social_auth_drupal-8.x-1.x-dev/src/Controller/DrupalAuthController.php

<?php

namespace Drupal\social_auth_drupal\Controller;

use Drupal\Core\Controller\ControllerBase;
use Drupal\social_api\Plugin\NetworkManager;
use Drupal\social_auth\SocialAuthDataHandler;
use Drupal\social_auth\SocialAuthUserManager;
use Drupal\social_auth_drupal\DrupalAuthManager;
use Symfony\Component\DependencyInjection\ContainerInterface;
use Drupal\Core\Routing\TrustedRedirectResponse;
use Symfony\Component\HttpFoundation\RequestStack;
use Drupal\Core\Logger\LoggerChannelFactoryInterface;

/**
 * Returns responses for Simple Drupal Connect module routes.
 */
class DrupalAuthController extends ControllerBase {

  /**
   * The network plugin manager.
   *
   * @var \Drupal\social_api\Plugin\NetworkManager
   */
  private $networkManager;

  /**
   * The user manager.
   *
   * @var \Drupal\social_auth\SocialAuthUserManager
   */
  private $userManager;

  /**
   * The drupal authentication manager.
   *
   * @var \Drupal\social_auth_drupal\DrupalAuthManager
   */
  private $drupalManager;

  /**
   * Used to access GET parameters.
   *
   * @var \Symfony\Component\HttpFoundation\RequestStack
   */
  private $request;

  /**
   * The Social Auth Data Handler.
   *
   * @var \Drupal\social_auth\SocialAuthDataHandler
   */
  private $dataHandler;


  /**
   * The logger channel.
   *
   * @var \Drupal\Core\Logger\LoggerChannelFactoryInterface
   */
  protected $loggerFactory;

  /**
   * DrupalAuthController constructor.
   *
   * @param \Drupal\social_api\Plugin\NetworkManager $network_manager
   *   Used to get an instance of social_auth_drupal network plugin.
   * @param \Drupal\social_auth\SocialAuthUserManager $user_manager
   *   Manages user login/registration.
   * @param \Drupal\social_auth_drupal\DrupalAuthManager $drupal_manager
   *   Used to manage authentication methods.
   * @param \Symfony\Component\HttpFoundation\RequestStack $request
   *   Used to access GET parameters.
   * @param \Drupal\social_auth\SocialAuthDataHandler $social_auth_data_handler
   *   SocialAuthDataHandler object.
   * @param \Drupal\Core\Logger\LoggerChannelFactoryInterface $logger_factory
   *   Used for logging errors.
   */
  public function __construct(NetworkManager $network_manager, SocialAuthUserManager $user_manager, DrupalAuthManager $drupal_manager, RequestStack $request, SocialAuthDataHandler $social_auth_data_handler, LoggerChannelFactoryInterface $logger_factory) {

    $this->networkManager = $network_manager;
    $this->userManager = $user_manager;
    $this->drupalManager = $drupal_manager;
    $this->request = $request;
    $this->dataHandler = $social_auth_data_handler;
    $this->loggerFactory = $logger_factory;

    // Sets the plugin id.
    $this->userManager->setPluginId('social_auth_drupal');

    // Sets the session keys to nullify if user could not logged in.
    $this->userManager->setSessionKeysToNullify(['access_token', 'oauth2state']);
    $this->setting = $this->config('social_auth_drupal.settings');
  }

  /**
   * {@inheritdoc}
   */
  public static function create(ContainerInterface $container) {
    return new static(
      $container->get('plugin.network.manager'),
      $container->get('social_auth.user_manager'),
      $container->get('social_auth_drupal.manager'),
      $container->get('request_stack'),
      $container->get('social_auth.social_auth_data_handler'),
      $container->get('logger.factory')
    );
  }

  /**
   * Response for path 'user/login/drupal'.
   *
   * Redirects the user to Drupal for authentication.
   */
  public function redirectToDrupal() {
    /* @var \League\OAuth2\Client\Provider\Drupal false $drupal */
    $drupal = $this->networkManager->createInstance('social_auth_drupal')->getSdk();

    // If drupal client could not be obtained.
    if (!$drupal) {
      drupal_set_message($this->t('Social Auth Drupal not configured properly. Contact site administrator.'), 'error');
      return $this->redirect('user.login');
    }

    // Drupal service was returned, inject it to $drupalManager.
    $this->drupalManager->setClient($drupal);

    // Generates the URL where the user will be redirected for Drupal login.
    // If the user did not have email permission granted on previous attempt,
    // we use the re-request URL requesting only the email address.
    $drupal_login_url = $this->drupalManager->getDrupalLoginUrl();

    $state = $this->drupalManager->getState();

    $this->dataHandler->set('oauth2state', $state);

    return new TrustedRedirectResponse($drupal_login_url);
  }

  /**
   * Response for path 'user/login/drupal/callback'.
   *
   * Drupal returns the user here after user has authenticated in Drupal.
   */
  public function callback() {
    // Checks if user cancel login via Drupal.
    $error = $this->request->getCurrentRequest()->get('error');
    if ($error == 'access_denied') {
      drupal_set_message($this->t('You could not be authenticated.'), 'error');
      return $this->redirect('user.login');
    }

    /* @var \League\OAuth2\Client\Provider\Drupal false $drupal */
    $drupal = $this->networkManager->createInstance('social_auth_drupal')->getSdk();

    // If Drupal client could not be obtained.
    if (!$drupal) {
      drupal_set_message($this->t('Social Auth Drupal not configured properly. Contact site administrator.'), 'error');
      return $this->redirect('user.login');
    }

    $state = $this->dataHandler->get('oauth2state');

    // Retreives $_GET['state'].
    $retrievedState = $this->request->getCurrentRequest()->query->get('state');
    if (empty($retrievedState) || ($retrievedState !== $state)) {
      $this->userManager->nullifySessionKeys();
      drupal_set_message($this->t('Drupal login failed. Unvalid oAuth2 State.'), 'error');
      return $this->redirect('user.login');
    }

    // Saves access token to session.
    $this->dataHandler->set('access_token', $this->drupalManager->getAccessToken());

    $this->drupalManager->setClient($drupal)->authenticate();

    // Gets user's info from Drupal API.
    if (!$drupal_profile = $this->drupalManager->getUserInfo()) {
      drupal_set_message($this->t('Drupal login failed, could not load Drupal profile. Contact site administrator.'), 'error');
      return $this->redirect('user.login');
    }

    // If user information could be retrieved.
    return $this->userManager->authenticateUser($drupal_profile->getName(), $drupal_profile->getEmail(), $drupal_profile->getId(), $this->drupalManager->getAccessToken(), '', '');
  }

}