Symfony2 custom user checker based on accepted eula

Question

I want to create custom user checker to validate login action against last accepted eula. ' Idea is quite simple, there will be many versions of eula and user can't login untill he accept the lastest eula.

Scenario is:

User creates new account and accepts eula.
Eula gets updated
User tries to login, but he didnt accept lastest eula
User gets the same login form but with additional field "accept newest eula"
User logs in and system inserts information: Current date and time, User id, Eula id to keep track of eula acceptance.

I found this: https://groups.google.com/forum/#!msg/symfony2/D0V0bFks9S0/Qg9mrbpfB3IJ

But unfortunately there is no full version of custom user checker. How do I implement the rest of it?

I know this question is dated... But I'm facing a situation where I feel the need to override the user checker. Have you found a solution? — Fatmuemoo
– Fatmuemoo, Commented Sep 20, 2013 at 13:39

Fatmuemoo · Accepted Answer · 2013-09-20 14:17:22Z

8

The answer is actually quite obvious. In your custom bundle:

config.yml

parameters:
    security.user_checker.class: Acme\Bundle\UserBundle\Security\UserChecker

Userchecker:

class UserChecker extends BaseUserChecker
{
    /**
     * {@inheritdoc}
     */
    public function checkPreAuth(UserInterface $user)
    {
        //do your custom preauth stuff here
        parent::checkPreAuth($user);
    }
}

answered Sep 20, 2013 at 14:17

Fatmuemoo

2,2174 gold badges18 silver badges34 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

gtb · Accepted Answer · 2015-01-20 11:01:39Z

7

You can redefine Symfony's user checker service (security.user_checker) in your bundle:

# services.yml
security.user_checker:
    class: MyBundle\Checker\UserChecker
    arguments: [ "@some.service", "%some.param%" ]

Then extend Symfony's UserChecker:

# UserChecker.php

use Symfony\Component\Security\Core\User\UserChecker as BaseUserChecker;

class UserChecker extends BaseUserChecker
{
    public function checkPreAuth(UserInterface $user)
    {
        parent::checkPreAuth($user);

        // your stuff
    }

    public function checkPostAuth(UserInterface $user)
    {
        parent::checkPostAuth($user);

        // your stuff
    }
}

The security.user_checker service gets called in \Symfony\Component\Security\Core\Authentication\Provider\UserAuthenticationProvider::authenticate() during the authentication process

answered Jan 20, 2015 at 11:01

gtb

4909 silver badges14 bronze badges

1 Comment

ochitos Over a year ago

in your services.yml please change to: services: security.user_checker:

Nikola Petkanski · Accepted Answer · 2012-06-19 16:30:01Z

0

Why not attach event listener to the kernel.request event and watch if the current logged user has accepted the latest EULA?

To get the current user you can use something like this:

$securityContext = $this->container->get('security.context');
if (!$securityContext) {
    return;
}

$user = $securityContext->getToken()->getUser();

answered Jun 19, 2012 at 16:30

Nikola Petkanski

4,7941 gold badge36 silver badges41 bronze badges

2 Comments

Kaminari Over a year ago

Event listener would be the same as checking on every user action. Maybe more flexible but still you would be authenticated in this case. I need to check this before user would be authed.

Nikola Petkanski Over a year ago

In this case you should use a marked stored inside the session. You can get the session from the request, which is available in this event.

Collectives™ on Stack Overflow

Symfony2 custom user checker based on accepted eula

3 Answers 3

Comments

1 Comment

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

1 Comment

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related