finished user prfile and passwords

src/Controller/BaseController.php

@@ -0,0 +1,16 @@
+<?php
+
+namespace App\Controller;
+
+use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
+use App\Entity\User;
+
+abstract class BaseController extends AbstractController
+{
+    protected function getUser(): User
+    {
+        return parent::getUser();
+    }
+
+
+}

src/Controller/FrontendController.php

@@ -10,27 +10,30 @@ use Exception;
 use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
 use Symfony\Component\HttpFoundation\Response;
 use Symfony\Component\Routing\Annotation\Route;
-use Symfony\Component\Serializer\SerializerInterface;
 
 /**
  *
  */
 class FrontendController extends AbstractController
 {
-    const TEMPLATE_DIR = 'themes/default/';
+    #[Route(path: '/', name: 'app_main')]
+    public function quote(QuotesRepository $quotesRepository): Response
+    {
+        $user = $this->getUser();
+        $quote = $quotesRepository->findOneRandom();
+
+        return $this->render(view: '@default/base.html.twig', parameters: [
+	        'user' => $user,
+	        'quote' => json_encode(value: $quote->getQuote())
+        ]);
+    }
 
     /**
      * @throws Exception
      */
-    #[Route(path: '/', name: 'app_main')]
-    public function quote(SerializerInterface $serializer, QuotesRepository $quotesRepository): Response
+    #[Route(path: '/logout', name: 'app_logout')]
+    public function logout(): never
     {
-        $quote = $quotesRepository->findOneRandom();
-
-        return $this->render(view: self::TEMPLATE_DIR . 'base.html.twig', parameters: [
-            'template_dir' => self::TEMPLATE_DIR,
-	        'user' => $serializer->serialize(data: $this->getUser(), format: 'jsonld'),
-	        'quote' => json_encode(value: $quote->getQuote())
-        ]);
+        throw new Exception(message: 'Logout should never be reached.');
     }
 }

src/Controller/PagesController.php

@@ -10,8 +10,6 @@ use Symfony\Component\Routing\Annotation\Route;
 
 class PagesController extends AbstractController
 {
-    const TEMPLATE_DIR = 'themes/default/';
-
     #[Route(path: '/pages/{name}', name: 'pages_display')]
     public function display(PagesRepository $pagesRepository, string $name): Response
     {
@@ -25,7 +23,7 @@ class PagesController extends AbstractController
             $page->setContent(content: 'The requested page was not found.');
         }
 
-        return $this->render(view: 'pages/display.html.twig', parameters: [
+        return $this->render(view: '@default/pages/display.html.twig', parameters: [
             'page' => $page,
         ]);
     }
@@ -33,18 +31,12 @@ class PagesController extends AbstractController
     #[Route(path: '/imprint', name: 'app_imprint')]
     public function imprint(): Response
     {
-        return $this->render(view: self::TEMPLATE_DIR . 'pages/imprint.html.twig', parameters: [
-            'template_dir' => self::TEMPLATE_DIR,
-            'controller_name' => 'PagesController',
-        ]);
+        return $this->render(view: '@default/pages/imprint.html.twig');
     }
 
     #[Route(path: '/privacy', name: 'app_privacy')]
     public function privacy(): Response
     {
-        return $this->render(view: self::TEMPLATE_DIR . 'pages/privacy.html.twig', parameters: [
-            'template_dir' => self::TEMPLATE_DIR,
-            'controller_name' => 'PagesController',
-        ]);
+        return $this->render(view: '@default/pages/privacy.html.twig');
     }
 }

src/Controller/ProjectsController.php

@@ -13,7 +13,7 @@ class ProjectsController extends AbstractController
     public function index(ProjectsRepository $projectsRepository, string $name = ''): Response
     {
         if ($name == '') {
-            return $this->render(view: 'projects/index.html.twig', parameters: [
+            return $this->render(view: '@default/projects/index.html.twig', parameters: [
                 'projects' => $projectsRepository->findAll(),
             ]);
         } else {
@@ -22,7 +22,7 @@ class ProjectsController extends AbstractController
 
                 // $parsedReadMe = $markdownParser->transformMarkdown(text: $readMe);
 
-                return $this->render(view: 'projects/show.html.twig', parameters: [
+                return $this->render(view: '@default/projects/show.html.twig', parameters: [
                     'project' => $project,
                     'readme' => $readMe,
                 ]);

src/Controller/ResetPasswordController.php

@@ -0,0 +1,179 @@
+<?php
+
+namespace App\Controller;
+
+use App\Entity\User;
+use App\Form\ChangePasswordFormType;
+use App\Form\ResetPasswordRequestFormType;
+use Doctrine\ORM\EntityManagerInterface;
+use Symfony\Bridge\Twig\Mime\TemplatedEmail;
+use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
+use Symfony\Component\HttpFoundation\RedirectResponse;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Mailer\MailerInterface;
+use Symfony\Component\Mime\Address;
+use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
+use Symfony\Component\Routing\Annotation\Route;
+use Symfony\Contracts\Translation\TranslatorInterface;
+use SymfonyCasts\Bundle\ResetPassword\Controller\ResetPasswordControllerTrait;
+use SymfonyCasts\Bundle\ResetPassword\Exception\ResetPasswordExceptionInterface;
+use SymfonyCasts\Bundle\ResetPassword\ResetPasswordHelperInterface;
+
+class ResetPasswordController extends AbstractController
+{
+    use ResetPasswordControllerTrait;
+
+    public function __construct(
+        private readonly ResetPasswordHelperInterface $resetPasswordHelper,
+        private readonly EntityManagerInterface       $entityManager
+    )
+    {
+        // empty body
+    }
+
+    /**
+     * Display & process form to request a password reset.
+     */
+    #[Route(path: '/security/forgot/password', name: 'security_forgot_password')]
+    public function request(Request $request, MailerInterface $mailer): Response
+    {
+        $form = $this->createForm(type: ResetPasswordRequestFormType::class);
+        $form->handleRequest(request: $request);
+
+        if ($form->isSubmitted() && $form->isValid()) {
+            return $this->processSendingPasswordResetEmail(
+                formData: $form->get(name: 'account')->getData(),
+                mailer: $mailer
+            );
+        }
+
+        return $this->render(view: '@default/security/forgot_password.html.twig', parameters: [
+            'requestForm' => $form->createView(),
+        ]);
+    }
+
+    /**
+     * Confirmation page after a user has requested a password reset.
+     */
+    #[Route(path: '/security/recovery/mail/sent', name: 'security_recovery_mail_sent')]
+    public function checkEmail(): Response
+    {
+        // Generate a fake token if the user does not exist or someone hit this page directly.
+        // This prevents exposing whether a user was found with the given email address or username or not
+        if (null === ($resetToken = $this->getTokenObjectFromSession())) {
+            $resetToken = $this->resetPasswordHelper->generateFakeResetToken();
+        }
+
+        return $this->render(view: '@default/security/recovery_mail_sent.html.twig', parameters: [
+            'resetToken' => $resetToken,
+        ]);
+    }
+
+    /**
+     * Validates and process the reset URL that the user clicked in their email.
+     */
+    #[Route(path: '/security/recovery/reset/{token}', name: 'security_recovery_reset')]
+    public function reset(Request $request, UserPasswordHasherInterface $passwordHasher, TranslatorInterface $translator, string $token = null): Response
+    {
+        if ($token) {
+            // We store the token in session and remove it from the URL, to avoid the URL being
+            // loaded in a browser and potentially leaking the token to 3rd party JavaScript.
+            $this->storeTokenInSession(token: $token);
+
+            return $this->redirectToRoute(route: 'security_recovery_reset');
+        }
+
+        $token = $this->getTokenFromSession();
+        if (null === $token) {
+            throw $this->createNotFoundException(message: 'No reset password token found in the URL or in the session.');
+        }
+
+        try {
+            $user = $this->resetPasswordHelper->validateTokenAndFetchUser(fullToken: $token);
+        } catch (ResetPasswordExceptionInterface $e) {
+            $this->addFlash(type: 'reset_password_error', message: sprintf(
+                '%s - %s',
+                $translator->trans(id: ResetPasswordExceptionInterface::MESSAGE_PROBLEM_VALIDATE, parameters: [], domain: 'ResetPasswordBundle'),
+                $translator->trans(id: $e->getReason(), parameters: [], domain: 'ResetPasswordBundle')
+            ));
+
+            return $this->redirectToRoute(route: 'app_forgot_password_request');
+        }
+
+        // The token is valid; allow the user to change their password.
+        $form = $this->createForm(type: ChangePasswordFormType::class);
+        $form->handleRequest(request: $request);
+
+        if ($form->isSubmitted() && $form->isValid()) {
+            // A password reset token should be used only once, remove it.
+            $this->resetPasswordHelper->removeResetRequest(fullToken: $token);
+
+            // Encode(hash) the plain password, and set it.
+            $encodedPassword = $passwordHasher->hashPassword(
+                user: $user,
+                plainPassword: $form->get(name: 'plainPassword')->getData()
+            );
+
+            $user->setPassword($encodedPassword);
+            $this->entityManager->flush();
+
+            // The session is cleaned up after the password has been changed.
+            $this->cleanSessionAfterReset();
+
+            $this->addFlash(type: 'success', message: 'Your password has been changed.');
+
+            return $this->redirectToRoute(route: 'app_main');
+        }
+
+        return $this->render(view: '@default/security/reset_password.html.twig', parameters: [
+            'resetForm' => $form->createView(),
+        ]);
+    }
+
+    private function processSendingPasswordResetEmail(string $formData, MailerInterface $mailer): RedirectResponse
+    {
+        $user = $this->entityManager->getRepository(entityName: User::class)->findOneBy(criteria: [
+            'email' => $formData,
+        ]);
+
+        if (!$user) {
+            $user = $this->entityManager->getRepository(entityName: User::class)->findOneBy(criteria: [
+                'username' => $formData,
+            ]);
+        }
+
+        // Do not reveal whether a user account was found or not.
+//        if (!$user) {
+//            return $this->redirectToRoute(route: 'app_check_email');
+//        }
+
+        try {
+            $resetToken = $this->resetPasswordHelper->generateResetToken(user: $user);
+        } catch (ResetPasswordExceptionInterface $e) {
+            $this->addFlash(type: 'reset_password_error', message: sprintf(
+                '%s - %s',
+                ResetPasswordExceptionInterface::MESSAGE_PROBLEM_HANDLE,
+                $e->getReason()
+            ));
+
+            return $this->redirectToRoute(route: 'security_forgot_password');
+        }
+
+        $email = (new TemplatedEmail())
+            ->from(new Address(address: 'tracer@24unix.net', name: '24unix.net'))
+            ->to($user->getEmail())
+            ->subject(subject: 'Your password reset request')
+            ->htmlTemplate(template: '@default/security/mail/recovery.html.twig')
+            ->context(context: [
+                'resetToken' => $resetToken,
+            ]);
+
+        $mailer->send(message: $email);
+
+        // Store the token object in session for retrieval in check-email route.
+        $this->setTokenObjectInSession(token: $resetToken);
+
+        return $this->redirectToRoute(route: 'security_recovery_mail_sent');
+    }
+}

src/Controller/SecurityController.php

@@ -2,46 +2,117 @@
 
 namespace App\Controller;
 
-use ApiPlatform\Core\Api\IriConverterInterface;
-use App\Entity\User;
+use App\Form\LoginFormType;
+use App\Form\RegistrationFormType;
+use App\Repository\UserRepository;
+use App\Security\EmailVerifier;
+use Doctrine\ORM\EntityManagerInterface;
+use Symfony\Bridge\Twig\Mime\TemplatedEmail;
 use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
-use Symfony\Component\Config\Definition\Exception\Exception;
+use Symfony\Component\HttpFoundation\Request;
 use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Mime\Address;
+use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
 use Symfony\Component\Routing\Annotation\Route;
 use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
+use Symfony\Contracts\Translation\TranslatorInterface;
+use SymfonyCasts\Bundle\VerifyEmail\Exception\VerifyEmailExceptionInterface;
 
-/**
- *
- */
 class SecurityController extends AbstractController
 {
-    #[Route(path: '/login', name: 'app_login')] // *** method post
-    public function login(AuthenticationUtils $authenticationUtils, IriConverterInterface $iriConverter): Response
-    {
 
-	    /** @var User $user */
-	    $user = $this->getUser() ?? null;
-		
-		return new Response(content: null, status: 204, headers: [
-			'Location' => $iriConverter->getIriFromItem(item: $user)
-		]);
-		
+    public function __construct(private readonly EmailVerifier $emailVerifier)
+    {
+        // empty body
     }
-    
-    	/*
-        return $this->render(view: 'security/login.html.twig', parameters: [
-            'error' => $authenticationUtils->getLastAuthenticationError(),
-            'last_username' => $authenticationUtils->getLastUsername(),
+
+    #[Route(path: '/login', name: 'app_login')]
+    public function index(AuthenticationUtils $authenticationUtils): Response
+    {
+        // get the login error if there is one
+        if ($error = $authenticationUtils->getLastAuthenticationError()) {
+            $this->addFlash(type: 'error', message: $error->getMessageKey());
+        }
+
+        // last username entered by the user
+        $lastUsername = $authenticationUtils->getLastUsername();
+
+        return $this->render(view: '@default/security/login.html.twig', parameters: [
+            'last_username' => $lastUsername,
+            'error' => '',
         ]);
-		*
     }
 
-    /**
-     * @return mixed
-     */
-    #[Route(path: '/logout', name: 'app_logout')]
-    public function logout(): never
+
+    #[Route(path: '/register', name: 'app_register')]
+    public function register(Request $request, UserPasswordHasherInterface $userPasswordHasher, EntityManagerInterface $entityManager): Response
     {
-        throw new Exception(message: 'Logout should never be reached.');
+        $form = $this->createForm(type: RegistrationFormType::class);
+        $form->handleRequest(request: $request);
+
+        if ($form->isSubmitted() && $form->isValid()) {
+            $user = $form->getData();
+            // hash the plain password
+            $user->setPassword(
+                password: $userPasswordHasher->hashPassword(
+                    user: $user,
+                    plainPassword: $form->get(name: 'password')->getData()
+                )
+            );
+
+            if ($form->get(name: 'agreeTerms')->getData()) {
+                $user->agreeTerms();
+            } // no else, we already confirmed in the form itself
+            $entityManager->persist(entity: $user);
+            $entityManager->flush();
+
+            // generate a signed url and email it to the user
+            $this->emailVerifier->sendEmailConfirmation(verifyEmailRouteName: 'app_verify_email', user: $user,
+                email: (new TemplatedEmail())
+                    ->from(new Address(address: 'info@24unix.net', name: '24unix.net'))
+                    ->to($user->getEmail())
+                    ->subject(subject: 'Please Confirm your Email')
+                    ->htmlTemplate(template: '@default/security/mail/registration.html.twig')
+                ->context(context: [
+                    'username' => $user->getUsername()
+                ])
+            );
+
+            return $this->render(view: '@default/security/registration_finished.html.twig');
+        }
+
+        return $this->render(view: '@default/security/register.html.twig', parameters: [
+            'registrationForm' => $form->createView(),
+        ]);
     }
+
+    #[Route(path: '/verify/email', name: 'app_verify_email')]
+    public function verifyUserEmail(Request $request, TranslatorInterface $translator, UserRepository $userRepository): Response
+    {
+        $id = $request->get(key: 'id');
+
+        if ($id === null) {
+            return $this->redirectToRoute(route: 'app_register');
+        }
+
+        $user = $userRepository->find($id);
+
+        if ($user === null) {
+            return $this->redirectToRoute(route: 'app_register');
+        }
+
+        // validate email confirmation link, sets User::isVerified=true and persists
+        try {
+            $this->emailVerifier->handleEmailConfirmation(request: $request, user: $user);
+        } catch (VerifyEmailExceptionInterface $exception) {
+            $this->addFlash(type: 'verify_email_error', message: $translator->trans(id: $exception->getReason(), parameters: [], domain: 'VerifyEmailBundle'));
+
+            return $this->redirectToRoute(route: 'app_main');
+        }
+
+        $this->addFlash(type: 'success', message: 'Your email address has been verified.');
+
+        return $this->redirectToRoute(route: 'app_main');
+    }
+
 }

src/Controller/UserController.php

@@ -3,9 +3,13 @@
 namespace App\Controller;
 
 use App\Entity\User;
+use App\Form\EditProfileFormType;
 use App\Repository\UserRepository;
+use Doctrine\ORM\EntityManagerInterface;
 use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
+use Symfony\Component\HttpFoundation\Request;
 use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\PasswordHasher\Hasher\UserPasswordHasherInterface;
 use Symfony\Component\Routing\Annotation\Route;
 use Symfony\Component\Security\Core\Exception\AccessDeniedException;
 use Symfony\Component\Security\Core\Exception\UserNotFoundException;
@@ -13,31 +17,56 @@ use Symfony\Component\Security\Core\Exception\UserNotFoundException;
 /**
  * Class UserController.
  */
-class UserController extends AbstractController
+class UserController extends BaseController
 {
 
     #[Route(path: '/profile/edit/{username}', name: 'app_profile_edit')]
-    public function editProfile(UserRepository $userRepository, string $username = ''): Response
+    public function editProfile(Request $request, UserRepository $userRepository, UserPasswordHasherInterface $userPasswordHasher, EntityManagerInterface $entityManager,  string $username = ''): Response
     {
-        /* var User $user */
-        if ($username === '') {
-            if ($this->isGranted(attribute: 'ROLE_USER')) {
-                $user = $this->getUser();
-            } else {
-                throw new AccessDeniedException(message: 'You need to be logged in.');
-            }
-        } else {
+        if ($username !== '') {
             if ($this->isGranted(attribute: 'ROLE_ADMIN')) {
                 $user = $userRepository->findOneBy([
                     'username' => $username,
                 ]);
+            } else {
+                throw new AccessDeniedException(message: 'Only admins are allowed to edit Profiles.');
             }
+        } else {
+            $user = $this->getUser();
         }
 
+        $form = $this->createForm(type: EditProfileFormType::class, data: $user);
+        $form->handleRequest(request: $request);
+
+        if ($form->isSubmitted() && $form->isValid()) {
+            $user = $form->getData();
+            // if there's a new password, use it
+
+            if ($form->get(name: 'newPassword')->getData())
+            $user->setPassword(
+                password: $userPasswordHasher->hashPassword(
+                    user: $user,
+                    plainPassword: $form->get(name: 'newPassword')->getData()
+                )
+            );
+
+            $entityManager->persist(entity: $user);
+            $entityManager->flush();
+
+            return $this->redirectToRoute(route: 'app_main');
+        };
+
+        $user = $form->getData();
+        // hash the plain password
+
+
+        return $this->renderForm(view: '@default/user/edit_profile.html.twig', parameters: [
+            'user' => $user,
+            'userForm' => $form
+        ]);
+
+
         if (isset($user)) {
-            return $this->render(view: 'user/edit_profile.html.twig', parameters: [
-                'user' => $user,
-            ]);
         } else {
             throw new UserNotFoundException();
         }