Refactor authentication system (#2602)

Make auth configuration available via UI, remove FOSUserBundle and SAML-Bundle dependency

src/User/UserService.php

@@ -0,0 +1,168 @@
+<?php
+
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\User;
+
+use App\Configuration\SystemConfiguration;
+use App\Entity\User;
+use App\Entity\UserPreference;
+use App\Event\UserCreateEvent;
+use App\Event\UserCreatePostEvent;
+use App\Event\UserCreatePreEvent;
+use App\Event\UserUpdatePostEvent;
+use App\Event\UserUpdatePreEvent;
+use App\Repository\UserRepository;
+use App\Validator\ValidationFailedException;
+use InvalidArgumentException;
+use Symfony\Component\EventDispatcher\EventDispatcherInterface;
+use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;
+use Symfony\Component\Validator\Validator\ValidatorInterface;
+
+/**
+ * @final
+ */
+class UserService
+{
+    private $repository;
+    private $dispatcher;
+    private $validator;
+    private $configuration;
+    private $encoderFactory;
+
+    public function __construct(UserRepository $repository, EventDispatcherInterface $dispatcher, ValidatorInterface $validator, SystemConfiguration $configuration, UserPasswordEncoderInterface $encoderFactory)
+    {
+        $this->repository = $repository;
+        $this->dispatcher = $dispatcher;
+        $this->validator = $validator;
+        $this->configuration = $configuration;
+        $this->encoderFactory = $encoderFactory;
+    }
+
+    public function createNewUser(): User
+    {
+        $user = new User();
+        $user->setEnabled(true);
+        $user->setTimezone($this->configuration->getUserDefaultTimezone());
+        $user->setLanguage($this->configuration->getUserDefaultLanguage());
+        $user->setPreferenceValue(UserPreference::SKIN, $this->configuration->getUserDefaultTheme());
+
+        // Attention: PrepareUserEvent cannot be dispatched on console, as it calls isGranted()
+        $this->dispatcher->dispatch(new UserCreateEvent($user));
+
+        return $user;
+    }
+
+    public function saveNewUser(User $user): User
+    {
+        if (null !== $user->getId()) {
+            throw new InvalidArgumentException('Cannot create user, already persisted');
+        }
+
+        $this->validateUser($user, ['Registration', 'UserCreate']);
+
+        $this->hashPassword($user);
+        $this->hashApiToken($user);
+
+        $this->dispatcher->dispatch(new UserCreatePreEvent($user));
+        $this->repository->saveUser($user);
+        $this->dispatcher->dispatch(new UserCreatePostEvent($user));
+
+        return $user;
+    }
+
+    /**
+     * @param User $user
+     * @param string[] $groups
+     * @throws ValidationFailedException
+     */
+    private function validateUser(User $user, array $groups = []): void
+    {
+        $errors = $this->validator->validate($user, null, $groups);
+
+        if ($errors->count() > 0) {
+            throw new ValidationFailedException($errors, 'Validation Failed');
+        }
+    }
+
+    public function updateUser(User $user, array $groups = []): User
+    {
+        $this->validateUser($user, $groups);
+
+        $this->hashPassword($user);
+        $this->hashApiToken($user);
+
+        $this->dispatcher->dispatch(new UserUpdatePreEvent($user));
+        $this->repository->saveUser($user);
+        $this->dispatcher->dispatch(new UserUpdatePostEvent($user));
+
+        return $user;
+    }
+
+    public function findUserByUsernameOrThrowException(string $username): User
+    {
+        $user = $this->findUserByName($username);
+
+        if ($user === null) {
+            throw new \InvalidArgumentException(sprintf('User identified by "%s" username does not exist.', $username));
+        }
+
+        return $user;
+    }
+
+    public function findUserByUsernameOrEmail(string $usernameOrEmail): ?User
+    {
+        return $this->repository->loadUserByUsername($usernameOrEmail);
+    }
+
+    public function findUserByEmail(string $email): ?User
+    {
+        return $this->repository->findOneBy(['email' => $email]);
+    }
+
+    public function findUserByName(string $name): ?User
+    {
+        return $this->repository->findOneBy(['username' => $name]);
+    }
+
+    public function findUserByConfirmationToken(string $token): ?User
+    {
+        return $this->repository->findOneBy(['confirmationToken' => $token]);
+    }
+
+    public function generateSecurityToken(): string
+    {
+        return rtrim(strtr(base64_encode(random_bytes(32)), '+/', '-_'), '=');
+    }
+
+    private function hashPassword(User $user)
+    {
+        $plain = $user->getPlainPassword();
+
+        if ($plain === null || 0 === \strlen($plain)) {
+            return;
+        }
+
+        $password = $this->encoderFactory->encodePassword($user, $plain);
+        $user->setPassword($password);
+        $user->eraseCredentials();
+    }
+
+    private function hashApiToken(User $user)
+    {
+        $plain = $user->getPlainApiToken();
+
+        if ($plain === null || 0 === \strlen($plain)) {
+            return;
+        }
+
+        $password = $this->encoderFactory->encodePassword($user, $plain);
+        $user->setApiToken($password);
+        $user->eraseCredentials();
+    }
+}