Symfony 4 — Форма вручную

Я реализовал маленький и простой логин & сбросить действия пароля без fosuserbundle в Symfony 4. Это не так сложно сделать:

Настройте вашу безопасность:

# config/packages/security.yaml
security:
encoders:
App\Entity\User:
algorithm: bcrypt

providers:
our_db_provider: # Arbitrary name
entity:
class: App\Entity\User
property: username
firewalls:
dev:
pattern: ^/(_(profiler|wdt)|css|images|js)/
security: false
main:
pattern:    ^/
provider: our_db_provider # Use any declared provider above
form_login:
login_path: login
check_path: login
default_target_path: /
anonymous: true
logout:
path:   /logout
target: /
remember_me:
secret:   '%env(APP_SECRET)%'
lifetime: 604800 # 1 week in seconds
path:     /access_control:
- { path: ^/login, roles: IS_AUTHENTICATED_ANONYMOUSLY }
- { path: ^/resetting, roles: IS_AUTHENTICATED_ANONYMOUSLY }
- { path: ^/, roles: ROLE_USER }

Действие входа:

// src/Controller/Security/SecurityController.php
namespace App\Controller\Security;

use Symfony\Bundle\FrameworkBundle\Controller\Controller;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;

class SecurityController extends Controller
{
public function login(Request $request, AuthenticationUtils $authUtils)
{
$error = $authUtils->getLastAuthenticationError();

// last username entered by the user
$lastUsername = $authUtils->getLastUsername();

return $this->render('Security/login.html.twig', [
'error' => $error,
'last_username' => $lastUsername,
]);
}
}

Шаблон входа

# templates/Security/login.html.twig
{% block body %}
<h1>Login</h1>

<div class="login-page">
<div class="form">

{% if error %}
<div class="error">{{ error.messageKey|trans(error.messageData, 'security') }}</div>
{% endif %}

<form action="{{ path('login') }}" method="post">

<div>
<label for="username">Email:</label>
<input type="text" id="username" name="_username" value="{{ last_username }}" />
</div>
<div>
<label for="password">Password:</label>
<input type="password" id="password" name="_password" />
</div>
<div class="cta">
<div>
<input type="checkbox" id="remember_me" name="_remember_me" checked />
<label for="remember_me">Keep me logged in</label>
</div>
<div>
<button type="submit">Connexion</button>
</div>
</div>
</form>
<a href="{{ path('request_password') }}">Forgot password ?</a>
</div>
</div>
{% endblock %}

Диспетчер пользователей:

# src/Manager/UserManager.php
use App\Entity\User;
use App\Util\PasswordUpdater;
use Doctrine\ORM\EntityManagerInterface;
use Symfony\Component\Security\Core\User\AdvancedUserInterface;

/**
* Class UserManager
* @package App\Manager
*/
class UserManager
{
/** @var EntityManagerInterface  */
private $em;

/** @var PasswordUpdater  */
private $passwordUpdater;

/**
* UserManager constructor.
*
* @param EntityManagerInterface $em
* @param PasswordUpdater $passwordUpdater
*/
public function __construct(EntityManagerInterface $em, PasswordUpdater $passwordUpdater)
{
$this->em = $em;
$this->passwordUpdater = $passwordUpdater;
}

/**
* Find a user by his username
*
* @param string $username
*
* @return \App\Entity\User|null
*/
public function findUserByUsername($username)
{
$user = $this->em->getRepository('App\Entity\User')->findOneBy(['username' => $username]);

return $user;
}

/**
* Update a user
*
* @param AdvancedUserInterface $user
*
* @param bool $andFlush
*/
public function updateUser(AdvancedUserInterface $user, $andFlush = true)
{
$this->em->persist($user);

if ($andFlush) {
$this->em->flush();
}
}

/**
* Find a user by his confirmationToken
*
* @param $confirmationToken
*
* @return \App\Entity\User|null
*/
public function findUserByConfirmationToken($confirmationToken)
{
$user = $this->em->getRepository('App\Entity\User')->findOneBy(['confirmationToken' => $confirmationToken]);

return $user;
}

/**
* Encode & update user password
*
* @param User $user
*/
public function updateUserPassword(User $user)
{
$this->passwordUpdater->hashPassword($user);
$user->setConfirmationToken(null);
$user->setPasswordRequestedAt(null);
}
}

И пользовательский объект:

# src/Entity/User.php
use Doctrine\ORM\Mapping as ORM;
use Symfony\Component\Security\Core\User\AdvancedUserInterface;

/**
* @ORM\Entity
* @ORM\Table(name="user")
*/
class User implements AdvancedUserInterface, \Serializable
{
/**
* @ORM\Column(type="integer")
* @ORM\Id
* @ORM\GeneratedValue(strategy="AUTO")
*/
private $id;

/**
* @ORM\Column(type="string", length=25, unique=true)
*/
private $username;/**
* @ORM\Column(type="string", length=100, unique=true)
*/
private $email;

/**
* @ORM\Column(type="string", length=64)
*/
private $password;

/**
* @ORM\Column(name="is_active", type="boolean")
*/
private $isActive;

/**
* Random string sent to the user email address in order to verify it.
*
* @var string
*
* @ORM\Column(type="string", length=180, nullable=true)
*/
protected $confirmationToken;

/**
* @var \DateTime
*
* @ORM\Column(type="datetime", nullable=true)
*/
protected $passwordRequestedAt;

/**
* User constructor.
*/
public function __construct()
{
$this->isActive = true;
}

/**
* @return mixed
*/
public function getId()
{
return $this->id;
}

public function getUsername()
{
return $this->username;
}

public function getSalt()
{
return null;
}

public function setSalt($salt)
{
return null;
}

/**
* @return mixed
*/
public function getEmail()
{
return $this->email;
}

/**
* @param mixed $email
* @return User
*/
public function setEmail($email)
{
$this->email = $email;
$this->username = $email;

return $this;
}

/**
* @return mixed
*/
public function getPassword()
{
return $this->password;
}

/**
* @param mixed $password
* @return User
*/
public function setPassword($password)
{
$this->password = $password;
return $this;
}

/**
* @return mixed
*/
public function isActive()
{
return $this->isActive;
}

/**
* @param mixed $isActive
* @return User
*/
public function setActive($isActive)
{
$this->isActive = $isActive;
return $this;
}

public function getRoles()
{
return array('ROLE_USER');
}

public function eraseCredentials()
{
}

public function isAccountNonExpired()
{
return true;
}

public function isAccountNonLocked()
{
return true;
}

public function isCredentialsNonExpired()
{
return true;
}

public function isEnabled()
{
return $this->isActive;
}

/**
* @return string
*/
public function getConfirmationToken()
{
return $this->confirmationToken;
}

/**
* @param $confirmationToken
*
* @return $this
*/
public function setConfirmationToken($confirmationToken)
{
$this->confirmationToken = $confirmationToken;

return $this;
}

/**
* @param \DateTime|null $date
*
* @return $this
*/
public function setPasswordRequestedAt(\DateTime $date = null)
{
$this->passwordRequestedAt = $date;

return $this;
}

/**
* Gets the timestamp that the user requested a password reset.
*
* @return null|\DateTime
*/
public function getPasswordRequestedAt()
{
return $this->passwordRequestedAt;
}

/**
* @param $ttl
*
* @return bool
*/
public function isPasswordRequestNonExpired($ttl)
{
return $this->getPasswordRequestedAt() instanceof \DateTime &&
$this->getPasswordRequestedAt()->getTimestamp() + $ttl > time();
}

/** @see \Serializable::serialize() */
public function serialize()
{
return serialize(array(
$this->id,
$this->email,
$this->username,
$this->password,
$this->isActive,
));
}

/** @see \Serializable::unserialize() */
public function unserialize($serialized)
{
list (
$this->id,
$this->email,
$this->username,
$this->password,
$this->isActive,
) = unserialize($serialized);
}
}

Так я с этим справляюсь. Это, вероятно, не идеально, но работает нормально. Вы можете найти источники здесь: https://github.com/matthieuleorat/documentManager

Надеюсь, что это поможет вам.