod.fr', 'Yziapp'))
  166.             ->to($user->getEmail())
  167.             ->subject('Réinitialisation de votre mot de passe')
  168.             ->html($this->get('twig')->render('reset_password/email.html.twig', ['resetToken' => $resetToken]))
  169.             /*->htmlTemplate('reset_password/email.html.twig')
  170.             ->context([
  171.                 'resetToken' => $resetToken,
  172.             ])*/
  173.         ;/*
  175.         $transport->send($email);*/
  176.         $phpMailer = new PHPMailer();
  177.         $phpMailer->SMTPAuth   = TRUE;
  178.         $phpMailer->SMTPSecure = "tls";
  179.         $phpMailer->Port       = 587;
  180.         $phpMailer->Host       = "smtp.gmail.com";
  181.         $phpMailer->Username   = "yziapp@yziprod.fr";
  182.         $phpMailer->Password   = "1983Jomo1983**";
  183.         $phpMailer->IsHTML(true);
  184.         $phpMailer->AddAddress($user->getEmail(), $user->getFullName());
  185.         $phpMailer->SetFrom('contact@yziprod.fr', 'Yziapp');
  186.         $phpMailer->Subject = "Réinitialisation de votre mot de passe";
  187.         $content = $this->get('twig')->render('reset_password/email.html.twig', ['resetToken' => $resetToken]);
  188.         $phpMailer->MsgHTML($content);
  189.         $phpMailer->send();
  191.         // Store the token object in session for retrieval in check-email route.
  192.         $this->setTokenObjectInSession($resetToken);
  194.         return $this->redirectToRoute('app_check_email');
  195.     }
  196. }