احراز هویت کاربران در PHP با سیمفونی (Symfony) — راهنمای کاربردی

1{
2    "require": {
3        "symfony/security": "^4.1",
4        "doctrine/dbal": "^2.7"
5    }
6}

1{
2    "require": {
3        "symfony/security": "^4.1",
4        "doctrine/dbal": "^2.7"
5    },
6    "autoload": {
7         "psr-4": {
8             "Sfauth\\": "src"
9         },
10         "classmap": ["src"]
11    }
12}

1<?php
2require_once './vendor/autoload.php';
3 
4// application code
5?>

1<?php
2namespace Sfauth\User;
3 
4use Symfony\Component\Security\Core\User\UserInterface;
5 
6class User implements UserInterface
7{
8    private $username;
9    private $password;
10    private $roles;
11 
12    public function __construct(string $username, string $password, string $roles)
13    {
14        if (empty($username))
15        {
16            throw new \InvalidArgumentException('No username provided.');
17        }
18 
19        $this->username = $username;
20        $this->password = $password;
21        $this->roles = $roles;
22    }
23 
24    public function getUsername()
25    {
26        return $this->username;
27    }
28 
29    public function getPassword()
30    {
31        return $this->password;
32    }
33 
34    public function getRoles()
35    {
36        return explode(",", $this->roles);
37    }
38 
39    public function getSalt()
40    {
41        return '';
42    }
43 
44    public function eraseCredentials() {}
45}

1<?php
2namespace Sfauth\User;
3 
4use Symfony\Component\Security\Core\User\UserProviderInterface;
5use Symfony\Component\Security\Core\User\UserInterface;
6use Symfony\Component\Security\Core\Exception\UsernameNotFoundException;
7use Symfony\Component\Security\Core\Exception\UnsupportedUserException;
8use Doctrine\DBAL\Connection;
9use Sfauth\User\User;
10 
11class DatabaseUserProvider implements UserProviderInterface
12{
13    private $connection;
14 
15    public function __construct(Connection $connection)
16    {
17        $this->connection = $connection;
18    }
19 
20    public function loadUserByUsername($username)
21    {
22        return $this->getUser($username);
23    }
24 
25    private function getUser($username)
26    {
27        $sql = "SELECT * FROM sf_users WHERE username = :name";
28        $stmt = $this->connection->prepare($sql);
29        $stmt->bindValue("name", $username);
30        $stmt->execute();
31        $row = $stmt->fetch();
32 
33        if (!$row['username'])
34        {
35            $exception = new UsernameNotFoundException(sprintf('Username "%s" not found in the database.', $row['username']));
36            $exception->setUsername($username);
37            throw $exception;
38        }
39        else
40        {
41            return new User($row['username'], $row['password'], $row['roles']);
42        }
43    }
44 
45    public function refreshUser(UserInterface $user)
46    {
47        if (!$user instanceof User)
48        {
49            throw new UnsupportedUserException(sprintf('Instances of "%s" are not supported.', get_class($user)));
50        }
51 
52        return $this->getUser($user->getUsername());
53    }
54 
55    public function supportsClass($class)
56    {
57        return 'Sfauth\User\User' === $class;
58    }
59}

1<?php
2namespace Sfauth\User;
3 
4use Symfony\Component\Security\Core\Authentication\Provider\UserAuthenticationProvider;
5use Symfony\Component\Security\Core\User\UserProviderInterface;
6use Symfony\Component\Security\Core\User\UserCheckerInterface;
7use Symfony\Component\Security\Core\Exception\UsernameNotFoundException;
8use Symfony\Component\Security\Core\Exception\AuthenticationServiceException;
9use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken;
10use Symfony\Component\Security\Core\User\UserInterface;
11use Symfony\Component\Security\Core\Exception\AuthenticationException;
12 
13class DatabaseAuthenticationProvider extends UserAuthenticationProvider
14{
15    private $userProvider;
16 
17    public function __construct(UserProviderInterface $userProvider, UserCheckerInterface $userChecker, string $providerKey, bool $hideUserNotFoundExceptions = true)
18    {
19        parent::__construct($userChecker, $providerKey, $hideUserNotFoundExceptions);
20 
21        $this->userProvider = $userProvider;
22    }
23 
24    protected function retrieveUser($username, UsernamePasswordToken $token)
25    {
26        $user = $token->getUser();
27 
28        if ($user instanceof UserInterface)
29        {
30            return $user;
31        }
32 
33        try {
34            $user = $this->userProvider->loadUserByUsername($username);
35 
36            if (!$user instanceof UserInterface)
37            {
38                throw new AuthenticationServiceException('The user provider must return a UserInterface object.');
39            }
40 
41            return $user;
42        } catch (UsernameNotFoundException $e) {
43            $e->setUsername($username);
44 
45            throw $e;
46        } catch (\Exception $e) {
47            $e = new AuthenticationServiceException($e->getMessage(), 0, $e);
48            $e->setToken($token);
49            throw $e;
50        }
51    }
52 
53    protected function checkAuthentication(UserInterface $user, UsernamePasswordToken $token)
54    {
55        $currentUser = $token->getUser();
56         
57        if ($currentUser instanceof UserInterface)
58        {
59            if ($currentUser->getPassword() !== $user->getPassword())
60            {
61                throw new AuthenticationException('Credentials were changed from another session.');
62            }
63        }
64        else
65        {
66            $password = $token->getCredentials();
67 
68            if (empty($password))
69            {
70                throw new AuthenticationException('Password can not be empty.');
71            }
72 
73            if ($user->getPassword() != md5($password))
74            {
75                throw new AuthenticationException('Password is invalid.');
76            }
77        }
78    }
79}

1<?php
2require_once './vendor/autoload.php';
3 
4use Sfauth\User\DatabaseUserProvider;
5use Symfony\Component\Security\Core\User\UserChecker;
6use Sfauth\User\DatabaseAuthenticationProvider;
7use Symfony\Component\Security\Core\Authentication\AuthenticationProviderManager;
8use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken;
9use Symfony\Component\Security\Core\Exception\AuthenticationException;
10 
11// init doctrine db connection
12$doctrineConnection = \Doctrine\DBAL\DriverManager::getConnection(
13  array('url' => 'mysql://{USERNAME}:{PASSWORD}@{HOSTNAME}/{DATABASE_NAME}'), new \Doctrine\DBAL\Configuration()
14);
15 
16// init our custom db user provider
17$userProvider = new DatabaseUserProvider($doctrineConnection);
18 
19// we'll use default UserChecker, it's used to check additional checks like account lock/expired etc.
20// you can implement your own by implementing UserCheckerInterface interface
21$userChecker = new UserChecker();
22 
23// init our custom db authentication provider
24$dbProvider = new DatabaseAuthenticationProvider(
25    $userProvider,
26    $userChecker,
27    'frontend'
28);
29 
30// init authentication provider manager
31$authenticationManager = new AuthenticationProviderManager(array($dbProvider));
32 
33try {
34    // init un/pw, usually you'll get these from the $_POST variable, submitted by the end user
35    $username = 'admin';
36    $password = 'admin';
37 
38    // get unauthenticated token
39    $unauthenticatedToken = new UsernamePasswordToken(
40        $username,
41        $password,
42        'frontend'
43    );
44 
45    // authenticate user & get authenticated token
46    $authenticatedToken = $authenticationManager->authenticate($unauthenticatedToken);
47 
48    // we have got the authenticated token (user is logged in now), it can be stored in a session for later use
49    echo $authenticatedToken;
50    echo "\n";
51} catch (AuthenticationException $e) {
52    echo $e->getMessage();
53    echo "\n";
54}

1$unauthenticatedToken = new UsernamePasswordToken(
2    $username,
3    $password,
4    'frontend'
5);

1// authenticate user & get authenticated token
2$authenticatedToken = $authenticationManager->authenticate($unauthenticatedToken);

1CREATE TABLE `sf_users` (
2  `id` int(11) NOT NULL AUTO_INCREMENT,
3  `username` varchar(255) NOT NULL,
4  `password` varchar(255) NOT NULL,
5  `roles` enum('registered','moderator','admin') DEFAULT NULL,
6  PRIMARY KEY (`id`)
7) ENGINE=InnoDB;
8 
9INSERT INTO `sf_users` VALUES (1,'admin','21232f297a57a5a743894a0e4a801fc3','admin');

1$php db_auth.php
2UsernamePasswordToken(user="admin", authenticated=true, roles="admin")