Next major version 2 with PHP 8.1, Symfony 6, Tabler UI, 2FA ... (#2902)

src/API/Authentication/ApiTokenUpgradeBadge.php

@@ -0,0 +1,43 @@
+<?php
+
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\API\Authentication;
+
+use Symfony\Component\Security\Core\Exception\LogicException;
+use Symfony\Component\Security\Core\User\PasswordUpgraderInterface;
+use Symfony\Component\Security\Http\Authenticator\Passport\Badge\BadgeInterface;
+
+final class ApiTokenUpgradeBadge implements BadgeInterface
+{
+    public function __construct(private ?string $plaintextApiToken, private PasswordUpgraderInterface $passwordUpgrader)
+    {
+    }
+
+    public function getAndErasePlaintextApiToken(): string
+    {
+        $password = $this->plaintextApiToken;
+        if (null === $password) {
+            throw new LogicException('The api token is erased as another listener already used this badge.');
+        }
+
+        $this->plaintextApiToken = null;
+
+        return $password;
+    }
+
+    public function getPasswordUpgrader(): PasswordUpgraderInterface
+    {
+        return $this->passwordUpgrader;
+    }
+
+    public function isResolved(): bool
+    {
+        return true;
+    }
+}