3 namespace Wallabag\CoreBundle\Controller
;
5 use PragmaRX\Recovery\Recovery
as BackupCodes
;
6 use Symfony\Bundle\FrameworkBundle\Controller\Controller
;
7 use Symfony\Component\HttpFoundation\JsonResponse
;
8 use Symfony\Component\HttpFoundation\RedirectResponse
;
9 use Symfony\Component\HttpFoundation\Request
;
10 use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException
;
11 use Symfony\Component\Routing\Annotation\Route
;
12 use Symfony\Component\Validator\Constraints\Locale
as LocaleConstraint
;
13 use Wallabag\CoreBundle\Entity\Config
;
14 use Wallabag\CoreBundle\Entity\TaggingRule
;
15 use Wallabag\CoreBundle\Form\Type\ChangePasswordType
;
16 use Wallabag\CoreBundle\Form\Type\ConfigType
;
17 use Wallabag\CoreBundle\Form\Type\RssType
;
18 use Wallabag\CoreBundle\Form\Type\TaggingRuleType
;
19 use Wallabag\CoreBundle\Form\Type\UserInformationType
;
20 use Wallabag\CoreBundle\Tools\Utils
;
22 class ConfigController
extends Controller
25 * @param Request $request
27 * @Route("/config", name="config")
29 public function indexAction(Request
$request)
31 $em = $this->getDoctrine()->getManager();
32 $config = $this->getConfig();
33 $userManager = $this->container
->get('fos_user.user_manager');
34 $user = $this->getUser();
36 // handle basic config detail (this form is defined as a service)
37 $configForm = $this->createForm(ConfigType
::class, $config, ['action' => $this->generateUrl('config')]);
38 $configForm->handleRequest($request);
40 if ($configForm->isSubmitted() && $configForm->isValid()) {
41 $em->persist($config);
44 $request->getSession()->set('_locale', $config->getLanguage());
46 // switch active theme
47 $activeTheme = $this->get('liip_theme.active_theme');
48 $activeTheme->setName($config->getTheme());
52 'flashes.config.notice.config_saved'
55 return $this->redirect($this->generateUrl('config'));
58 // handle changing password
59 $pwdForm = $this->createForm(ChangePasswordType
::class, null, ['action' => $this->generateUrl('config') . '#set4']);
60 $pwdForm->handleRequest($request);
62 if ($pwdForm->isSubmitted() && $pwdForm->isValid()) {
63 if ($this->get('craue_config')->get('demo_mode_enabled') && $this->get('craue_config')->get('demo_mode_username') === $user->getUsername()) {
64 $message = 'flashes.config.notice.password_not_updated_demo';
66 $message = 'flashes.config.notice.password_updated';
68 $user->setPlainPassword($pwdForm->get('new_password')->getData());
69 $userManager->updateUser($user, true);
72 $this->addFlash('notice', $message);
74 return $this->redirect($this->generateUrl('config') . '#set4');
77 // handle changing user information
78 $userForm = $this->createForm(UserInformationType
::class, $user, [
79 'validation_groups' => ['Profile'],
80 'action' => $this->generateUrl('config') . '#set3',
82 $userForm->handleRequest($request);
84 if ($userForm->isSubmitted() && $userForm->isValid()) {
85 $userManager->updateUser($user, true);
89 'flashes.config.notice.user_updated'
92 return $this->redirect($this->generateUrl('config') . '#set3');
95 // handle rss information
96 $rssForm = $this->createForm(RssType
::class, $config, ['action' => $this->generateUrl('config') . '#set2']);
97 $rssForm->handleRequest($request);
99 if ($rssForm->isSubmitted() && $rssForm->isValid()) {
100 $em->persist($config);
105 'flashes.config.notice.rss_updated'
108 return $this->redirect($this->generateUrl('config') . '#set2');
111 // handle tagging rule
112 $taggingRule = new TaggingRule();
113 $action = $this->generateUrl('config') . '#set5';
115 if ($request->query
->has('tagging-rule')) {
116 $taggingRule = $this->getDoctrine()
117 ->getRepository('WallabagCoreBundle:TaggingRule')
118 ->find($request->query
->get('tagging-rule'));
120 if ($this->getUser()->getId() !== $taggingRule->getConfig()->getUser()->getId()) {
121 return $this->redirect($action);
124 $action = $this->generateUrl('config') . '?tagging-rule=' . $taggingRule->getId() . '#set5';
127 $newTaggingRule = $this->createForm(TaggingRuleType
::class, $taggingRule, ['action' => $action]);
128 $newTaggingRule->handleRequest($request);
130 if ($newTaggingRule->isSubmitted() && $newTaggingRule->isValid()) {
131 $taggingRule->setConfig($config);
132 $em->persist($taggingRule);
137 'flashes.config.notice.tagging_rules_updated'
140 return $this->redirect($this->generateUrl('config') . '#set5');
143 return $this->render('WallabagCoreBundle:Config:index.html.twig', [
145 'config' => $configForm->createView(),
146 'rss' => $rssForm->createView(),
147 'pwd' => $pwdForm->createView(),
148 'user' => $userForm->createView(),
149 'new_tagging_rule' => $newTaggingRule->createView(),
152 'username' => $user->getUsername(),
153 'token' => $config->getRssToken(),
155 'twofactor_auth' => $this->getParameter('twofactor_auth'),
156 'wallabag_url' => $this->getParameter('domain_name'),
157 'enabled_users' => $this->get('wallabag_user.user_repository')->getSumEnabledUsers(),
162 * Enable 2FA using email.
164 * @Route("/config/otp/email", name="config_otp_email")
166 public function otpEmailAction()
168 if (!$this->getParameter('twofactor_auth')) {
169 return $this->createNotFoundException('two_factor not enabled');
172 $user = $this->getUser();
174 $user->setGoogleAuthenticatorSecret(null);
175 $user->setBackupCodes(null);
176 $user->setEmailTwoFactor(true);
178 $this->container
->get('fos_user.user_manager')->updateUser($user, true);
182 'flashes.config.notice.otp_enabled'
185 return $this->redirect($this->generateUrl('config') . '#set3');
189 * Enable 2FA using OTP app, user will need to confirm the generated code from the app.
191 * @Route("/config/otp/app", name="config_otp_app")
193 public function otpAppAction()
195 if (!$this->getParameter('twofactor_auth')) {
196 return $this->createNotFoundException('two_factor not enabled');
199 $user = $this->getUser();
200 $secret = $this->get('scheb_two_factor.security.google_authenticator')->generateSecret();
202 $user->setGoogleAuthenticatorSecret($secret);
203 $user->setEmailTwoFactor(false);
205 $backupCodes = (new BackupCodes())->toArray();
206 $backupCodesHashed = array_map(
207 function ($backupCode) {
208 return password_hash($backupCode, PASSWORD_DEFAULT
);
213 $user->setBackupCodes($backupCodesHashed);
215 $this->container
->get('fos_user.user_manager')->updateUser($user, true);
217 return $this->render('WallabagCoreBundle:Config:otp_app.html.twig', [
218 'backupCodes' => $backupCodes,
219 'qr_code' => $this->get('scheb_two_factor.security.google_authenticator')->getQRContent($user),
224 * Cancelling 2FA using OTP app.
226 * @Route("/config/otp/app/cancel", name="config_otp_app_cancel")
228 public function otpAppCancelAction()
230 if (!$this->getParameter('twofactor_auth')) {
231 return $this->createNotFoundException('two_factor not enabled');
234 $user = $this->getUser();
235 $user->setGoogleAuthenticatorSecret(null);
236 $user->setBackupCodes(null);
238 $this->container
->get('fos_user.user_manager')->updateUser($user, true);
240 return $this->redirect($this->generateUrl('config') . '#set3');
246 * @param Request $request
248 * @Route("/config/otp/app/check", name="config_otp_app_check")
250 public function otpAppCheckAction(Request
$request)
252 $isValid = $this->get('scheb_two_factor.security.google_authenticator')->checkCode(
254 $request->get('_auth_code')
257 if (true === $isValid) {
260 'flashes.config.notice.otp_enabled'
263 return $this->redirect($this->generateUrl('config') . '#set3');
268 'scheb_two_factor.code_invalid'
271 return $this->redirect($this->generateUrl('config_otp_app'));
275 * @param Request $request
277 * @Route("/generate-token", name="generate_token")
279 * @return RedirectResponse|JsonResponse
281 public function generateTokenAction(Request
$request)
283 $config = $this->getConfig();
284 $config->setRssToken(Utils
::generateToken());
286 $em = $this->getDoctrine()->getManager();
287 $em->persist($config);
290 if ($request->isXmlHttpRequest()) {
291 return new JsonResponse(['token' => $config->getRssToken()]);
296 'flashes.config.notice.rss_token_updated'
299 return $this->redirect($this->generateUrl('config') . '#set2');
303 * Deletes a tagging rule and redirect to the config homepage.
305 * @param TaggingRule $rule
307 * @Route("/tagging-rule/delete/{id}", requirements={"id" = "\d+"}, name="delete_tagging_rule")
309 * @return RedirectResponse
311 public function deleteTaggingRuleAction(TaggingRule
$rule)
313 $this->validateRuleAction($rule);
315 $em = $this->getDoctrine()->getManager();
321 'flashes.config.notice.tagging_rules_deleted'
324 return $this->redirect($this->generateUrl('config') . '#set5');
328 * Edit a tagging rule.
330 * @param TaggingRule $rule
332 * @Route("/tagging-rule/edit/{id}", requirements={"id" = "\d+"}, name="edit_tagging_rule")
334 * @return RedirectResponse
336 public function editTaggingRuleAction(TaggingRule
$rule)
338 $this->validateRuleAction($rule);
340 return $this->redirect($this->generateUrl('config') . '?tagging-rule=' . $rule->getId() . '#set5');
344 * Remove all annotations OR tags OR entries for the current user.
346 * @Route("/reset/{type}", requirements={"id" = "annotations|tags|entries"}, name="config_reset")
348 * @return RedirectResponse
350 public function resetAction($type)
355 ->getRepository('WallabagAnnotationBundle:Annotation')
356 ->removeAllByUserId($this->getUser()->getId());
359 $this->removeAllTagsByUserId($this->getUser()->getId());
362 // SQLite doesn't care about cascading remove, so we need to manually remove associated stuff
363 // otherwise they won't be removed ...
364 if ($this->get('doctrine')->getConnection()->getDatabasePlatform() instanceof \Doctrine\DBAL\Platforms\SqlitePlatform
) {
365 $this->getDoctrine()->getRepository('WallabagAnnotationBundle:Annotation')->removeAllByUserId($this->getUser()->getId());
368 // manually remove tags to avoid orphan tag
369 $this->removeAllTagsByUserId($this->getUser()->getId());
371 $this->get('wallabag_core.entry_repository')->removeAllByUserId($this->getUser()->getId());
374 if ($this->get('doctrine')->getConnection()->getDatabasePlatform() instanceof \Doctrine\DBAL\Platforms\SqlitePlatform
) {
375 $this->removeAnnotationsForArchivedByUserId($this->getUser()->getId());
378 // manually remove tags to avoid orphan tag
379 $this->removeTagsForArchivedByUserId($this->getUser()->getId());
381 $this->get('wallabag_core.entry_repository')->removeArchivedByUserId($this->getUser()->getId());
387 'flashes.config.notice.' . $type . '_reset'
390 return $this->redirect($this->generateUrl('config') . '#set3');
394 * Delete account for current user.
396 * @Route("/account/delete", name="delete_account")
398 * @param Request $request
400 * @throws AccessDeniedHttpException
402 * @return \Symfony\Component\HttpFoundation\RedirectResponse
404 public function deleteAccountAction(Request
$request)
406 $enabledUsers = $this->get('wallabag_user.user_repository')
407 ->getSumEnabledUsers();
409 if ($enabledUsers <= 1) {
410 throw new AccessDeniedHttpException();
413 $user = $this->getUser();
415 // logout current user
416 $this->get('security.token_storage')->setToken(null);
417 $request->getSession()->invalidate();
419 $em = $this->get('fos_user.user_manager');
420 $em->deleteUser($user);
422 return $this->redirect($this->generateUrl('fos_user_security_login'));
426 * Switch view mode for current user.
428 * @Route("/config/view-mode", name="switch_view_mode")
430 * @param Request $request
432 * @return \Symfony\Component\HttpFoundation\RedirectResponse
434 public function changeViewModeAction(Request
$request)
436 $user = $this->getUser();
437 $user->getConfig()->setListMode(!$user->getConfig()->getListMode());
439 $em = $this->getDoctrine()->getManager();
443 return $this->redirect($request->headers
->get('referer'));
447 * Change the locale for the current user.
449 * @param Request $request
450 * @param string $language
452 * @Route("/locale/{language}", name="changeLocale")
454 * @return \Symfony\Component\HttpFoundation\RedirectResponse
456 public function setLocaleAction(Request
$request, $language = null)
458 $errors = $this->get('validator')->validate($language, (new LocaleConstraint()));
460 if (0 === \
count($errors)) {
461 $request->getSession()->set('_locale', $language);
464 return $this->redirect($request->headers
->get('referer', $this->generateUrl('homepage')));
468 * Remove all tags for given tags and a given user and cleanup orphan tags.
473 private function removeAllTagsByStatusAndUserId($tags, $userId)
479 $this->get('wallabag_core.entry_repository')
480 ->removeTags($userId, $tags);
482 // cleanup orphan tags
483 $em = $this->getDoctrine()->getManager();
485 foreach ($tags as $tag) {
486 if (0 === \
count($tag->getEntries())) {
495 * Remove all tags for a given user and cleanup orphan tags.
499 private function removeAllTagsByUserId($userId)
501 $tags = $this->get('wallabag_core.tag_repository')->findAllTags($userId);
502 $this->removeAllTagsByStatusAndUserId($tags, $userId);
506 * Remove all tags for a given user and cleanup orphan tags.
510 private function removeTagsForArchivedByUserId($userId)
512 $tags = $this->get('wallabag_core.tag_repository')->findForArchivedArticlesByUser($userId);
513 $this->removeAllTagsByStatusAndUserId($tags, $userId);
516 private function removeAnnotationsForArchivedByUserId($userId)
518 $em = $this->getDoctrine()->getManager();
520 $archivedEntriesAnnotations = $this->getDoctrine()
521 ->getRepository('WallabagAnnotationBundle:Annotation')
522 ->findAllArchivedEntriesByUser($userId);
524 foreach ($archivedEntriesAnnotations as $archivedEntriesAnnotation) {
525 $em->remove($archivedEntriesAnnotation);
532 * Validate that a rule can be edited/deleted by the current user.
534 * @param TaggingRule $rule
536 private function validateRuleAction(TaggingRule
$rule)
538 if ($this->getUser()->getId() !== $rule->getConfig()->getUser()->getId()) {
539 throw $this->createAccessDeniedException('You can not access this tagging rule.');
544 * Retrieve config for the current user.
545 * If no config were found, create a new one.
549 private function getConfig()
551 $config = $this->getDoctrine()
552 ->getRepository('WallabagCoreBundle:Config')
553 ->findOneByUser($this->getUser());
555 // should NEVER HAPPEN ...
557 $config = new Config($this->getUser());