local/modules/Front/Controller/CustomerController.php line 56

  1. <?php
  3. /*
  4.  * This file is part of the Thelia package.
  5.  * http://www.thelia.net
  6.  *
  7.  * (c) OpenStudio <info@thelia.net>
  8.  *
  9.  * For the full copyright and license information, please view the LICENSE
  10.  * file that was distributed with this source code.
  11.  */
  13. namespace Front\Controller;
  15. use Front\Front;
  16. use Symfony\Component\Form\Extension\Core\Type\FormType;
  17. use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
  18. use Symfony\Contracts\EventDispatcher\EventDispatcherInterface;
  19. use Thelia\Controller\Front\BaseFrontController;
  20. use Thelia\Core\Event\Customer\CustomerCreateOrUpdateEvent;
  21. use Thelia\Core\Event\Customer\CustomerEvent;
  22. use Thelia\Core\Event\Customer\CustomerLoginEvent;
  23. use Thelia\Core\Event\DefaultActionEvent;
  24. use Thelia\Core\Event\LostPasswordEvent;
  25. use Thelia\Core\Event\Newsletter\NewsletterEvent;
  26. use Thelia\Core\Event\TheliaEvents;
  27. use Thelia\Core\Security\Authentication\CustomerUsernamePasswordFormAuthenticator;
  28. use Thelia\Core\Security\Exception\AuthenticationException;
  29. use Thelia\Core\Security\Exception\CustomerNotConfirmedException;
  30. use Thelia\Core\Security\Exception\UsernameNotFoundException;
  31. use Thelia\Core\Security\Exception\WrongPasswordException;
  32. use Thelia\Form\CustomerLogin;
  33. use Thelia\Form\Definition\FrontForm;
  34. use Thelia\Form\Exception\FormValidationException;
  35. use Thelia\Log\Tlog;
  36. use Thelia\Model\ConfigQuery;
  37. use Thelia\Model\Customer;
  38. use Thelia\Model\CustomerQuery;
  39. use Thelia\Model\Newsletter;
  40. use Thelia\Model\NewsletterQuery;
  41. use Thelia\Tools\RememberMeTrait;
  42. use Thelia\Tools\URL;
  44. /**
  45.  * Class CustomerController.
  46.  *
  47.  * @author Manuel Raynaud <manu@raynaud.io>
  48.  */
  49. class CustomerController extends BaseFrontController
  50. {
  51.     use RememberMeTrait;
  53.     /**
  54.      * Display the register template if no customer logged.
  55.      */
  56.     public function viewLoginAction()
  57.     {
  58.         if ($this->getSecurityContext()->hasCustomerUser()) {
  59.             // Redirect to home page
  60.             return $this->generateRedirect(URL::getInstance()->getIndexPage());
  61.         }
  63.         return $this->render('login');
  64.     }
  66.     /**
  67.      * Display the register template if no customer logged.
  68.      */
  69.     public function viewRegisterAction()
  70.     {
  71.         if ($this->getSecurityContext()->hasCustomerUser()) {
  72.             // Redirect to home page
  73.             return $this->generateRedirect(URL::getInstance()->getIndexPage());
  74.         }
  76.         return $this->render('register');
  77.     }
  79.     public function newPasswordAction(EventDispatcherInterface $eventDispatcher)
  80.     {
  81.         $passwordLost = $this->createForm(FrontForm::CUSTOMER_LOST_PASSWORD);
  83.         if (!$this->getSecurityContext()->hasCustomerUser()) {
  84.             try {
  85.                 $form = $this->validateForm($passwordLost);
  87.                 $event = new LostPasswordEvent($form->get('email')->getData());
  89.                 $eventDispatcher->dispatch($event, TheliaEvents::LOST_PASSWORD);
  91.                 return $this->generateSuccessRedirect($passwordLost);
  92.             } catch (FormValidationException $e) {
  93.                 $message = $this->getTranslator()->trans(
  94.                     'Please check your input: %s',
  95.                     [
  96.                         '%s' => $e->getMessage(),
  97.                     ],
  98.                     Front::MESSAGE_DOMAIN
  99.                 );
  100.             } catch (\Exception $e) {
  101.                 $message = $this->getTranslator()->trans(
  102.                     'Sorry, an error occurred: %s',
  103.                     [
  104.                         '%s' => $e->getMessage(),
  105.                     ],
  106.                     Front::MESSAGE_DOMAIN
  107.                 );
  108.             }
  110.             if ($message !== false) {
  111.                 Tlog::getInstance()->error(
  112.                     sprintf(
  113.                         'Error during customer creation process : %s. Exception was %s',
  114.                         $message,
  115.                         $e->getMessage()
  116.                     )
  117.                 );
  118.             }
  119.         } else {
  120.             $message = $this->getTranslator()->trans(
  121.                 "You're currently logged in. Please log out before requesting a new password.",
  122.                 [],
  123.                 Front::MESSAGE_DOMAIN
  124.             );
  125.         }
  127.         $passwordLost->setErrorMessage($message);
  129.         $this->getParserContext()
  130.             ->addForm($passwordLost)
  131.             ->setGeneralError($message)
  132.         ;
  134.         // Redirect to error URL if defined
  135.         if ($passwordLost->hasErrorUrl()) {
  136.             return $this->generateErrorRedirect($passwordLost);
  137.         }
  138.     }
  140.     public function newPasswordSentAction(): void
  141.     {
  142.         $this->getParser()->assign('password_sent', true);
  143.     }
  145.     /**
  146.      * Create a new customer.
  147.      * On success, redirect to success_url if exists, otherwise, display the same view again.
  148.      */
  149.     public function createAction(EventDispatcherInterface $eventDispatcher)
  150.     {
  151.         if (!$this->getSecurityContext()->hasCustomerUser()) {
  152.             $customerCreation = $this->createForm(FrontForm::CUSTOMER_CREATE);
  154.             try {
  155.                 $form = $this->validateForm($customerCreation, 'post');
  157.                 $customerCreateEvent = $this->createEventInstance($form->getData());
  159.                 $eventDispatcher->dispatch($customerCreateEvent, TheliaEvents::CUSTOMER_CREATEACCOUNT);
  161.                 $newCustomer = $customerCreateEvent->getCustomer();
  163.                 // Newsletter
  164.                 if (true === $form->get('newsletter')->getData()) {
  165.                     $newsletterEmail = $newCustomer->getEmail();
  166.                     $nlEvent = new NewsletterEvent(
  167.                         $newsletterEmail,
  168.                         $this->getRequest()->getSession()->getLang()->getLocale()
  169.                     );
  170.                     $nlEvent->setFirstname($newCustomer->getFirstname());
  171.                     $nlEvent->setLastname($newCustomer->getLastname());
  173.                     // Security : Check if this new Email address already exist
  174.                     if (null !== $newsletter = NewsletterQuery::create()->findOneByEmail($newsletterEmail)) {
  175.                         $nlEvent->setId($newsletter->getId());
  176.                         $eventDispatcher->dispatch($nlEvent, TheliaEvents::NEWSLETTER_UPDATE);
  177.                     } else {
  178.                         $eventDispatcher->dispatch($nlEvent, TheliaEvents::NEWSLETTER_SUBSCRIBE);
  179.                     }
  180.                 }
  182.                 if (ConfigQuery::isCustomerEmailConfirmationEnable() && !$newCustomer->getEnable()) {
  183.                     $response = $this->generateRedirectFromRoute('customer.login.view');
  184.                 } else {
  185.                     $this->processLogin($eventDispatcher, $customerCreateEvent->getCustomer());
  187.                     $cart = $this->getSession()->getSessionCart($eventDispatcher);
  188.                     if ($cart->getCartItems()->count() > 0) {
  189.                         $response = $this->generateRedirectFromRoute('cart.view');
  190.                     } else {
  191.                         $response = $this->generateSuccessRedirect($customerCreation);
  192.                     }
  193.                 }
  195.                 return $response;
  196.             } catch (FormValidationException $e) {
  197.                 $message = $this->getTranslator()->trans(
  198.                     'Please check your input: %s',
  199.                     [
  200.                         '%s' => $e->getMessage(),
  201.                     ],
  202.                     Front::MESSAGE_DOMAIN
  203.                 );
  204.             } catch (\Exception $e) {
  205.                 $message = $this->getTranslator()->trans(
  206.                     'Sorry, an error occured: %s',
  207.                     [
  208.                         '%s' => $e->getMessage(),
  209.                     ],
  210.                     Front::MESSAGE_DOMAIN
  211.                 );
  212.             }
  214.             Tlog::getInstance()->error(
  215.                 sprintf(
  216.                     'Error during customer creation process : %s. Exception was %s',
  217.                     $message,
  218.                     $e->getMessage()
  219.                 )
  220.             );
  222.             $customerCreation->setErrorMessage($message);
  224.             $this->getParserContext()
  225.                 ->addForm($customerCreation)
  226.                 ->setGeneralError($message)
  227.             ;
  229.             // Redirect to error URL if defined
  230.             if ($customerCreation->hasErrorUrl()) {
  231.                 return $this->generateErrorRedirect($customerCreation);
  232.             }
  233.         }
  234.     }
  236.     /**
  237.      * Prepare customer data update.
  238.      */
  239.     public function viewAction(): void
  240.     {
  241.         $this->checkAuth();
  243.         /** @var Customer $customer */
  244.         $customer = $this->getSecurityContext()->getCustomerUser();
  245.         $newsletter = NewsletterQuery::create()->findOneByEmail($customer->getEmail());
  246.         $data = [
  247.             'id' => $customer->getId(),
  248.             'title' => $customer->getTitleId(),
  249.             'firstname' => $customer->getFirstName(),
  250.             'lastname' => $customer->getLastName(),
  251.             'email' => $customer->getEmail(),
  252.             'email_confirm' => $customer->getEmail(),
  253.             'lang_id' => $customer->getLangId(),
  254.             'newsletter' => $newsletter instanceof Newsletter ? !$newsletter->getUnsubscribed() : false,
  255.         ];
  257.         $customerProfileUpdateForm = $this->createForm(FrontForm::CUSTOMER_PROFILE_UPDATE, FormType::class, $data);
  259.         // Pass it to the parser
  260.         $this->getParserContext()->addForm($customerProfileUpdateForm);
  261.     }
  263.     public function updatePasswordAction(EventDispatcherInterface $eventDispatcher)
  264.     {
  265.         if ($this->getSecurityContext()->hasCustomerUser()) {
  266.             $customerPasswordUpdateForm = $this->createForm(FrontForm::CUSTOMER_PASSWORD_UPDATE);
  268.             try {
  269.                 /** @var Customer $customer */
  270.                 $customer = $this->getSecurityContext()->getCustomerUser();
  272.                 $form = $this->validateForm($customerPasswordUpdateForm, 'post');
  274.                 $customerChangeEvent = $this->createEventInstance($form->getData());
  275.                 $customerChangeEvent->setCustomer($customer);
  276.                 $eventDispatcher->dispatch($customerChangeEvent, TheliaEvents::CUSTOMER_UPDATEPROFILE);
  278.                 return $this->generateSuccessRedirect($customerPasswordUpdateForm);
  279.             } catch (FormValidationException $e) {
  280.                 $message = $this->getTranslator()->trans(
  281.                     'Please check your input: %s',
  282.                     [
  283.                         '%s' => $e->getMessage(),
  284.                     ],
  285.                     Front::MESSAGE_DOMAIN
  286.                 );
  287.             } catch (\Exception $e) {
  288.                 $message = $this->getTranslator()->trans(
  289.                     'Sorry, an error occured: %s',
  290.                     [
  291.                         '%s' => $e->getMessage(),
  292.                     ],
  293.                     Front::MESSAGE_DOMAIN
  294.                 );
  295.             }
  297.             Tlog::getInstance()->error(
  298.                 sprintf(
  299.                     'Error during customer password modification process : %s.',
  300.                     $message
  301.                 )
  302.             );
  304.             $customerPasswordUpdateForm->setErrorMessage($message);
  306.             $this->getParserContext()
  307.                 ->addForm($customerPasswordUpdateForm)
  308.                 ->setGeneralError($message)
  309.             ;
  311.             // Redirect to error URL if defined
  312.             if ($customerPasswordUpdateForm->hasErrorUrl()) {
  313.                 return $this->generateErrorRedirect($customerPasswordUpdateForm);
  314.             }
  315.         }
  316.     }
  318.     public function updateAction(EventDispatcherInterface $eventDispatcher)
  319.     {
  320.         if ($this->getSecurityContext()->hasCustomerUser()) {
  321.             $customerProfileUpdateForm = $this->createForm(FrontForm::CUSTOMER_PROFILE_UPDATE);
  323.             try {
  324.                 /** @var Customer $customer */
  325.                 $customer = $this->getSecurityContext()->getCustomerUser();
  326.                 $newsletterOldEmail = $customer->getEmail();
  328.                 $form = $this->validateForm($customerProfileUpdateForm, 'post');
  330.                 $customerChangeEvent = $this->createEventInstance($form->getData());
  331.                 $customerChangeEvent->setCustomer($customer);
  333.                 $customerChangeEvent->setEmailUpdateAllowed(
  334.                     ((int) ConfigQuery::read('customer_change_email', 0)) ? true : false
  335.                 );
  337.                 $eventDispatcher->dispatch($customerChangeEvent, TheliaEvents::CUSTOMER_UPDATEPROFILE);
  339.                 $updatedCustomer = $customerChangeEvent->getCustomer();
  341.                 // Newsletter
  342.                 if (true === $form->get('newsletter')->getData()) {
  343.                     $nlEvent = new NewsletterEvent(
  344.                         $updatedCustomer->getEmail(),
  345.                         $this->getRequest()->getSession()->getLang()->getLocale()
  346.                     );
  347.                     $nlEvent->setFirstname($updatedCustomer->getFirstname());
  348.                     $nlEvent->setLastname($updatedCustomer->getLastname());
  350.                     if (null !== $newsletter = NewsletterQuery::create()->findOneByEmail($newsletterOldEmail)) {
  351.                         $nlEvent->setId($newsletter->getId());
  352.                         $eventDispatcher->dispatch($nlEvent, TheliaEvents::NEWSLETTER_UPDATE);
  353.                     } else {
  354.                         $eventDispatcher->dispatch($nlEvent, TheliaEvents::NEWSLETTER_SUBSCRIBE);
  355.                     }
  356.                 } else {
  357.                     if (null !== $newsletter = NewsletterQuery::create()->findOneByEmail($newsletterOldEmail)) {
  358.                         $nlEvent = new NewsletterEvent(
  359.                             $updatedCustomer->getEmail(),
  360.                             $this->getRequest()->getSession()->getLang()->getLocale()
  361.                         );
  362.                         $nlEvent->setId($newsletter->getId());
  363.                         $eventDispatcher->dispatch($nlEvent, TheliaEvents::NEWSLETTER_UNSUBSCRIBE);
  364.                     }
  365.                 }
  367.                 $this->processLogin($eventDispatcher, $updatedCustomer);
  369.                 return $this->generateSuccessRedirect($customerProfileUpdateForm);
  370.             } catch (FormValidationException $e) {
  371.                 $message = $this->getTranslator()->trans(
  372.                     'Please check your input: %s',
  373.                     [
  374.                         '%s' => $e->getMessage(),
  375.                     ],
  376.                     Front::MESSAGE_DOMAIN
  377.                 );
  378.             } catch (\Exception $e) {
  379.                 $message = $this->getTranslator()->trans(
  380.                     'Sorry, an error occured: %s',
  381.                     [
  382.                         '%s' => $e->getMessage(),
  383.                     ],
  384.                     Front::MESSAGE_DOMAIN
  385.                 );
  386.             }
  388.             Tlog::getInstance()->error(sprintf('Error during customer modification process : %s.', $message));
  390.             $customerProfileUpdateForm->setErrorMessage($message);
  392.             $this->getParserContext()
  393.                 ->addForm($customerProfileUpdateForm)
  394.                 ->setGeneralError($message)
  395.             ;
  397.             // Redirect to error URL if defined
  398.             if ($customerProfileUpdateForm->hasErrorUrl()) {
  399.                 return $this->generateErrorRedirect($customerProfileUpdateForm);
  400.             }
  401.         }
  402.     }
  404.     /**
  405.      * Perform user login. On a successful login, the user is redirected to the URL
  406.      * found in the success_url form parameter, or / if none was found.
  407.      *
  408.      * If login is not successfull, the same view is displayed again.
  409.      */
  410.     public function loginAction(EventDispatcherInterface $eventDispatcher)
  411.     {
  412.         if (!$this->getSecurityContext()->hasCustomerUser()) {
  413.             $request = $this->getRequest();
  414.             $customerLoginForm = $this->createForm(CustomerLogin::class);
  416.             try {
  417.                 $form = $this->validateForm($customerLoginForm, 'post');
  419.                 // If User is a new customer
  420.                 if ($form->get('account')->getData() == 0 && $form->get('email')->getErrors()->count() == 0) {
  421.                     return $this->generateRedirectFromRoute(
  422.                         'customer.create.process',
  423.                         ['email' => $form->get('email')->getData()]
  424.                     );
  425.                 }
  426.                 try {
  427.                     $authenticator = new CustomerUsernamePasswordFormAuthenticator($request, $customerLoginForm);
  429.                     /** @var Customer $customer */
  430.                     $customer = $authenticator->getAuthentifiedUser();
  432.                     $this->processLogin($eventDispatcher, $customer);
  434.                     if ((int) $form->get('remember_me')->getData() > 0) {
  435.                         // If a remember me field if present and set in the form, create
  436.                         // the cookie thant store "remember me" information
  437.                         $this->createRememberMeCookie(
  438.                             $customer,
  439.                             $this->getRememberMeCookieName(),
  440.                             $this->getRememberMeCookieExpiration()
  441.                         );
  442.                     }
  444.                     return $this->generateSuccessRedirect($customerLoginForm);
  445.                 } catch (UsernameNotFoundException $e) {
  446.                     $message = $this->getTranslator()->trans(
  447.                         'Wrong email or password. Please try again',
  448.                         [],
  449.                         Front::MESSAGE_DOMAIN
  450.                     );
  451.                 } catch (WrongPasswordException $e) {
  452.                     $message = $this->getTranslator()->trans(
  453.                         'Wrong email or password. Please try again',
  454.                         [],
  455.                         Front::MESSAGE_DOMAIN
  456.                     );
  457.                 } catch (CustomerNotConfirmedException $e) {
  458.                     if ($e->getUser() !== null) {
  459.                         // Send the confirmation email again
  460.                         $eventDispatcher->dispatch(
  461.                             new CustomerEvent($e->getUser()),
  462.                             TheliaEvents::SEND_ACCOUNT_CONFIRMATION_EMAIL
  463.                         );
  464.                     }
  465.                     $message = $this->getTranslator()->trans(
  466.                         'Your account is not yet confirmed. A confirmation email has been sent to your email address, please check your mailbox',
  467.                         [],
  468.                         Front::MESSAGE_DOMAIN
  469.                     );
  470.                 } catch (AuthenticationException $e) {
  471.                     $message = $this->getTranslator()->trans(
  472.                         'Wrong email or password. Please try again',
  473.                         [],
  474.                         Front::MESSAGE_DOMAIN
  475.                     );
  476.                 }
  477.             } catch (FormValidationException $e) {
  478.                 $message = $this->getTranslator()->trans(
  479.                     'Please check your input: %s',
  480.                     ['%s' => $e->getMessage()],
  481.                     Front::MESSAGE_DOMAIN
  482.                 );
  483.             } catch (\Exception $e) {
  484.                 $message = $this->getTranslator()->trans(
  485.                     'Sorry, an error occured: %s',
  486.                     ['%s' => $e->getMessage()],
  487.                     Front::MESSAGE_DOMAIN
  488.                 );
  489.             }
  491.             Tlog::getInstance()->error(
  492.                 sprintf(
  493.                     'Error during customer login process : %s. Exception was %s',
  494.                     $message,
  495.                     $e->getMessage()
  496.                 )
  497.             );
  499.             $customerLoginForm->setErrorMessage($message);
  501.             $this->getParserContext()->addForm($customerLoginForm);
  503.             if ($customerLoginForm->hasErrorUrl()) {
  504.                 return $this->generateErrorRedirect($customerLoginForm);
  505.             }
  506.         }
  507.     }
  509.     /**
  510.      * Perform customer logout.
  511.      */
  512.     public function logoutAction(EventDispatcherInterface $eventDispatcher)
  513.     {
  514.         if ($this->getSecurityContext()->hasCustomerUser()) {
  515.             $eventDispatcher->dispatch(new DefaultActionEvent(), TheliaEvents::CUSTOMER_LOGOUT);
  516.         }
  518.         $this->clearRememberMeCookie($this->getRememberMeCookieName());
  520.         // Redirect to home page
  521.         return $this->generateRedirect(URL::getInstance()->getIndexPage());
  522.     }
  524.     /**
  525.      * @throws \Exception
  526.      * @throws \Propel\Runtime\Exception\PropelException
  527.      *
  528.      * @return \Symfony\Component\HttpFoundation\Response
  529.      */
  530.     public function confirmCustomerAction($token)
  531.     {
  532.         /** @var Customer $customer */
  533.         if (null === $customer = CustomerQuery::create()->findOneByConfirmationToken($token)) {
  534.             throw new NotFoundHttpException();
  535.         }
  537.         $customer
  538.             ->setEnable(true)
  539.             ->save()
  540.         ;
  542.         // Clear form error context
  544.         return $this->generateRedirectFromRoute('customer.login.view', ['validation_done' => 1]);
  545.     }
  547.     /**
  548.      * Dispatch event for customer login action.
  549.      */
  550.     protected function processLogin(EventDispatcherInterface $eventDispatcher, Customer $customer): void
  551.     {
  552.         $eventDispatcher->dispatch(new CustomerLoginEvent($customer), TheliaEvents::CUSTOMER_LOGIN);
  553.     }
  555.     /**
  556.      * @return \Thelia\Core\Event\Customer\CustomerCreateOrUpdateEvent
  557.      */
  558.     private function createEventInstance($data)
  559.     {
  560.         $customerCreateEvent = new CustomerCreateOrUpdateEvent(
  561.             $data['title'] ?? null,
  562.             $data['firstname'] ?? null,
  563.             $data['lastname'] ?? null,
  564.             $data['address1'] ?? null,
  565.             $data['address2'] ?? null,
  566.             $data['address3'] ?? null,
  567.             $data['phone'] ?? null,
  568.             $data['cellphone'] ?? null,
  569.             $data['zipcode'] ?? null,
  570.             $data['city'] ?? null,
  571.             $data['country'] ?? null,
  572.             $data['email'] ?? null,
  573.             $data['password'] ?? null,
  574.             $data['lang_id'] ?? $this->getSession()->getLang()->getId(),
  575.             $data['reseller'] ?? null,
  576.             $data['sponsor'] ?? null,
  577.             $data['discount'] ?? null,
  578.             $data['company'] ?? null,
  579.             null,
  580.             $data['state'] ?? null
  581.         );
  583.         return $customerCreateEvent;
  584.     }
  586.     protected function getRememberMeCookieName()
  587.     {
  588.         return ConfigQuery::read('customer_remember_me_cookie_name', 'crmcn');
  589.     }
  591.     protected function getRememberMeCookieExpiration()
  592.     {
  593.         return ConfigQuery::read('customer_remember_me_cookie_expiration', 2592000 /* 1 month */);
  594.     }
  595. }