Allow to complete password_credential flow with either username or email

GoteoFoundation · Apr 29, 2024 · 965dd8c · 965dd8c
1 parent cd137d2
commit 965dd8c
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 2 deletions.
diff --git a/src/EventListener/UserResolveListener.php b/src/EventListener/UserResolveListener.php
@@ -19,10 +19,10 @@ public function __construct(UserRepository $userRepository, PasswordValidatorSer
 
     public function onUserResolve(UserResolveEvent $event): void
     {
-        $user = $this->userRepository->findOneBy(['email' => $event->getUsername()]);
+        $user = $this->userRepository->findOneByIdentifier($event->getUsername());
 
         if ($user && $this->passwordValidator->isPasswordValid($user->getPassword(), $event->getPassword())) {
             $event->setUser($user);
         }
     }
-}
+}
diff --git a/src/Repository/UserRepository.php b/src/Repository/UserRepository.php
@@ -48,4 +48,18 @@ public function findById(string $userId): ?User
     {
         return $this->findOneBy(["id" => $userId]);
     }
+
+    /**
+     * Find an User by any of it's unique properties
+     * @param string $identifier A user id or email
+     */
+    public function findOneByIdentifier(string $identifier): ?User
+    {
+        return $this->createQueryBuilder('u')
+            ->andWhere('u.id = :val')
+            ->orWhere('u.email = :val')
+            ->setParameter('val', $identifier)
+            ->getQuery()
+            ->getOneOrNullResult();
+    }
 }