How to extend authentication

Good day, everyone.

I need to extend authentication mechanism for my needs.
To do this i created Custom Form Password Authenticator

1) I changed firewall settings:

main: ... #organization-form-login: simple_form: authenticator: my_authenticator csrf_provider: form.csrf_provider check_path: oro_user_security_check login_path: oro_user_security_login ...

1 2 3 4 5 6 7 8 9

main:             ...             #organization-form-login:             simple_form:                 authenticator:              my_authenticator                 csrf_provider:              form.csrf_provider                 check_path:                 oro_user_security_check                 login_path:                 oro_user_security_login             ...

2) I created service for my_authenticator

services: ... my_authenticator: class: OQ\SecurityBundle\Security\MyAuthenticator arguments: - @oro_organization.organization_manager ...

1 2 3 4 5 6 7

services:     ...     my_authenticator:         class:     OQ\SecurityBundle\Security\MyAuthenticator         arguments:             - @oro_organization.organization_manager     ...

3) And here is the code of MyAuthenticator

namespace OQ\SecurityBundle\Security; use Symfony\Component\Config\Definition\Exception\Exception; use Symfony\Component\HttpFoundation\Request; use Symfony\Component\Security\Core\Authentication\SimpleFormAuthenticatorInterface; use Symfony\Component\Security\Core\Authentication\Token\TokenInterface; use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken; use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface; use Symfony\Component\Security\Core\Exception\AuthenticationException; use Symfony\Component\Security\Core\Exception\UsernameNotFoundException; use Symfony\Component\Security\Core\User\UserProviderInterface; Use Oro\Bundle\SecurityBundle\Authentication\Token\UsernamePasswordOrganizationToken; use Oro\Bundle\OrganizationBundle\Entity\Manager\OrganizationManager; class MyAuthenticator implements SimpleFormAuthenticatorInterface { /** @var OrganizationManager */ protected $manager; public function __construct(OrganizationManager $manager) { $this->manager = $manager; } public function authenticateToken(TokenInterface $token, UserProviderInterface $userProvider, $providerKey) { // Here will be my special checks //Here i try to get username and force authentication try { $user = $userProvider->loadUserByUsername($token->getUsername()); } catch (UsernameNotFoundException $e) { throw new AuthenticationException('This user not allowed'); } // If everythin' is ok - create a token if ($user) { return new UsernamePasswordOrganizationToken( $user, $user->getPassword(), $providerKey, $this->manager->getOrganizationById(1) ); } else { throw new AuthenticationException('Invalid username or password'); } } public function supportsToken(TokenInterface $token, $providerKey) { return $token instanceof UsernamePasswordOrganizationToken && $token->getProviderKey() === $providerKey; } public function createToken(Request $request, $username, $password, $providerKey) { //UsernamePasswordOrganizationToken return new UsernamePasswordOrganizationToken($username, $password, $providerKey, $this->manager->getOrganizationById(1)); } }

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64

namespace OQ\SecurityBundle\Security;   use Symfony\Component\Config\Definition\Exception\Exception; use Symfony\Component\HttpFoundation\Request; use Symfony\Component\Security\Core\Authentication\SimpleFormAuthenticatorInterface; use Symfony\Component\Security\Core\Authentication\Token\TokenInterface; use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken; use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface; use Symfony\Component\Security\Core\Exception\AuthenticationException; use Symfony\Component\Security\Core\Exception\UsernameNotFoundException; use Symfony\Component\Security\Core\User\UserProviderInterface; Use Oro\Bundle\SecurityBundle\Authentication\Token\UsernamePasswordOrganizationToken; use Oro\Bundle\OrganizationBundle\Entity\Manager\OrganizationManager;   class MyAuthenticator implements SimpleFormAuthenticatorInterface {     /** @var OrganizationManager */     protected $manager;       public function __construct(OrganizationManager $manager)     {         $this->manager = $manager;     }       public function authenticateToken(TokenInterface $token, UserProviderInterface $userProvider, $providerKey)     {           // Here will be my special checks //Here i try to get username and force authentication         try {             $user = $userProvider->loadUserByUsername($token->getUsername());         } catch (UsernameNotFoundException $e) {             throw new AuthenticationException('This user not allowed');         }           // If everythin' is ok - create a token         if ($user) {             return new UsernamePasswordOrganizationToken(                 $user,                 $user->getPassword(),                 $providerKey,                 $this->manager->getOrganizationById(1)             );         } else { throw new AuthenticationException('Invalid username or password'); }     }       public function supportsToken(TokenInterface $token, $providerKey)     {         return $token instanceof UsernamePasswordOrganizationToken         && $token->getProviderKey() === $providerKey;     }       public function createToken(Request $request, $username, $password, $providerKey)     {         //UsernamePasswordOrganizationToken         return new UsernamePasswordOrganizationToken($username, $password, $providerKey, $this->manager->getOrganizationById(1));     } }

When i try to authenticate user – i succesfully log in, but i dont see anything except black header and profiler. Profiler says me, that i’m logged as USER_NAME (yellow color), and not authenticated (red color).
Can you give me an advice – how to make t work?
And one more question – how can i retrieve user’s organization in this authenticator class?

---

Docker environment for Symfony2/OroCRM/OroBAP development on Windows platform
https://github.com/stepansib/sf-oro-docker

Topic

[Stepan YudinParticipant]

Dont be afraid of missing password check, i’ll add password encoder injection later.

---

Docker environment for Symfony2/OroCRM/OroBAP development on Windows platform
https://github.com/stepansib/sf-oro-docker

[Stepan YudinParticipant]

Already solved this problem myself: i dint specified user role on UsernamePasswordOrganizationToken creation.
Now it works fine)

---

Docker environment for Symfony2/OroCRM/OroBAP development on Windows platform
https://github.com/stepansib/sf-oro-docker

[oliverusselldevParticipant]

Why you didn’t use Symfony Guard for Symfony authentication? It is a great component that makes implementing authentication easier.

[Author]

Replies