2 namespace Wallabag\CoreBundle\Security\Authentication\Provider
;
4 use Symfony\Component\Security\Core\Authentication\Provider\AuthenticationProviderInterface
;
5 use Symfony\Component\Security\Core\User\UserProviderInterface
;
6 use Symfony\Component\Security\Core\Exception\AuthenticationException
;
7 use Symfony\Component\Security\Core\Exception\NonceExpiredException
;
8 use Symfony\Component\Security\Core\Authentication\Token\TokenInterface
;
9 use Wallabag\CoreBundle\Security\Authentication\Token\WsseUserToken
;
11 class WsseProvider
implements AuthenticationProviderInterface
13 private $userProvider;
16 public function __construct(UserProviderInterface
$userProvider, $cacheDir)
18 $this->userProvider
= $userProvider;
19 $this->cacheDir
= $cacheDir;
22 public function authenticate(TokenInterface
$token)
24 $user = $this->userProvider
->loadUserByUsername($token->getUsername());
26 if ($user && $this->validateDigest($token->digest
, $token->nonce
, $token->created
, $user->getPassword())) {
27 $authenticatedToken = new WsseUserToken($user->getRoles());
28 $authenticatedToken->setUser($user);
30 return $authenticatedToken;
33 throw new AuthenticationException('The WSSE authentication failed.');
36 protected function validateDigest($digest, $nonce, $created, $secret)
38 // Expire le timestamp après 5 minutes
39 if (time() - strtotime($created) > 300) {
43 // Valide que le nonce est unique dans les 5 minutes
44 if (file_exists($this->cacheDir
.'/'.$nonce) && file_get_contents($this->cacheDir
.'/'.$nonce) +
300 > time()) {
45 throw new NonceExpiredException('Previously used nonce detected');
47 file_put_contents($this->cacheDir
.'/'.$nonce, time());
50 $expected = base64_encode(sha1(base64_decode($nonce).$created.$secret, true));
52 return $digest === $expected;
55 public function supports(TokenInterface
$token)
57 return $token instanceof WsseUserToken
;