mirror of
https://github.com/alchemy-fr/Phraseanet.git
synced 2025-10-11 12:03:14 +00:00
415 lines
16 KiB
PHP
415 lines
16 KiB
PHP
<?php
|
|
|
|
/*
|
|
* This file is part of Phraseanet
|
|
*
|
|
* (c) 2005-2015 Alchemy
|
|
*
|
|
* For the full copyright and license information, please view the LICENSE
|
|
* file that was distributed with this source code.
|
|
*/
|
|
|
|
namespace Alchemy\Phrasea\ControllerProvider\Root;
|
|
|
|
use Alchemy\Geonames\Exception\ExceptionInterface as GeonamesExceptionInterface;
|
|
use Alchemy\Phrasea\Application as PhraseaApplication;
|
|
use Alchemy\Phrasea\ControllerProvider\Root\Login;
|
|
use Alchemy\Phrasea\Exception\InvalidArgumentException;
|
|
use Alchemy\Phrasea\Model\Entities\FtpCredential;
|
|
use Alchemy\Phrasea\Model\Entities\ApiApplication;
|
|
use Alchemy\Phrasea\Notification\Receiver;
|
|
use Alchemy\Phrasea\Notification\Mail\MailRequestEmailUpdate;
|
|
use Alchemy\Phrasea\Form\Login\PhraseaRenewPasswordForm;
|
|
use Silex\Application;
|
|
use Silex\ControllerProviderInterface;
|
|
use Symfony\Component\HttpFoundation\JsonResponse;
|
|
use Symfony\Component\HttpFoundation\Request;
|
|
use Symfony\Component\HttpFoundation\RedirectResponse;
|
|
use Symfony\Component\HttpFoundation\Response;
|
|
|
|
class Account implements ControllerProviderInterface
|
|
{
|
|
public function connect(Application $app)
|
|
{
|
|
$controllers = $app['controllers_factory'];
|
|
|
|
$app['account.controller'] = $this;
|
|
|
|
$app['firewall']->addMandatoryAuthentication($controllers);
|
|
|
|
// Displays current logged in user account
|
|
$controllers->get('/', 'account.controller:displayAccount')
|
|
->bind('account');
|
|
|
|
// Updates current logged in user account
|
|
$controllers->post('/', 'account.controller:updateAccount')
|
|
->bind('submit_update_account');
|
|
|
|
// Displays email update form
|
|
$controllers->get('/reset-email/', 'account.controller:displayResetEmailForm')
|
|
->bind('account_reset_email');
|
|
|
|
// Submits a new email for the current logged in account
|
|
$controllers->post('/reset-email/', 'account.controller:resetEmail')
|
|
->bind('reset_email');
|
|
|
|
// Displays current logged in user access and form
|
|
$controllers->get('/access/', 'account.controller:accountAccess')
|
|
->bind('account_access');
|
|
|
|
// Displays and update current logged-in user password
|
|
$controllers->match('/reset-password/', 'account.controller:resetPassword')
|
|
->bind('reset_password');
|
|
|
|
// Displays current logged in user open sessions
|
|
$controllers->get('/security/sessions/', 'account.controller:accountSessionsAccess')
|
|
->bind('account_sessions');
|
|
|
|
// Displays all applications that can access user informations
|
|
$controllers->get('/security/applications/', 'account.controller:accountAuthorizedApps')
|
|
->bind('account_auth_apps');
|
|
|
|
// Displays a an authorized app grant
|
|
$controllers->get('/security/application/{application}/grant/', 'account.controller:grantAccess')
|
|
->before($app['middleware.api-application.converter'])
|
|
->assert('application_id', '\d+')
|
|
->bind('grant_app_access');
|
|
|
|
return $controllers;
|
|
}
|
|
|
|
public function resetPassword(Application $app, Request $request)
|
|
{
|
|
$form = $app->form(new PhraseaRenewPasswordForm());
|
|
|
|
if ('POST' === $request->getMethod()) {
|
|
$form->bind($request);
|
|
|
|
if ($form->isValid()) {
|
|
$data = $form->getData();
|
|
$user = $app['authentication']->getUser();
|
|
|
|
if ($app['auth.password-encoder']->isPasswordValid($user->getPassword(), $data['oldPassword'], $user->getNonce())) {
|
|
$app['manipulator.user']->setPassword($user, $data['password']);
|
|
$app->addFlash('success', $app->trans('login::notification: Mise a jour du mot de passe avec succes'));
|
|
|
|
return $app->redirectPath('account');
|
|
} else {
|
|
$app->addFlash('error', $app->trans('Invalid password provided'));
|
|
}
|
|
}
|
|
}
|
|
|
|
return $app['twig']->render('account/change-password.html.twig', array_merge(
|
|
Login::getDefaultTemplateVariables($app),
|
|
['form' => $form->createView()]
|
|
));
|
|
}
|
|
|
|
/**
|
|
* Reset Email
|
|
*
|
|
* @param Application $app
|
|
* @param Request $request
|
|
* @return RedirectResponse
|
|
*/
|
|
public function resetEmail(PhraseaApplication $app, Request $request)
|
|
{
|
|
if (null === ($password = $request->request->get('form_password')) || null === ($email = $request->request->get('form_email')) || null === ($emailConfirm = $request->request->get('form_email_confirm'))) {
|
|
|
|
$app->abort(400, $app->trans('Could not perform request, please contact an administrator.'));
|
|
}
|
|
|
|
$user = $app['authentication']->getUser();
|
|
|
|
if (!$app['auth.password-encoder']->isPasswordValid($user->getPassword(), $password, $user->getNonce())) {
|
|
$app->addFlash('error', $app->trans('admin::compte-utilisateur:ftp: Le mot de passe est errone'));
|
|
|
|
return $app->redirectPath('account_reset_email');
|
|
}
|
|
|
|
if (!\Swift_Validate::email($email)) {
|
|
$app->addFlash('error', $app->trans('forms::l\'email semble invalide'));
|
|
|
|
return $app->redirectPath('account_reset_email');
|
|
}
|
|
|
|
if ($email !== $emailConfirm) {
|
|
$app->addFlash('error', $app->trans('forms::les emails ne correspondent pas'));
|
|
|
|
return $app->redirectPath('account_reset_email');
|
|
}
|
|
|
|
$token = $app['manipulator.token']->createResetEmailToken($app['authentication']->getUser(), $email);
|
|
$url = $app->url('account_reset_email', ['token' => $token->getValue()]);
|
|
|
|
try {
|
|
$receiver = Receiver::fromUser($app['authentication']->getUser());
|
|
} catch (InvalidArgumentException $e) {
|
|
$app->addFlash('error', $app->trans('phraseanet::erreur: echec du serveur de mail'));
|
|
|
|
return $app->redirectPath('account_reset_email');
|
|
}
|
|
|
|
$mail = MailRequestEmailUpdate::create($app, $receiver, null);
|
|
$mail->setButtonUrl($url);
|
|
$mail->setExpiration($token->getExpiration());
|
|
|
|
$app['notification.deliverer']->deliver($mail);
|
|
|
|
$app->addFlash('info', $app->trans('admin::compte-utilisateur un email de confirmation vient de vous etre envoye. Veuillez suivre les instructions contenue pour continuer'));
|
|
|
|
return $app->redirectPath('account');
|
|
}
|
|
|
|
/**
|
|
* Display reset email form
|
|
*
|
|
* @param Application $app
|
|
* @param Request $request
|
|
* @return Response
|
|
*/
|
|
public function displayResetEmailForm(Application $app, Request $request)
|
|
{
|
|
if (null !== $tokenValue = $request->query->get('token')) {
|
|
if (null === $token = $app['repo.tokens']->findValidToken($tokenValue)) {
|
|
$app->addFlash('error', $app->trans('admin::compte-utilisateur: erreur lors de la mise a jour'));
|
|
|
|
return $app->redirectPath('account');
|
|
}
|
|
|
|
$user = $token->getUser();
|
|
$user->setEmail($token->getData());
|
|
$app['manipulator.token']->delete($token);
|
|
|
|
$app->addFlash('success', $app->trans('admin::compte-utilisateur: L\'email a correctement ete mis a jour'));
|
|
|
|
return $app->redirectPath('account');
|
|
}
|
|
|
|
return $app['twig']->render('account/reset-email.html.twig', Login::getDefaultTemplateVariables($app));
|
|
}
|
|
|
|
/**
|
|
* Display authorized applications that can access user informations
|
|
*
|
|
* @param Application $app
|
|
* @param Request $request
|
|
* @param ApiApplication $application
|
|
*
|
|
* @return JsonResponse
|
|
*/
|
|
public function grantAccess(Application $app, Request $request, ApiApplication $application)
|
|
{
|
|
if (!$request->isXmlHttpRequest() || !array_key_exists($request->getMimeType('json'), array_flip($request->getAcceptableContentTypes()))) {
|
|
$app->abort(400, $app->trans('Bad request format, only JSON is allowed'));
|
|
}
|
|
|
|
if (null === $account = $app['repo.api-accounts']->findByUserAndApplication($app['authentication']->getUser(), $application)) {
|
|
return $app->json(['success' => false]);
|
|
}
|
|
|
|
if (false === (Boolean) $request->query->get('revoke')) {
|
|
$app['manipulator.api-account']->authorizeAccess($account);
|
|
} else {
|
|
$app['manipulator.api-account']->revokeAccess($account);
|
|
}
|
|
|
|
return $app->json(['success' => true]);
|
|
}
|
|
|
|
/**
|
|
* Display account base access
|
|
*
|
|
* @param Application $app A Silex application where the controller is mounted on
|
|
* @param Request $request The current request
|
|
* @return Response
|
|
*/
|
|
public function accountAccess(Application $app, Request $request)
|
|
{
|
|
return $app['twig']->render('account/access.html.twig', [
|
|
'inscriptions' => $app['registration.manager']->getRegistrationSummary($app['authentication']->getUser())
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Display authorized applications that can access user informations
|
|
*
|
|
* @param Application $app A Silex application where the controller is mounted on
|
|
* @param Request $request The current request
|
|
* @return Response
|
|
*/
|
|
public function accountAuthorizedApps(Application $app, Request $request)
|
|
{
|
|
$data = [];
|
|
|
|
foreach ($app['repo.api-applications']->findByUser($app['authentication']->getUser()) as $application) {
|
|
$account = $app['repo.api-accounts']->findByUserAndApplication($app['authentication']->getUser(), $application);
|
|
|
|
$data[$application->getId()]['application'] = $application;
|
|
$data[$application->getId()]['user-account'] = $account;
|
|
}
|
|
|
|
return $app['twig']->render('account/authorized_apps.html.twig', [
|
|
"applications" => $data,
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Display account session accesss
|
|
*
|
|
* @param Application $app A Silex application where the controller is mounted on
|
|
* @param Request $request The current request
|
|
* @return Response
|
|
*/
|
|
public function accountSessionsAccess(Application $app, Request $request)
|
|
{
|
|
$dql = 'SELECT s FROM Phraseanet:Session s
|
|
WHERE s.user = :usr_id
|
|
ORDER BY s.created DESC';
|
|
|
|
$query = $app['orm.em']->createQuery($dql);
|
|
$query->setMaxResults(100);
|
|
$query->setParameters(['usr_id' => $app['session']->get('usr_id')]);
|
|
$sessions = $query->getResult();
|
|
|
|
$result = [];
|
|
foreach ($sessions as $session) {
|
|
$info = '';
|
|
try {
|
|
$geoname = $app['geonames.connector']->ip($session->getIpAddress());
|
|
$country = $geoname->get('country');
|
|
$city = $geoname->get('city');
|
|
$region = $geoname->get('region');
|
|
|
|
$countryName = isset($country['name']) ? $country['name'] : null;
|
|
$regionName = isset($region['name']) ? $region['name'] : null;
|
|
|
|
if (null !== $city) {
|
|
$info = $city . ($countryName ? ' (' . $countryName . ')' : null);
|
|
} elseif (null !== $regionName) {
|
|
$info = $regionName . ($countryName ? ' (' . $countryName . ')' : null);
|
|
} elseif (null !== $countryName) {
|
|
$info = $countryName;
|
|
} else {
|
|
$info = '';
|
|
}
|
|
} catch (GeonamesExceptionInterface $e) {
|
|
|
|
}
|
|
|
|
$result[] = [
|
|
'session' => $session,
|
|
'info' => $info,
|
|
];
|
|
}
|
|
|
|
return $app['twig']->render('account/sessions.html.twig', ['sessions' => $result]);
|
|
}
|
|
|
|
/**
|
|
* Display account form
|
|
*
|
|
* @param Application $app A Silex application where the controller is mounted on
|
|
* @param Request $request The current request
|
|
* @return Response
|
|
*/
|
|
public function displayAccount(Application $app, Request $request)
|
|
{
|
|
return $app['twig']->render('account/account.html.twig', [
|
|
'user' => $app['authentication']->getUser(),
|
|
'evt_mngr' => $app['events-manager'],
|
|
'notifications' => $app['events-manager']->list_notifications_available($app['authentication']->getUser()),
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Update account informations
|
|
*
|
|
* @param PhraseaApplication $app A Silex application where the controller is mounted on
|
|
* @param Request $request The current request
|
|
* @return Response
|
|
*/
|
|
public function updateAccount(PhraseaApplication $app, Request $request)
|
|
{
|
|
$registrations = $request->request->get('registrations');
|
|
if (false === is_array($registrations)) {
|
|
$app->abort(400, '"registrations" parameter must be an array of base ids.');
|
|
}
|
|
if (0 !== count($registrations)) {
|
|
foreach ($registrations as $baseId) {
|
|
$app['manipulator.registration']->createRegistration($app['authentication']->getUser(), \collection::get_from_base_id($app, $baseId));
|
|
}
|
|
$app->addFlash('success', $app->trans('Your registration requests have been taken into account.'));
|
|
}
|
|
|
|
$accountFields = [
|
|
'form_gender',
|
|
'form_firstname',
|
|
'form_lastname',
|
|
'form_address',
|
|
'form_zip',
|
|
'form_phone',
|
|
'form_fax',
|
|
'form_function',
|
|
'form_company',
|
|
'form_activity',
|
|
'form_geonameid',
|
|
'form_addressFTP',
|
|
'form_loginFTP',
|
|
'form_pwdFTP',
|
|
'form_destFTP',
|
|
'form_prefixFTPfolder',
|
|
'form_retryFTP'
|
|
];
|
|
|
|
if (0 === count(array_diff($accountFields, array_keys($request->request->all())))) {
|
|
$app['authentication']->getUser()
|
|
->setGender((int) $request->request->get("form_gender"))
|
|
->setFirstName($request->request->get("form_firstname"))
|
|
->setLastName($request->request->get("form_lastname"))
|
|
->setAddress($request->request->get("form_address"))
|
|
->setZipCode($request->request->get("form_zip"))
|
|
->setPhone($request->request->get("form_phone"))
|
|
->setFax($request->request->get("form_fax"))
|
|
->setJob($request->request->get("form_activity"))
|
|
->setCompany($request->request->get("form_company"))
|
|
->setActivity($request->request->get("form_function"))
|
|
->setMailNotificationsActivated((Boolean) $request->request->get("mail_notifications"));
|
|
|
|
$app['manipulator.user']->setGeonameId($app['authentication']->getUser(), $request->request->get("form_geonameid"));
|
|
|
|
$ftpCredential = $app['authentication']->getUser()->getFtpCredential();
|
|
|
|
if (null === $ftpCredential) {
|
|
$ftpCredential = new FtpCredential();
|
|
$ftpCredential->setUser($app['authentication']->getUser());
|
|
}
|
|
|
|
$ftpCredential->setActive($request->request->get("form_activeFTP"));
|
|
$ftpCredential->setAddress($request->request->get("form_addressFTP"));
|
|
$ftpCredential->setLogin($request->request->get("form_loginFTP"));
|
|
$ftpCredential->setPassword($request->request->get("form_pwdFTP"));
|
|
$ftpCredential->setPassive($request->request->get("form_passifFTP"));
|
|
$ftpCredential->setReceptionFolder($request->request->get("form_destFTP"));
|
|
$ftpCredential->setRepositoryPrefixName($request->request->get("form_prefixFTPfolder"));
|
|
|
|
$app['orm.em']->persist($ftpCredential);
|
|
$app['orm.em']->persist($app['authentication']->getUser());
|
|
|
|
$app['orm.em']->flush();
|
|
$app->addFlash('success', $app->trans('login::notification: Changements enregistres'));
|
|
}
|
|
|
|
$requestedNotifications = (array) $request->request->get('notifications', []);
|
|
|
|
foreach ($app['events-manager']->list_notifications_available($app['authentication']->getUser()) as $notifications) {
|
|
foreach ($notifications as $notification) {
|
|
$app['manipulator.user']->setNotificationSetting($app['authentication']->getUser(), $notification['id'], isset($requestedNotifications[$notification['id']]));
|
|
}
|
|
}
|
|
|
|
return $app->redirectPath('account');
|
|
}
|
|
}
|