如何在控制器中使用约束

Question

我一直在尝试添加一个编辑用户页面，他们可以在其中更改用户名、电子邮件地址和密码。

我想要实现的一件事是他们必须输入旧密码才能将其更改为新密码。

我一直在阅读这些页面：

但我在实施方面真的很挣扎。

这是我的表单控制器：

<?php
    namespace App\Controller\User;

    use App\Entity\User;
    use App\Form\User\EditUserType;
    use App\Repository\UserRepository;
    use Symfony\Bundle\FrameworkBundle\Controller\Controller;
    use Symfony\Component\HttpFoundation\Request;
    use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;

    class EditController extends Controller
    {
        public function edit(Request $request, UserPasswordEncoderInterface $encoder)
        {
            $userInfo = ['username' => null, 'plainPassword' => null, 'password' => null, 'email' => null];

            $form = $this->createForm(EditUserType::class, $userInfo);
            $form->handleRequest($request);

            $user        = new User();
            $oldPassword = $user->getPassword();

            if ($form->isSubmitted() && $form->isValid()) {
                $userInfo = $form->getData();

                $username = $userInfo['username'];
                $email    = $userInfo['email'];
                $newPass  = $userInfo['plainPassword'];
                $oldPass  = $userInfo['password'];

                $encryptOldPass = $encoder->encodePassword($user, $oldPass);

                if ($oldPassword === $encryptOldPass) {
                    $this->addFlash('danger', $oldPass. ' ' .$encryptOldPass. ' ' .$oldPassword);
                    return $this->redirectToRoute('user_edit');
                } else {
                    $this->addFlash('success', $oldPassword. '-' .$encryptOldPass);
                    return $this->redirectToRoute('user_edit');
                }

                $pass = $encoder->encodePassword($user, $newPass);

                $user->setPassword($pass);
                $user->setEmail($email);
                $user->setUsername($username);

                echo 'trey was here';

                $this->addFlash('success', 'User Details Edited');

                return $this->redirectToRoute('user_edit');
            }

            return $this->render('user/edit.html.twig', array('form' => $form->createView()));
        }
    }

我的 EditUserType 文件：

<?php
    namespace App\Form\User;

    use Symfony\Component\Form\AbstractType;
    use Symfony\Component\Form\Extension\Core\Type\EmailType;
    use Symfony\Component\Form\Extension\Core\Type\PasswordType;
    use Symfony\Component\Form\Extension\Core\Type\RepeatedType;
    use Symfony\Component\Form\Extension\Core\Type\TextType;
    use Symfony\Component\Form\FormBuilderInterface;
    use Symfony\Component\OptionsResolver\OptionsResolver;

    class EditUserType extends AbstractType
    {
        public function buildForm(FormBuilderInterface $builder, array $options)
        {
            $builder->add('email', EmailType::class)
                ->add('username', TextType::class)
                ->add('password', PasswordType::class, array())
                ->add('plainPassword', RepeatedType::class, array(
                    'type' => PasswordType::class,
                    'first_options' => array('label' => 'New Password'),
                    'second_options' => array('label' => 'New Repeat Password')
                ));
        }

        public function configureOptions(OptionsResolver $resolver)
        {
            $resolver->setDefaults(array());
        }
    }

我的验证（文件：config/validator/validation.yaml）

App\Form\User\EditUserType:
    properties:
        oldPassword:
            - Symfony\Component\Security\Core\Validator\Constraints\UserPassword:
                message: 'Invalid Password'

我的模板文件：

{% include 'builder/header.html.twig' %}

<div class="user-container" id="user-content">
    {% block body %}
        {% include 'builder/notices.html.twig' %}

        <div class="user-container">
            <i class="fas fa-user-edit fa-5x"></i>
        </div>

        <hr />

        {{ form_start(form) }}
            {{ form_row(form.username, { 'attr': {'class': 'form-control', 'value': app.user.username} }) }}
            {{ form_row(form.email, { 'attr': {'class': 'form-control', 'value': app.user.email} }) }}
            {{ form_row(form.password, { 'attr': {'class': 'form-control'} }) }}
            {{ form_row(form.plainPassword.first, { 'attr': {'class': 'form-control'} }) }}
            {{ form_row(form.plainPassword.second, { 'attr': {'class': 'form-control'} }) }}

            <div class="register-btn-container">
                <button class="btn btn-danger" id="return-to-dash-btn" type="button">Cancel!</button>
                <button class="btn btn-primary" type="submit">Update!</button>
            </div>
        {{ form_end(form) }}
    {% endblock %}
</div>

{% include 'builder/footer.html.twig' %}

在旧密码字段中输入任何旧密码似乎并没有将密码更新为新输入的值..那么我如何根据数据库验证旧密码以便用户可以将其更新为新密码？

谢谢

Answer 1

找到解决方案，使用 cerad 对先前（现已删除）答案的评论：

更新控制器：

<?php
    namespace App\Controller\User;

    use App\Form\User\EditUserType;
    use Symfony\Bundle\FrameworkBundle\Controller\Controller;
    use Symfony\Component\HttpFoundation\Request;
    use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;


    class EditController extends Controller
    {
        public function edit(Request $request, UserPasswordEncoderInterface $encoder)
        {
            $userInfo = ['username' => null, 'plainPassword' => null, 'password' => null, 'email' => null];

            $form = $this->createForm(EditUserType::class, $userInfo);
            $form->handleRequest($request);

            $user = $this->getUser();

            $entityManager = $this->getDoctrine()->getManager();

            if ($form->isSubmitted() && $form->isValid()) {
                $userInfo = $form->getData();

                $username = $userInfo['username'];
                $email    = $userInfo['email'];
                $newPass  = $userInfo['plainPassword'];
                $oldPass  = $userInfo['password'];

                if (!$encoder->isPasswordValid($user, $oldPass)) {
                    $this->addFlash('danger', 'Old password is invalid. Please try again');
                    return $this->redirectToRoute('user_edit');
                }

                $pass = $encoder->encodePassword($user, $newPass);

                $user->setPassword($pass);
                $user->setEmail($email);
                $user->setUsername($username);

                $entityManager->persist($user);
                $entityManager->flush();

                $this->addFlash('success', 'User Details Edited - Please Login Again');

                return $this->redirectToRoute('login');
            }

            return $this->render('user/edit.html.twig', array('form' => $form->createView()));
        }
    }

问题是，我没有检查登录用户的详细信息，我认为坚持意味着插入，而不是 insert/update - 所以缺乏这方面的知识。

如何在控制器中使用约束

How to use constraints in controller

constraints

symfony

symfony4