Add identity platform api authentication

config/services/google_identity_platform.yaml

@@ -15,3 +15,13 @@ services:
             $tenantId: '%sfs_user.login.google_identity_platform.tenant_id%'
 
     Softspring\UserBundle\GoogleIdentityPlatform\IdentityPlatformUserSynchronizer: ~
+
+    Softspring\UserBundle\Manager\IdentityPlatformSessionManager:
+        arguments:
+            $apiKey: '%sfs_user.login.google_identity_platform.api_key%'
+            $tenantId: '%sfs_user.login.google_identity_platform.tenant_id%'
+
+    Softspring\UserBundle\Manager\IdentityPlatformSessionManagerInterface:
+        alias: Softspring\UserBundle\Manager\IdentityPlatformSessionManager
+
+    Softspring\UserBundle\Security\IdentityPlatformAccessTokenHandler: ~

src/Controller/Admin/UsersController.php

@@ -81,11 +81,16 @@ public function usersCountWidget(): Response
             'users' => $this->userManager->getRepository()->count(['admin' => false]),
             'administrators' => $this->userManager->getRepository()->count(['admin' => true]),
             'total' => $this->userManager->getRepository()->count([]),
+            'supports_confirmable' => $this->supportsConfirmableUsers(),
         ]);
     }
 
     public function usersPendingConfirmCountWidget(): Response
     {
+        if (!$this->supportsConfirmableUsers()) {
+            return new Response('', Response::HTTP_NO_CONTENT);
+        }
+
         return $this->render('@SfsUser/admin/users/widget-pending-confirm-count.html.twig', [
             'count' => $this->userManager->getRepository()->count(['confirmedAt' => null]),
         ]);
@@ -188,4 +193,9 @@ public function resendConfirmationEmail(string $user, Request $request): Respons
 
         return $this->redirectToRoute('sfs_user_admin_users_details', ['user' => $user]);
     }
+
+    private function supportsConfirmableUsers(): bool
+    {
+        return $this->userManager->getEntityClassReflection()->implementsInterface(ConfirmableInterface::class);
+    }
 }

src/Controller/GoogleIdentityPlatformLoginController.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Controller;
 
 use RuntimeException;

src/Controller/LoginController.php

@@ -43,6 +43,7 @@ public function login(Request $request, TranslatorInterface $translator): Respon
     {
         /** @var Session $session */
         $session = $request->getSession();
+        $manualLoginEnabled = $this->loginForm->supportsManualLogin();
 
         $loginCheckParams = [];
         if ($this->targetPathParameter && $targetPath = $request->query->get($this->targetPathParameter, $request->request->get($this->targetPathParameter))) {
@@ -52,33 +53,38 @@ public function login(Request $request, TranslatorInterface $translator): Respon
         $authenticationErrorKey = class_exists('Symfony\Component\Security\Http\SecurityRequestAttributes') ? constant('Symfony\Component\Security\Http\SecurityRequestAttributes::AUTHENTICATION_ERROR') : (class_exists('Symfony\Component\Security\Core\Security') ? constant('Symfony\Component\Security\Core\Security::AUTHENTICATION_ERROR') : null);
         $lastUserNameKey = class_exists('Symfony\Component\Security\Http\SecurityRequestAttributes') ? constant('Symfony\Component\Security\Http\SecurityRequestAttributes::LAST_USERNAME') : (class_exists('Symfony\Component\Security\Core\Security') ? constant('Symfony\Component\Security\Core\Security::LAST_USERNAME') : null);
 
-        $form = $this->createForm(get_class($this->loginForm), [
-            '_username' => $session->get($lastUserNameKey) ?? '',
-            '_password' => '',
-        ], [
-            'action' => $this->generateUrl('sfs_user_login_check', $loginCheckParams),
-        ]);
+        $form = null;
 
-        if ($request->attributes->has($authenticationErrorKey)) {
-            $form->addError(new FormError($request->attributes->get($authenticationErrorKey)));
-        } elseif ($session->has($authenticationErrorKey)) {
-            $error = $session->get($authenticationErrorKey);
+        if ($manualLoginEnabled) {
+            $form = $this->createForm(get_class($this->loginForm), [
+                '_username' => $session->get($lastUserNameKey) ?? '',
+                '_password' => '',
+            ], [
+                'action' => $this->generateUrl('sfs_user_login_check', $loginCheckParams),
+            ]);
 
-            if ($error instanceof TooManyLoginAttemptsAuthenticationException) {
-                $form->addError(new FormError($translator->trans($error->getMessageKey(), $error->getMessageData(), 'security')));
-            } else {
-                $form->addError(new FormError($session->get($authenticationErrorKey)->getMessage()));
-            }
+            if ($request->attributes->has($authenticationErrorKey)) {
+                $form->addError(new FormError($request->attributes->get($authenticationErrorKey)));
+            } elseif ($session->has($authenticationErrorKey)) {
+                $error = $session->get($authenticationErrorKey);
 
-            $session->remove($authenticationErrorKey);
+                if ($error instanceof TooManyLoginAttemptsAuthenticationException) {
+                    $form->addError(new FormError($translator->trans($error->getMessageKey(), $error->getMessageData(), 'security')));
+                } else {
+                    $form->addError(new FormError($session->get($authenticationErrorKey)->getMessage()));
+                }
+
+                $session->remove($authenticationErrorKey);
+            }
         }
 
-        if (($response = $this->dispatchGetResponse(SfsUserEvents::LOGIN_ATTEMPT, new GetResponseFormEvent($form, $request))) instanceof Response) {
+        if ($form && ($response = $this->dispatchGetResponse(SfsUserEvents::LOGIN_ATTEMPT, new GetResponseFormEvent($form, $request))) instanceof Response) {
             return $response;
         }
 
         return $this->render('@SfsUser/login/login.html.twig', [
             'login_form' => $form,
+            'manual_login_enabled' => $manualLoginEnabled,
             'oauth_services' => $this->oauthServices,
             'google_identity_platform' => $this->googleIdentityPlatformConfig,
             'register_params' => $loginCheckParams,

src/Controller/OauthLoginIntegrationController.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Controller;
 
 use RuntimeException;

src/DependencyInjection/Compiler/AliasDoctrineEntityManagerPass.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\DependencyInjection\Compiler;
 
 use Symfony\Component\DependencyInjection\Compiler\CompilerPassInterface;

src/DependencyInjection/Configuration.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\DependencyInjection;
 
 use Symfony\Component\Config\Definition\Builder\TreeBuilder;

src/Doctrine/Filter/AdminFilter.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Doctrine\Filter;
 
 use Doctrine\ORM\Mapping\ClassMetadata;

src/Doctrine/Filter/UserFilter.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Doctrine\Filter;
 
 use Doctrine\ORM\Mapping\ClassMetadata;

src/Entity/ConfirmableTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Entity/EmailTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Entity/EnabledTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Entity/GoogleIdentityPlatformTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Entity/NameSurnameTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Entity/OwnerTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Entity/PasswordRequestTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Entity/RolesAdminTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Entity/RolesFullTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Softspring\UserBundle\Model\RolesFullTrait as RolesFullTraitModel;

src/Entity/RolesTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Entity/UserAccessLatLongTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Entity/UserAccessLocationTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Entity/UserAvatarTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Entity/UserHasLocalePreferenceTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Entity/UserIdentifierEmailTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Entity/UserIdentifierUsernameTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Entity/UserLastLoginTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Entity/UserMediaAvatarTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Entity/UserPasswordTrait.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Entity;
 
 use Doctrine\ORM\Mapping as ORM;

src/Event/GetResponseUserEvent.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Event;
 
 use Softspring\Component\Events\GetResponseEventInterface;

src/Event/RegisterExceptionEvent.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Event;
 
 use Exception;

src/Event/UserEvent.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Event;
 
 use Softspring\Component\Events\RequestEvent;

src/Event/UserInvitationEvent.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Event;
 
 use Softspring\Component\Events\RequestEvent;

src/EventListener/Admin/AdministratorControllerListener.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\EventListener\Admin;
 
 use Doctrine\ORM\EntityManagerInterface;

src/EventListener/Admin/UserControllerListener.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\EventListener\Admin;
 
 use Doctrine\ORM\EntityManagerInterface;

src/EventListener/EmailInvitationListener.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\EventListener;
 
 use Softspring\UserBundle\Event\UserInvitationEvent;

src/EventListener/UserAccessEventSubscriber.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\EventListener;
 
 use Exception;

src/Form/AcceptInvitationForm.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Form;
 
 use Softspring\UserBundle\Manager\UserManagerInterface;

src/Form/AcceptInvitationFormInterface.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Form;
 
 use Symfony\Component\Form\FormTypeInterface;

src/Form/Admin/AccessHistoryListFilterForm.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace Softspring\UserBundle\Form\Admin;
 
 use Softspring\Component\DoctrinePaginator\Form\PaginatorForm;