Edit file

File name : PasswordResetController.php

Content :

<?php

/*
 * This file is part of the Kimai time-tracking app.
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

namespace App\Controller\Security;

use App\Configuration\SystemConfiguration;
use App\Controller\AbstractController;
use App\Entity\User;
use App\Event\EmailEvent;
use App\Event\EmailPasswordResetEvent;
use App\Form\PasswordResetForm;
use App\User\LoginManager;
use App\User\UserService;
use DateTime;
use Symfony\Bridge\Twig\Mime\TemplatedEmail;
use Symfony\Component\Form\FormInterface;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\Mime\Address;
use Symfony\Component\Mime\Email;
use Symfony\Component\Routing\Annotation\Route;
use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
use Symfony\Contracts\EventDispatcher\EventDispatcherInterface;

/**
 * @Route(path="/resetting")
 */
final class PasswordResetController extends AbstractController
{
    private $eventDispatcher;
    private $userService;
    private $configuration;

public function __construct(EventDispatcherInterface $eventDispatcher, UserService $userService, SystemConfiguration $configuration)
    {
        $this->eventDispatcher = $eventDispatcher;
        $this->userService = $userService;
        $this->configuration = $configuration;
    }

/**
     * Request reset user password: show form.
     *
     * @Route(path="/request", name="fos_user_resetting_request", methods={"GET"})
     */
    public function requestAction(): Response
    {
        if (!$this->configuration->isPasswordResetActive()) {
            throw $this->createNotFoundException();
        }

return $this->render('security/password-reset/request.html.twig');
    }

/**
     * Request reset user password: submit form and send email.
     *
     * @Route(path="/send-email", name="fos_user_resetting_send_email", methods={"POST"})
     */
    public function sendEmailAction(Request $request): Response
    {
        if (!$this->configuration->isPasswordResetActive()) {
            throw $this->createNotFoundException();
        }

$username = $request->request->get('username');
        $user = $this->userService->findUserByUsernameOrEmail($username);

if (null !== $user && !$user->isPasswordRequestNonExpired($this->configuration->getPasswordResetRetryLifetime())) {
            if (!$user->isInternalUser()) {
                throw $this->createAccessDeniedException(
                    sprintf('The user "%s" tried to reset the password, but it is registered as "%s" auth-type.', $user->getUsername(), $user->getAuth())
                );
            }

if (null === $user->getConfirmationToken()) {
                $user->setConfirmationToken($this->userService->generateSecurityToken());
            }

$mail = $this->generateResettingEmailMessage($user);
            $event = new EmailPasswordResetEvent($user, $mail);
            $this->eventDispatcher->dispatch($event);

// this will finally send the email
            $this->eventDispatcher->dispatch(new EmailEvent($event->getEmail()));

$user->setPasswordRequestedAt(new DateTime());
            $this->userService->updateUser($user);
        }

return $this->redirectToRoute('fos_user_resetting_check_email', ['username' => $username]);
    }

/**
     * Tell the user to check his email provider.
     *
     * @Route(path="/check-email", name="fos_user_resetting_check_email", methods={"GET"})
     */
    public function checkEmailAction(Request $request): Response
    {
        if (!$this->configuration->isPasswordResetActive()) {
            throw $this->createNotFoundException();
        }

$username = $request->query->get('username');

if (empty($username)) {
            // the user does not come from the sendEmail action
            return $this->redirectToRoute('fos_user_resetting_request');
        }

return $this->render('security/password-reset/check_email.html.twig', [
            'tokenLifetime' => ceil($this->configuration->getPasswordResetRetryLifetime() / 3600),
        ]);
    }

/**
     * Reset user password.
     *
     * @Route(path="/reset/{token}", name="fos_user_resetting_reset", methods={"GET", "POST"})
     */
    public function resetAction(Request $request, LoginManager $loginManager, ?string $token): Response
    {
        if (!$this->configuration->isPasswordResetActive()) {
            throw $this->createNotFoundException();
        }

$user = $this->userService->findUserByConfirmationToken($token);

if (null === $user) {
            return $this->redirectToRoute('fos_user_security_login');
        }

if (!$user->isPasswordRequestNonExpired($this->configuration->getPasswordResetTokenLifetime())) {
            return $this->redirectToRoute('fos_user_resetting_request');
        }

$form = $this->createResetForm();
        $form->setData($user);

$form->handleRequest($request);

if ($form->isSubmitted() && $form->isValid()) {
            $user->setConfirmationToken(null);
            $user->setPasswordRequestedAt(null);
            $user->setEnabled(true);

$this->userService->updateUser($user);

$response = $this->redirectToRoute('my_profile');
            $loginManager->logInUser($user, $response);

return $response;
        }

return $this->render('security/password-reset/reset.html.twig', [
            'token' => $token,
            'form' => $form->createView(),
        ]);
    }

private function createResetForm(): FormInterface
    {
        $options = ['validation_groups' => ['ResetPassword', 'Default']];

return $this->createFormBuilder()->create('fos_user_resetting_form', PasswordResetForm::class, $options)->getForm();
    }

private function generateResettingEmailMessage(User $user): Email
    {
        $username = $user->getDisplayName();
        $language = $user->getLanguage();

$url = $this->generateUrl('fos_user_resetting_reset', ['token' => $user->getConfirmationToken()], UrlGeneratorInterface::ABSOLUTE_URL);

return (new TemplatedEmail())
            ->to(new Address($user->getEmail()))
            ->subject(
                $this->getTranslator()->trans('reset.subject', ['%username%' => $username], 'email', $language)
            )
            ->htmlTemplate('emails/password-reset.html.twig')
            ->context([
                'user' => $user,
                'username' => $username,
                'confirmationUrl' => $url,
            ])
        ;
    }
}

TERMOREK-IT SHELL 403

Edit file