<?php/* * This file is part of the Symfony MakerBundle package. * * (c) Fabien Potencier <fabien@symfony.com> * * For the full copyright and license information, please view the LICENSE * file that was distributed with this source code. */namespace Symfony\Bundle\MakerBundle\Maker;use Doctrine\Bundle\DoctrineBundle\DoctrineBundle;use Symfony\Bundle\MakerBundle\ConsoleStyle;use Symfony\Bundle\MakerBundle\DependencyBuilder;use Symfony\Bundle\MakerBundle\Doctrine\DoctrineHelper;use Symfony\Bundle\MakerBundle\Doctrine\EntityClassGenerator;use Symfony\Bundle\MakerBundle\Doctrine\ORMDependencyBuilder;use Symfony\Bundle\MakerBundle\Exception\RuntimeCommandException;use Symfony\Bundle\MakerBundle\FileManager;use Symfony\Bundle\MakerBundle\Generator;use Symfony\Bundle\MakerBundle\InputConfiguration;use Symfony\Bundle\MakerBundle\Security\SecurityConfigUpdater;use Symfony\Bundle\MakerBundle\Security\UserClassBuilder;use Symfony\Bundle\MakerBundle\Security\UserClassConfiguration;use Symfony\Bundle\MakerBundle\Util\ClassSourceManipulator;use Symfony\Bundle\MakerBundle\Util\UseStatementGenerator;use Symfony\Bundle\MakerBundle\Util\YamlManipulationFailedException;use Symfony\Bundle\MakerBundle\Validator;use Symfony\Bundle\SecurityBundle\SecurityBundle;use Symfony\Component\Console\Command\Command;use Symfony\Component\Console\Input\InputArgument;use Symfony\Component\Console\Input\InputInterface;use Symfony\Component\Console\Input\InputOption;use Symfony\Component\Security\Core\Exception\UnsupportedUserException;use Symfony\Component\Security\Core\Exception\UserNotFoundException;use Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface;use Symfony\Component\Security\Core\User\PasswordUpgraderInterface;use Symfony\Component\Security\Core\User\UserInterface;use Symfony\Component\Security\Core\User\UserProviderInterface;use Symfony\Component\Yaml\Yaml;/** * @author Ryan Weaver <weaverryan@gmail.com> * * @internal */final class MakeUser extends AbstractMaker{ public function __construct( private FileManager $fileManager, private UserClassBuilder $userClassBuilder, private SecurityConfigUpdater $configUpdater, private EntityClassGenerator $entityClassGenerator, private DoctrineHelper $doctrineHelper, ) { } public static function getCommandName(): string { return 'make:user'; } public static function getCommandDescription(): string { return 'Creates a new security user class'; } public function configureCommand(Command $command, InputConfiguration $inputConfig): void { $command ->addArgument('name', InputArgument::OPTIONAL, 'The name of the security user class (e.g. <fg=yellow>User</>)') ->addOption('is-entity', null, InputOption::VALUE_NONE, 'Do you want to store user data in the database (via Doctrine)?') ->addOption('identity-property-name', null, InputOption::VALUE_REQUIRED, 'Enter a property name that will be the unique "display" name for the user (e.g. <comment>email, username, uuid</comment>)') ->addOption('with-password', null, InputOption::VALUE_NONE, 'Will this app be responsible for checking the password? Choose <comment>No</comment> if the password is actually checked by some other system (e.g. a single sign-on server)') ->setHelp(file_get_contents(__DIR__.'/../Resources/help/MakeUser.txt')); $inputConfig->setArgumentAsNonInteractive('name'); } public function interact(InputInterface $input, ConsoleStyle $io, Command $command): void { if (null === $input->getArgument('name')) { $name = $io->ask( $command->getDefinition()->getArgument('name')->getDescription(), 'User' ); $input->setArgument('name', $name); } $userIsEntity = $io->confirm( 'Do you want to store user data in the database (via Doctrine)?', class_exists(DoctrineBundle::class) ); if ($userIsEntity) { $dependencies = new DependencyBuilder(); ORMDependencyBuilder::buildDependencies($dependencies); $missingPackagesMessage = $dependencies->getMissingPackagesMessage(self::getCommandName(), 'Doctrine must be installed to store user data in the database'); if ($missingPackagesMessage) { throw new RuntimeCommandException($missingPackagesMessage); } } $input->setOption('is-entity', $userIsEntity); $identityFieldName = $io->ask('Enter a property name that will be the unique "display" name for the user (e.g. <comment>email, username, uuid</comment>)', 'email', [Validator::class, 'validatePropertyName']); $input->setOption('identity-property-name', $identityFieldName); $io->text('Will this app need to hash/check user passwords? Choose <comment>No</comment> if passwords are not needed or will be checked/hashed by some other system (e.g. a single sign-on server).'); $userWillHavePassword = $io->confirm('Does this app need to hash/check user passwords?'); $input->setOption('with-password', $userWillHavePassword); } public function generate(InputInterface $input, ConsoleStyle $io, Generator $generator): void { $userClassConfiguration = new UserClassConfiguration( $input->getOption('is-entity'), $input->getOption('identity-property-name'), $input->getOption('with-password') ); $userClassNameDetails = $generator->createClassNameDetails( $input->getArgument('name'), $userClassConfiguration->isEntity() ? 'Entity\\' : 'Security\\' ); // A) Generate the User class if ($userClassConfiguration->isEntity()) { $classPath = $this->entityClassGenerator->generateEntityClass( $userClassNameDetails, false, // api resource $userClassConfiguration->hasPassword() // security user ); } else { $classPath = $generator->generateClass($userClassNameDetails->getFullName(), 'Class.tpl.php'); } // need to write changes early so we can modify the contents below $generator->writeChanges(); $entityUsesAttributes = ($isEntity = $userClassConfiguration->isEntity()) && $this->doctrineHelper->doesClassUsesAttributes($userClassNameDetails->getFullName()); if ($isEntity && !$entityUsesAttributes) { throw new \RuntimeException('MakeUser only supports attribute mapping with doctrine entities.'); } // B) Implement UserInterface $manipulator = new ClassSourceManipulator( sourceCode: $this->fileManager->getFileContents($classPath), overwrite: true, useAttributesForDoctrineMapping: $entityUsesAttributes ); $manipulator->setIo($io); $this->userClassBuilder->addUserInterfaceImplementation($manipulator, $userClassConfiguration); $generator->dumpFile($classPath, $manipulator->getSourceCode()); // C) Generate a custom user provider, if necessary if (!$userClassConfiguration->isEntity()) { $userClassConfiguration->setUserProviderClass($generator->getRootNamespace().'\\Security\\UserProvider'); $useStatements = new UseStatementGenerator([ UnsupportedUserException::class, UserNotFoundException::class, PasswordAuthenticatedUserInterface::class, PasswordUpgraderInterface::class, UserInterface::class, UserProviderInterface::class, ]); $customProviderPath = $generator->generateClass( $userClassConfiguration->getUserProviderClass(), 'security/UserProvider.tpl.php', [ 'use_statements' => $useStatements, 'user_short_name' => $userClassNameDetails->getShortName(), ] ); } // D) Update security.yaml $securityYamlUpdated = false; $path = 'config/packages/security.yaml'; if ($this->fileManager->fileExists($path)) { try { $newYaml = $this->configUpdater->updateForUserClass( $this->fileManager->getFileContents($path), $userClassConfiguration, $userClassNameDetails->getFullName() ); $generator->dumpFile($path, $newYaml); $securityYamlUpdated = true; } catch (YamlManipulationFailedException) { } } $generator->writeChanges(); $this->writeSuccessMessage($io); $io->text('Next Steps:'); $nextSteps = [ sprintf('Review your new <info>%s</info> class.', $userClassNameDetails->getFullName()), ]; if ($userClassConfiguration->isEntity()) { $nextSteps[] = sprintf( 'Use <comment>make:entity</comment> to add more fields to your <info>%s</info> entity and then run <comment>make:migration</comment>.', $userClassNameDetails->getShortName() ); } else { $nextSteps[] = sprintf( 'Open <info>%s</info> to finish implementing your user provider.', $this->fileManager->relativizePath($customProviderPath) ); } if (!$securityYamlUpdated) { $yamlExample = $this->configUpdater->updateForUserClass( 'security: {}', $userClassConfiguration, $userClassNameDetails->getFullName() ); $nextSteps[] = "Your <info>security.yaml</info> could not be updated automatically. You'll need to add the following config manually:\n\n".$yamlExample; } $nextSteps[] = 'Create a way to authenticate! See https://symfony.com/doc/current/security.html'; $nextSteps = array_map(static fn ($step) => sprintf(' - %s', $step), $nextSteps); $io->text($nextSteps); } public function configureDependencies(DependencyBuilder $dependencies, InputInterface $input = null): void { // checking for SecurityBundle guarantees security.yaml is present $dependencies->addClassDependency( SecurityBundle::class, 'security' ); // needed to update the YAML files $dependencies->addClassDependency( Yaml::class, 'yaml' ); if (null !== $input && $input->getOption('is-entity')) { ORMDependencyBuilder::buildDependencies($dependencies); } }}