1	<?php
2
3	namespace App\Security\Authenticator;
4
5	use App\Security\ApiUser;
6	use App\Security\Service\AltchaServiceInterface;
7	use Symfony\Component\DependencyInjection\Attribute\Autowire;
8	use Symfony\Component\HttpFoundation\JsonResponse;
9	use Symfony\Component\HttpFoundation\Request;
10	use Symfony\Component\HttpFoundation\Response;
11	use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
12	use Symfony\Component\Security\Core\Exception\AuthenticationException;
13	use Symfony\Component\Security\Http\Authenticator\AbstractAuthenticator;
14	use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
15	use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
16	use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
17
18	/**
19	* @author Wilhelm Zwertvaegher
20	*/
21	class AltchaAuthenticator extends AbstractAuthenticator
22	{
23	public function __construct(
24	private readonly AltchaServiceInterface $altchaService,
25	#[Autowire('%altcha.header_payload_key%')]
26	private readonly string $headerPayloadKey,
27	) {
28	}
29
30	public function authenticate(Request $request): Passport
31	{
32	$payload = $request->headers->get($this->headerPayloadKey);
33
34	if (!$payload || !$this->altchaService->verifySolution($payload)) {
35	throw new AuthenticationException('Captcha invalid');
36	}
37
38	return new SelfValidatingPassport(
39	new UserBadge('frontend', fn (string $userIdentifier) => new ApiUser($userIdentifier, ['ROLE_FRONTEND']))
40	);
41	}
42
43	public function supports(Request $request): ?bool
44	{
45	return $request->headers->has($this->headerPayloadKey);
46	}
47
48	public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
49	{
50	return null;
51	}
52
53	public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
54	{
55	$data = [
56	'message' => $exception->getMessage(),
57	];
58
59	return new JsonResponse($data, Response::HTTP_UNAUTHORIZED);
60	}
61	}

---

Branches

Below are the source code lines that represent each code branch as identified by Xdebug. Please note a branch is not necessarily coterminous with a line, a line may contain multiple branches and therefore show up more than once. Please also be aware that some branches may be implicit rather than explicit, e.g. an if statement always has an else as part of its logical flow even if you didn't write one.

AltchaAuthenticator->__construct

23	public function __construct(
24	private readonly AltchaServiceInterface $altchaService,
25	#[Autowire('%altcha.header_payload_key%')]
26	private readonly string $headerPayloadKey,
27	) {
28	}

AltchaAuthenticator->authenticate

30	public function authenticate(Request $request): Passport
31	{
32	$payload = $request->headers->get($this->headerPayloadKey);
33
34	if (!$payload || !$this->altchaService->verifySolution($payload)) {

34	if (!$payload || !$this->altchaService->verifySolution($payload)) {

34	if (!$payload || !$this->altchaService->verifySolution($payload)) {

35	throw new AuthenticationException('Captcha invalid');

38	return new SelfValidatingPassport(
39	new UserBadge('frontend', fn (string $userIdentifier) => new ApiUser($userIdentifier, ['ROLE_FRONTEND']))
40	);
41	}

AltchaAuthenticator->onAuthenticationFailure

53	public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
54	{
55	$data = [
56	'message' => $exception->getMessage(),
57	];
58
59	return new JsonResponse($data, Response::HTTP_UNAUTHORIZED);
60	}

AltchaAuthenticator->onAuthenticationSuccess

48	public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
49	{
50	return null;
51	}

AltchaAuthenticator->supports

43	public function supports(Request $request): ?bool
44	{
45	return $request->headers->has($this->headerPayloadKey);
46	}

{closure:/home/runner/work/nick-me/nick-me/backend/src/Security/Authenticator/AltchaAuthenticator.php:39-39}

39	new UserBadge('frontend', fn (string $userIdentifier) => new ApiUser($userIdentifier, ['ROLE_FRONTEND']))

{main}

3	namespace App\Security\Authenticator;
4
5	use App\Security\ApiUser;
6	use App\Security\Service\AltchaServiceInterface;
7	use Symfony\Component\DependencyInjection\Attribute\Autowire;
8	use Symfony\Component\HttpFoundation\JsonResponse;
9	use Symfony\Component\HttpFoundation\Request;
10	use Symfony\Component\HttpFoundation\Response;
11	use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
12	use Symfony\Component\Security\Core\Exception\AuthenticationException;
13	use Symfony\Component\Security\Http\Authenticator\AbstractAuthenticator;
14	use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
15	use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
16	use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
17
18	/**
19	* @author Wilhelm Zwertvaegher
20	*/
21	class AltchaAuthenticator extends AbstractAuthenticator
22	{
23	public function __construct(
24	private readonly AltchaServiceInterface $altchaService,
25	#[Autowire('%altcha.header_payload_key%')]
26	private readonly string $headerPayloadKey,
27	) {
28	}
29
30	public function authenticate(Request $request): Passport
31	{
32	$payload = $request->headers->get($this->headerPayloadKey);
33
34	if (!$payload || !$this->altchaService->verifySolution($payload)) {
35	throw new AuthenticationException('Captcha invalid');
36	}
37
38	return new SelfValidatingPassport(
39	new UserBadge('frontend', fn (string $userIdentifier) => new ApiUser($userIdentifier, ['ROLE_FRONTEND']))
40	);
41	}
42
43	public function supports(Request $request): ?bool
44	{
45	return $request->headers->has($this->headerPayloadKey);
46	}
47
48	public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
49	{
50	return null;
51	}
52
53	public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
54	{
55	$data = [
56	'message' => $exception->getMessage(),
57	];
58
59	return new JsonResponse($data, Response::HTTP_UNAUTHORIZED);
60	}