<?php
namespace Sq\GraphQL\Security\Authenticator;
use Psr\Log\LoggerInterface;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\RequestStack;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Exception\AuthenticationException;
use Symfony\Component\Security\Http\Authenticator\AbstractAuthenticator;
use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
class DevAuthenticator extends AbstractAuthenticator
{
use ImpersonationTrait;
protected const AUTH_HEADER = 'Authorization';
protected const IMPERSONATE_HEADER = 'Impersonate-Uid';
protected const BEARER_REGEX = '/^(?:\s+)?SqDev\s/';
public function __construct(
protected RequestStack $requestStack,
protected LoggerInterface $logger,
) {
}
public function createToken(Passport $passport, string $firewallName): TokenInterface
{
$token = parent::createToken($passport, $firewallName);
$impersonateUid = $this->requestStack->getMainRequest()->headers->get(static::IMPERSONATE_HEADER);
if ($impersonateUid)
{
$token = $this->createImpersonationToken($token, (int) $impersonateUid, $firewallName);
}
return $token;
}
public function supports(Request $request): bool
{
return $request->headers->has(static::AUTH_HEADER)
&& preg_match(static::BEARER_REGEX, $request->headers->get(static::AUTH_HEADER));
}
public function authenticate(Request $request): Passport
{
$header = $request->headers->get(static::AUTH_HEADER);
$userId = trim(preg_replace(static::BEARER_REGEX, '', $header));
return new SelfValidatingPassport(new UserBadge($userId));
}
public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
{
$this->logger && $this->logger->debug('Authentication failure', [
'exception' => $exception,
'guard' => __CLASS__,
]);
return null;
}
public function onAuthenticationSuccess(Request $request, TokenInterface $token, $providerKey): ?Response
{
return null;
}
}