OroUserBundle – Where does it authenticates?

Hi Oro Friends,

I’m trying to intercept the authentication process to add a 3rd value (Google Two-Factor-Auth). My problem is that I can’t find what exactly method are validating the username/password.

1) So, let’s take a look in the form:

<form action=”{{ path(‘oro_user_security_check’) }}” method=”post” class=”form-signin”>

1 2 3

<form action=”{{ path(‘oro_user_security_check’) }}” method=”post” class=”form-signin”>

2) Let’s find the router:

app/console router:debug | grep ‘oro_user_security_check’ oro_user_security_check ANY ANY ANY /user/login-check

1 2 3 4

app/console router:debug | grep ‘oro_user_security_check’ oro_user_security_check ANY ANY ANY /user/login-check

3) This is the controller that are using the ‘oro_user_security_check’ router:

/** * @Route("/login-check", name="oro_user_security_check") */ public function checkAction() { throw new \RuntimeException( 'You must configure the check path to be handled by the firewall ' . 'using form_login in your security firewall configuration.' ); }

1 2 3 4 5 6 7 8 9 10 11 12

/** * @Route("/login-check", name="oro_user_security_check") */ public function checkAction() { throw new \RuntimeException( 'You must configure the check path to be handled by the firewall ' . 'using form_login in your security firewall configuration.' ); }

4) If we have an empty method, I believe that we have an Event Listener somewhere taking care of this authentication. Where is it living? I only found this one, but this is after the authentication. I can add my code here and destroy the session after that, but I don’t think this is the right way. So, can you guys please give me a clue about how oro authentication works?

public function onLogin(InteractiveLoginEvent $event) { $user = $event->getAuthenticationToken()->getUser(); if ($user instanceof User) { $user->setLastLogin(new \DateTime('now', new \DateTimeZone('UTC'))) ->setLoginCount($user->getLoginCount() + 1); $this->userManager->updateUser($user); } } }

1 2 3 4 5 6 7 8 9 10 11 12

public function onLogin(InteractiveLoginEvent $event) { $user = $event->getAuthenticationToken()->getUser(); if ($user instanceof User) { $user->setLastLogin(new \DateTime('now', new \DateTimeZone('UTC'))) ->setLoginCount($user->getLoginCount() + 1); $this->userManager->updateUser($user); } } }

Thanks!!

Topic

[Yurii MuratovParticipant]

Hi, Rodolfo.
OroPlatform is based on Symfony2 framework. And autentification was based on Syfony Security component.
More info about autentification you can find in official documentation http://symfony.com/doc/2.3/components/security/authentication.html

[RodolfoParticipant]

Hi @yurio,

Thanks! By now I created a custom EventListener and added the “onLogin” logic inside my own customOnLogin. It’s working well. I’ll validate my method better and check if I should create a custom authenticator provider or keep the default oro auth logic. ( http://symfony.com/doc/2.4/cookbook/security/custom_password_authenticator.html )

Rodolfo

[Author]

Replies