1 files changed, 110 insertions, 0 deletions
diff --git a/Authentication/Provider/UserAuthenticationProvider.php b/Authentication/Provider/UserAuthenticationProvider.php
new file mode 100644
index 0000000..ddd98c3
--- /dev/null
+++ b/Authentication/Provider/UserAuthenticationProvider.php
@@ -0,0 +1,110 @@
+<?php
+
+namespace Symfony\Component\Security\Authentication\Provider;
+
+use Symfony\Component\Security\User\AccountInterface;
+use Symfony\Component\Security\User\AccountCheckerInterface;
+use Symfony\Component\Security\Exception\UsernameNotFoundException;
+use Symfony\Component\Security\Exception\AuthenticationException;
+use Symfony\Component\Security\Exception\BadCredentialsException;
+use Symfony\Component\Security\Authentication\Token\UsernamePasswordToken;
+use Symfony\Component\Security\Authentication\Token\TokenInterface;
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien.potencier@symfony-project.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+/**
+ * UserProviderInterface retrieves users for UsernamePasswordToken tokens.
+ *
+ * @author Fabien Potencier <fabien.potencier@symfony-project.com>
+ */
+abstract class UserAuthenticationProvider implements AuthenticationProviderInterface
+{
+    protected $hideUserNotFoundExceptions;
+    protected $accountChecker;
+
+    /**
+     * Constructor.
+     *
+     * @param AccountCheckerInterface $accountChecker             An AccountCheckerInterface interface
+     * @param Boolean                 $hideUserNotFoundExceptions Whether to hide user not found exception or not
+     */
+    public function __construct(AccountCheckerInterface $accountChecker, $hideUserNotFoundExceptions = true)
+    {
+        $this->accountChecker = $accountChecker;
+        $this->hideUserNotFoundExceptions = $hideUserNotFoundExceptions;
+    }
+
+    /**
+     * Does additional checks on the user and token (like validating the credentials).
+     *
+     * @param AccountInterface      $account The retrieved AccountInterface instance
+     * @param UsernamePasswordToken $token   The UsernamePasswordToken token to be authenticated
+     *
+     * @throws AuthenticationException if the credentials could not be validated
+     */
+    abstract protected function checkAuthentication(AccountInterface $account, UsernamePasswordToken $token);
+
+    /**
+     * {@inheritdoc}
+     */
+    public function authenticate(TokenInterface $token)
+    {
+        if (!$this->supports($token)) {
+            return null;
+        }
+
+        $username = null === $token->getUser() ? 'NONE_PROVIDED' : (string) $token;
+
+        try {
+            $user = $this->retrieveUser($username, $token);
+        } catch (UsernameNotFoundException $notFound) {
+            if ($this->hideUserNotFoundExceptions) {
+                throw new BadCredentialsException('Bad credentials', 0, $notFound);
+            }
+
+            throw $notFound;
+        }
+
+        if (null === $user) {
+            throw new \LogicException('The retrieveUser() methods returned null which should not be possible.');
+        }
+
+        try {
+            $this->accountChecker->checkPreAuth($user);
+            $this->checkAuthentication($user, $token);
+        } catch (AuthenticationException $e) {
+            throw $e;
+        }
+
+        $this->accountChecker->checkPostAuth($user);
+
+        return new UsernamePasswordToken($user, $token->getCredentials(), $user->getRoles());
+    }
+
+    /**
+     * Retrieves the user from an implementation-specific location.
+     *
+     * @param string                $username The username to retrieve
+     * @param UsernamePasswordToken $token    The Token
+     *
+     * @return mixed The user
+     *
+     * @throws AuthenticationException if the credentials could not be validated
+     */
+    abstract protected function retrieveUser($username, UsernamePasswordToken $token);
+
+    /**
+     * {@inheritdoc}
+     */
+    public function supports(TokenInterface $token)
+    {
+        return $token instanceof UsernamePasswordToken;
+    }
+}