src/Security/EntraRoleVoter.php line 9

Open in your IDE?
  1. <?php
  2. namespace App\Security;
  4. use App\Repository\UtilisateurRepository;
  5. use HWI\Bundle\OAuthBundle\Security\Core\User\OAuthUser;
  6. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  7. use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;
  9. class EntraRoleVoter implements VoterInterface
  10. {
  11. public function __construct(private UtilisateurRepository $utilisateurRepository)
  12. {
  13. }
  15. public function vote(TokenInterface $token, mixed $subject, array $attributes): int
  16. {
  17. $user = $token->getUser();
  19. if (!$user instanceof OAuthUser) {
  20. return self::ACCESS_ABSTAIN;
  21. }
  23. $email = $user->getUserIdentifier();
  24. $login = strtolower(explode('@', $email)[0]);
  26. $realUser = $this->utilisateurRepository->findOneBy(['login' => $login]);
  27. if (!$realUser) {
  28. return self::ACCESS_ABSTAIN;
  29. }
  31. $realRoles = $realUser->getRoles();
  33. foreach ($attributes as $attribute) {
  34. if ($attribute === 'IS_AUTHENTICATED_REMEMBERED' || in_array($attribute, $realRoles, true)) {
  35. return self::ACCESS_GRANTED;
  36. }
  37. }
  39. return self::ACCESS_ABSTAIN;
  40. }
  41. }