src/Controller/Page/PageAuthController.php line 41

Open in your IDE?
  1. <?php
  2. namespace App\Controller\Page;
  4. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  5. use Symfony\Component\Routing\Annotation\Route;
  6. use Symfony\Component\HttpFoundation\Response;
  7. use Symfony\Component\HttpFoundation\JsonResponse;
  8. use Symfony\Component\HttpFoundation\Request;
  9. use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;
  10. use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
  11. use Symfony\Component\Mailer\MailerInterface;
  12. use Symfony\Component\Mime\Address;
  13. use Symfony\Bridge\Twig\Mime\TemplatedEmail;
  14. use App\Entity\User;
  15. use App\Entity\Institution;
  16. use App\Entity\Notification;
  17. use App\Entity\Province;
  18. use App\Entity\Project;
  19. use App\Entity\Form;
  20. use App\Entity\Consent;
  21. use App\Entity\ConsentUser;
  22. use App\Form\Type\PageUserRegisterType;
  23. use App\Form\Type\PageUserPasswordType;
  24. use App\Form\Type\PageUserResetPasswordType;
  25. use App\Form\Type\InstitutionType;
  26. use App\Service\FreshMailService;
  27. use App\Service\InstitutionService;
  28. use Symfony\Component\HttpFoundation\Cookie;
  29. use Knp\Component\Pager\PaginatorInterface;
  31. class PageAuthController extends AbstractController
  32. {
  33.     private $paginator;
  35.     public function __construct(PaginatorInterface $paginator){
  36.         $this->paginator = $paginator;
  37.     }
  38.     /**
  39.      * @Route("/", name="pageAuthLogin")
  40.      */
  41.     public function login(AuthenticationUtils $authenticationUtils): Response
  42.     {
  43.         if($this->getUser()) {
  44.             return $this->redirectToRoute('pageDashboardIndex');
  45.         }
  47.         $error = $authenticationUtils->getLastAuthenticationError();
  48.         $lastUsername = $authenticationUtils->getLastUsername();
  50.         return $this->render('page/auth/login.html.twig', [
  51.             'last_username' =>$lastUsername,
  52.             'error' => $error
  53.         ]);
  54.     }
  56.     /**
  57.      * @Route("/rejestracja", name="pageAuthRegister")
  58.      */
  59.     public function register(Request $request, MailerInterface $mailer, FreshMailService $freshMailService): Response
  60.     {
  61.         $error = '';
  62.         $em = $this->getDoctrine()->getManager();
  64.         if($this->getUser()) {
  65.             return $this->redirectToRoute('pageDashboardIndex');
  66.         }
  68.         $consents = $this->getDoctrine()->getRepository(Consent::class)->findBy([
  69.             'isDeleted' => false
  70.         ]);
  72.         $user = new User;
  73.         $user
  74.             ->setRole('ROLE_USER')
  75.             ->setStatus('INACTIVE')
  76.             ->setHash(hash('sha256', uniqid()))
  77.             ->setDateRegister(new \Datetime);
  79.         $form = $this->createForm(PageUserRegisterType::class, $user, [
  80.             'consents' => $consents
  81.         ]);
  82.         $form->handleRequest($request);
  84.         if($form->isSubmitted() && $form->isValid() ) {
  85.             $type = $form->get("type")->getData();
  86.             if ($type === 'project') {
  87.                 if ($institutionId = (int) $request->request->get('institution_id')) {
  88.                     $institution = $this->getDoctrine()->getRepository(Institution::class)->find($institutionId);
  89.                 }
  91.                 if (!isset($institution) || !$institution){
  92.                     $error = 'Musisz wybrać placówkę';
  93.                 } else {
  94.                     $notificationType = null;
  95.                     if ($institution->getTarget()) {
  96.                         $notificationType = 2; // Rejestracja do placówki ze zmianą danych
  97.                     } else if ($institution->getStatus() == 'INACTIVE') {
  98.                         $notificationType = 1; // Rejestracja do nowej placówki
  99.                     } else if ($institution->getStatus() == 'ACTIVE') {
  100.                         $notificationType = 3; // Rejestracja do istniejącej placówki
  101.                     }
  102.                     if ($notificationType === 3) {
  103.                         // Gdy użytkownik rejestruje się do istniejącej placówki, nie potrzebna jest akceptacja administratora
  104.                         $user->setStatus('ACTIVE');
  105.                         $user->addInstitution($institution);
  106.                     } else {
  107.                         // Tworzone jest zgłoszenie do administratora
  108.                         $notification = new Notification;
  109.                         $notification
  110.                             ->setUser($user)
  111.                             ->setInstitution($institution)
  112.                             ->setDateCreated(new \Datetime)
  113.                             ->setType($notificationType)
  114.                             ->setStatus('NEW');
  116.                         $em->persist($notification);
  117.                     }
  118.                 }
  119.             } else {
  120.                 $user->setStatus('ACTIVE');
  121.             }
  123.             // Zapisanie zaznaczonych zgód
  124.             $checkedConsents = $form->get("consents")->getData();
  126.             if ($checkedConsents && is_array($checkedConsents)) {
  127.                 foreach ($checkedConsents as $checkedConsent) {
  128.                     if ($consent = $this->getDoctrine()->getRepository(Consent::class)->find((int) $checkedConsent)) {
  129.                         $consentUser = new ConsentUser;
  130.                         $consentUser
  131.                             ->setConsenst($consent)
  132.                             ->setUser($user)
  133.                             ->setDate(new \Datetime);
  135.                         $em->persist($consentUser);
  137.                         if (strpos($consent->getDescription(), 'newsletter') !== false) {
  138.                             $freshMailService->addSubscriber($user->getEmail());
  139.                         }
  140.                     }
  141.                 }
  142.             }
  143.             // ===
  145.             if ($error === '') {
  146.                 $em->persist($user);
  147.                 $em->flush();
  149.                 $link = $request->getScheme() . '://' . $request->getHttpHost() . '/ustaw-haslo/' . $user->getHash();
  150.                 $title = "Witamy w serwisie CAŁA POLSKA CZYTA DZIECIOM!";
  152.                 $email = (new TemplatedEmail())
  153.                     ->to(new Address($user->getEmail(), $user->getName() . ' ' . $user->getSurname()))
  154.                     ->subject($title)
  155.                     ->htmlTemplate('email/register.html.twig')
  156.                     ->context([
  157.                         'title' => $title,
  158.                         'link' => $link
  159.                     ]);
  161.                 $mailer->send($email);
  163.                 $this->addFlash('success', 'Konto zostało utworzone. Na podany adres e-mail został wysłany link do utworzenia hasła.');
  165.                 return $this->redirectToRoute('pageAuthLogin');
  166.             }
  167.         }
  169.         // return $this->render('page/auth/register-old.html.twig', [
  170.         return $this->render('page/auth/register.html.twig', [
  171.             'form' => $form->createView(),
  172.             'error' => $error,
  173.             'user' => $user,
  174.             'provinces' => $this->getDoctrine()->getRepository(Province::class)->findAll()
  175.         ]);
  176.     }
  179.     /**
  180.      * @Route("/rejestracja/data/placowki", name="PageAuthRegisterInstitutionsJson")
  181.      */
  182.     public function listDataTable(Request $request): Response {
  183.         $page = $_GET["page"];
  184.         $orderCol = $request->request->get("order")[0]["column"];
  185.         $orderDir = $request->request->get("order")[0]["dir"];
  186.         $elForPage = $request->request->get("length");
  187.         $search = $request->request->get("search")["value"];
  188.         $institutions = $this->paginator->paginate(
  189.             $this->getDoctrine()->getRepository(Institution::class)->getInstitutionsForDataTable(
  190.                 $orderCol, $orderDir, $search,
  191.                 ($_GET["name"]) ? $_GET["name"] : null,
  192.                 ($_GET["place"]) ? $_GET["place"] : null,
  193.                 ($_GET["province"]) ? $_GET["province"] : null,
  194.                 ($_GET["district"]) ? $_GET["district"] : null,
  195.                 ($_GET["commune"]) ? $_GET["commune"] : null,
  196.                 ($_GET["category"]) ? $_GET["category"] : null
  197.             ), $page, $elForPage
  198.         );
  199.         $data = $this->InstitutionForDataTable($institutions);
  200.         return new JsonResponse(
  201.             array(
  202.                 'draw' => $request->request->get("draw"),
  203.                 'data' => $data,
  204.                 'recordsFiltered' =>  $institutions->getTotalItemCount(),
  205.                 'recordsTotal' => $institutions->getTotalItemCount()
  206.             )
  207.         , 200);
  208.     }
  210.     public function InstitutionForDataTable($institutions){
  211.         $data[0] = array("", "", "", "", "", "");
  212.         $i = 0;
  213.         if($institutions){
  214.             foreach($institutions->getItems() as $obj){
  215.                 $pathShow = $this->generateUrl('adminInstitutionView', ['institutionId' => $obj->getId()]);
  216.                 $pathAdmin = $this->generateUrl('adminInstitutionEdit', ['institutionId' => $obj->getId()]);
  217.                 $streetAndNumbers = $obj->getStreet().' '.$obj->getBuilding();
  218.                 if($obj->getLocalNumber()){
  219.                     $streetAndNumbers.= " / ".$obj->getLocalNumber();
  220.                 }
  221.                 $buttons = '
  222.                     <div class="text-nowrap">
  223.                         <a href="javascript:;" title="Edytuj dane placówki" onclick="institutions.add(' .$obj->getId(). ')"><i class="fa fa-edit"></i></a>
  224.                         <a href="javascript:;" title="Przypisz placówkę" onclick="institutions.change(' .$obj->getId(). ')"><i class="fa fa-plus-square-o"></i></a>
  225.                     </div>
  226.                 ';
  227.                 $data[$i] = array(
  228.                     $obj->getName(),
  229.                     ($obj->getProvince()) ? $obj->getProvince()->getName() : "",
  230.                     ($obj->getDistrict()) ? $obj->getDistrict()->getName() : "",
  231.                     ($obj->getCommune()) ? $obj->getCommune()->getName() : "",
  232.                     $buttons,
  233.                     $obj->getId()
  234.                 );
  235.                 $i++;
  236.             }
  237.         }
  238.         return $data;
  239.     }
  241.     /**
  242.      * @Route("/rejestracja/data/placowki/dodana", name="PageAuthRegisterInstitutionCustomJson")
  243.      */
  244.     public function getInstitutionCustom(): Response {
  245.         $id = $_GET["custom"];
  246.         if($id != ""){
  247.             // $data = $this->getDoctrine()->getRepository(Institution::class)->find($id);
  248.             $obj = $this->getDoctrine()->getRepository(Institution::class)->find($id);
  249.             $buttons = '
  250.                 <div class="text-nowrap">
  251.                     <a href="javascript:;" onclick="institutions.add(' .$obj->getId(). ')"><i class="fa fa-edit"></i></a>
  252.                     <a href="javascript:;" onclick="institutions.change(' .$obj->getId(). ')"><i class="fa fa-plus-square-o"></i></a>
  253.                 </div>
  254.             ';
  255.             $data = array(
  256.                 $obj->getName(),
  257.                 ($obj->getProvince()) ? $obj->getProvince()->getName() : "",
  258.                 ($obj->getDistrict()) ? $obj->getDistrict()->getName() : "",
  259.                 ($obj->getCommune()) ? $obj->getCommune()->getName() : "",
  260.                 $buttons
  261.             );
  262.             return new JsonResponse( array( 'data' => $data ) , 200);
  263.         }
  264.         return new JsonResponse( array( 'data' => null ), 200);
  265.     }
  267.     /**
  268.      * @Route("/ustaw-haslo/{hash}", name="pageAuthPassword")
  269.      */
  270.     public function password(Request $request, UserPasswordEncoderInterface $encoder, FreshMailService $freshMailService, string $hash): Response
  271.     {
  272.         if ($this->getUser()) {
  273.             return $this->redirectToRoute('pageDashboardIndex');
  274.         }
  276.         $em = $this->getDoctrine()->getManager();
  277.         $user = $this->getDoctrine()->getRepository(User::class)->findOneBy([
  278.             'hash' => $hash
  279.         ]);
  281.         if (!$user) {
  282.             return $this->redirectToRoute('pageAuthLogin');
  283.         }
  285.         $consents = $this->getDoctrine()->getRepository(Consent::class)->findBy([
  286.             'isDeleted' => false
  287.         ]);
  289.         $form = $this->createForm(PageUserPasswordType::class, $user, [
  290.             'consents' => count($user->getConsentUsers()) === 0 ? $consents : [] // Jeżeli użytkownik nie ma zaznaczonych zgód, to musi je zaznaczyć (konto założone przez administratora)
  291.         ]);
  292.         $form->handleRequest($request);
  294.         if($form->isSubmitted() && $form->isValid()) {
  295.             $isReset = false;
  296.             if ($user->getPassword()) {
  297.                 $isReset = true;
  298.             }
  300.             $password = $encoder->encodePassword($user, $user->getPlainPassword());
  302.             // Zapisanie zaznaczonych zgód (jeżeli konto było zakładane przez administratora)
  303.             if (count($user->getConsentUsers()) === 0) {
  304.                 $checkedConsents = $form->get("consents")->getData();
  305.                 if ($checkedConsents && is_array($checkedConsents)) {
  306.                     foreach ($checkedConsents as $checkedConsent) {
  307.                         if ($consent = $this->getDoctrine()->getRepository(Consent::class)->find((int) $checkedConsent)) {
  308.                             $consentUser = new ConsentUser;
  309.                             $consentUser
  310.                                 ->setConsenst($consent)
  311.                                 ->setUser($user)
  312.                                 ->setDate(new \Datetime);
  314.                             $em->persist($consentUser);
  316.                             if (strpos($consent->getDescription(), 'newsletter') !== false) {
  317.                                 $freshMailService->addSubscriber($user->getEmail());
  318.                             }
  319.                         }
  320.                     }
  321.                 }
  322.             }
  323.             // ===
  325.             $user
  326.                 ->setPassword($password)
  327.                 ->setHash(null);
  329.             $em->persist($user);
  330.             $em->flush();
  332.             if ($isReset) {
  333.                 $this->addFlash('success', 'Hasło zostało zmienione.');
  334.             } else {
  335.                 if ($user->getStatus() === 'ACTIVE') {
  336.                     $this->addFlash('success', 'Hasło zostało ustawione. Możesz się zalogować.');
  337.                 } else {
  338.                     $this->addFlash('success', 'Hasło zostało ustawione. Poczekaj na akceptację Twojego konta przez administratora.');
  339.                 }
  340.             }
  342.             return $this->redirectToRoute('pageAuthLogin');
  343.         }
  345.         return $this->render('page/auth/password.html.twig', [
  346.             'form' =>$form->createView(),
  347.             'user' => $user
  348.         ]);
  349.     }
  351.     /**
  352.      * @Route("/resetuj-haslo", name="pageAuthResetPassword")
  353.      */
  354.     public function resetPassword(Request $request, MailerInterface $mailer): Response
  355.     {
  356.         if ($this->getUser()) {
  357.             return $this->redirectToRoute('pageDashboardIndex');
  358.         }
  360.         $form = $this->createForm(PageUserResetPasswordType::class);
  361.         $form->handleRequest($request);
  363.         if($form->isSubmitted() && $form->isValid()) {
  364.             $data = $form->getData();
  366.             $user = $this->getDoctrine()->getRepository(User::class)->findOneBy([
  367.                 'email' => $data['email'],
  368.                 'status' => 'ACTIVE'
  369.             ]);
  371.             if ($user) {
  372.                 $user->setHash(hash('sha256', uniqid()));
  374.                 $em = $this->getDoctrine()->getManager();
  375.                 $em->persist($user);
  376.                 $em->flush();
  378.                 $link = $request->getScheme() . '://' . $request->getHttpHost() . '/ustaw-haslo/' . $user->getHash();
  379.                 $message = 'Kliknij w link <a href="' . $link . '">' . $link . '</a> i ustaw nowe hasło do portalu Cała Polska Czyta Dzieciom';
  380.                 $title = "Zmień hasło do portalu Cała Polska Czyta Dzieciom";
  382.                 $email = (new TemplatedEmail())
  383.                     ->to(new Address($user->getEmail(), $user->getName() . ' ' . $user->getSurname()))
  384.                     ->subject($title)
  385.                     ->htmlTemplate('email/message.html.twig')
  386.                     ->context([
  387.                         'title' => $title,
  388.                         'message' => $message
  389.                     ]);
  391.                 $mailer->send($email);
  392.             }
  394.             $this->addFlash('success', 'Na podany adres e-mail został wysłany link do utworzenia nowego hasła.');
  396.             return $this->redirectToRoute('pageAuthLogin');
  397.         }
  399.         return $this->render('page/auth/resetPassword.html.twig', [
  400.             'form' => $form->createView()
  401.         ]);
  402.     }
  404.     /**
  405.      * @Route("/wyloguj", name="pageAuthLogout")
  406.      */
  407.     public function logout()
  408.     {
  409.     }
  411.     /**
  412.      * @Route("/lista-placowek", name="pageAuthInstitutions")
  413.      */
  414.     public function list(Request $request): JsonResponse
  415.     {
  416.         $name = $request->query->get('name', null);
  417.         $place = $request->query->get('place', null);
  418.         $province = (int) $request->query->get('province', 0);
  419.         $district = (int) $request->query->get('district', 0);
  420.         $commune = (int) $request->query->get('commune', 0);
  421.         $custom = (int) $request->query->get('custom', 0);
  423.         if ($custom) {
  424.             $institutionsData = $this->getDoctrine()->getRepository(Institution::class)->findBy([
  425.                 'id' => $custom
  426.             ]);
  427.         } else {
  428.             $institutionsData = $this->getDoctrine()->getRepository(Institution::class)->findByFilters($name, $place, $province, $district, $commune);
  429.         }
  431.         $institutions = [];
  432.         foreach ($institutionsData as $institution) {
  433.             $institutions[] = [
  434.                 'id' => $institution->getId(),
  435.                 'name' => $institution->getName(),
  436.                 'province' => $institution->getProvince() ? $institution->getProvince()->getName() : '',
  437.                 'district' => $institution->getDistrict() ? $institution->getDistrict()->getName() : '',
  438.                 'commune' => $institution->getCommune() ? $institution->getCommune()->getName() : ''
  439.             ];
  440.         }
  442.         return new JsonResponse($institutions);
  443.     }
  445.     /**
  446.      * @Route("/dodaj-placowke", name="pageAuthAddInstitution")
  447.      */
  448.     public function addInstitution(Request $request, InstitutionService $institutionService): Response
  449.     {
  450.         $baseInstitution = new Institution;
  451.         if ($id = (int) $request->query->get('id')) {
  452.             $baseInstitution = $this->getDoctrine()->getRepository(Institution::class)->find($id);
  453.         }
  455.         $newInstitution = new Institution;
  456.         $newInstitution
  457.             ->setName($baseInstitution->getName())
  458.             ->setRegon($baseInstitution->getRegon())
  459.             ->setStreet($baseInstitution->getStreet())
  460.             ->setBuilding($baseInstitution->getBuilding())
  461.             ->setLocalNumber($baseInstitution->getLocalNumber())
  462.             ->setPostcode($baseInstitution->getPostcode())
  463.             ->setPlace($baseInstitution->getPlace())
  464.             ->setProvince($baseInstitution->getProvince())
  465.             ->setDistrict($baseInstitution->getDistrict())
  466.             ->setCommune($baseInstitution->getCommune())
  467.             ->setCountry($baseInstitution->getCountry())
  468.             ->setCategory($baseInstitution->getCategory())
  469.             ->setType($baseInstitution->getType())
  470.             ->setPhone($baseInstitution->getPhone())
  471.             ->setEmail($baseInstitution->getEmail())
  472.             ->setStatus('INACTIVE');
  474.         if ($baseInstitution->getId()) {
  475.             if ($baseInstitution->getTarget()) {
  476.                 $newInstitution->setTarget($baseInstitution->getTarget());
  477.             } else {
  478.                 $newInstitution->setTarget($baseInstitution);
  479.             }
  480.         }
  482.         $form = $this->createForm(InstitutionType::class, $newInstitution);
  483.         $form->handleRequest($request);
  485.         if(
  486.             $form->isSubmitted() &&
  487.             $form->isValid() &&
  488.             !$errors = $institutionService->validate($newInstitution)
  489.         ) {
  490.             $em = $this->getDoctrine()->getManager();
  491.             $em->persist($newInstitution);
  492.             $em->flush();
  493.         }
  495.         return $this->render('page/auth/addInstitution.html.twig', [
  496.             'form' => $form->createView(),
  497.             'baseInstitution' => $baseInstitution,
  498.             'newInstitution' => $newInstitution,
  499.             'errors' => isset($errors) ? $errors : []
  500.         ]);
  501.     }
  503.     /**
  504.      * @Route("/projekt/{projectUrl}", name="pageAuthProject", requirements={"projectUrl": "[a-zA-Z0-9\-]{1,}"})
  505.      */
  506.     public function project(string $projectUrl):Response
  507.     {
  508.         $form = $this ->getDoctrine()->getRepository(Form::class)->findOneBy([
  509.             'url' => $projectUrl
  510.         ]);
  511.         if(!$form){
  512.             throw $this->createNotFoundException();
  513.         }
  514.         if(!$form->getIsAssigned()){
  515.             throw $this->createNotFoundException('Nieprawidłowy formularz');
  516.         }
  517.         if($form->getType() == "evaluation"){
  518.             throw $this->createNotFoundException('Wybrano formularz ewaluacyjny');
  519.         }
  520.         $project = null;
  521.         foreach($form->getProjects() as $obj){
  522.             $project = $obj;
  523.         }
  525.         $response = $this ->redirectToRoute('pageProjectAddStep2', [
  526.             'projectId' => $project->getId()
  527.         ]);
  529.         if(!$this->getUser()){
  530.             $cookie = Cookie::create('redirectToProject')
  531.                 ->withValue($project->getId())
  532.                 ->withExpires(new \DateTime('+3 days'))
  533.                 ->withSecure(true)
  534.                 ->withHttpOnly(true);
  536.             $response->headers->setCookie($cookie);
  537.         }
  539.         return $response;
  540.     }
  541. }