src/Controller/SecurityController.php line 166

Open in your IDE?
  1. <?php
  3. namespace App\Controller;
  5. use App\Entity\Suggestion;
  6. use App\Entity\User;
  7. use App\Entity\BioAuth;
  8. use App\Entity\BioAuthHistory;
  9. use App\Form\UserType;
  10. use App\Form\SuggestionType;
  11. use App\Repository\UserRepository;
  12. use App\Repository\BioAuthRepository;
  13. use App\Repository\ApplicationRepository;
  14. use App\Repository\BioAuthHistoryRepository; 
  15. use App\Repository\CheckQrRepository;
  16. use App\Repository\SuggestionRepository;
  17. use Symfony\Component\HttpFoundation\JsonResponse;
  18. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  19. use Symfony\Component\HttpFoundation\Response;
  20. use Symfony\Component\HttpFoundation\Request;
  21. use Symfony\Component\Routing\Annotation\Route;
  22. use Symfony\Component\Filesystem\Filesystem;
  23. use Symfony\Component\Security\Http\Authentication\AuthenticationUtils;
  24. use Google\Auth\Credentials\ServiceAccountCredentials;
  25. Use Google\Auth\HttpHandler\HttpHandlerFactory;
  27. class SecurityController extends AbstractController
  28. {
  29.     /**
  30.      * @Route("/login", name="app_login")
  31.      */
  32.     public function index(Request $request, AuthenticationUtils $authenticationUtils, UserRepository $userRepo): Response
  33.     {
  34.         $login = $request->get('_username');
  35.         $pass = $request->get('_password');
  36.         $msg = "";
  38.         if($login)
  39.         {        
  40.             $usr = $userRepo->findOneBy(['username'=>$login]);
  41.             if(!empty($usr))
  42.             {
  43.                 if (password_verify($pass, $usr->getPassword())) 
  44.                 {
  45.                     $session = $request->getSession();
  46.                     $session->set('usrLogin', $usr->getUsername());
  47.                     $session->set('usrFirstName', $usr->getFirstName());
  48.                     $session->set('usrSurName', $usr->getSurName());
  49.                     $session->set('usrFullName', $usr->getSurName()." ".$usr->getFirstName());
  50.                     $session->set('usrPhone', $usr->getPhone());
  51.                     $session->set('usrEmail', $usr->getEmail());
  52.                     $session->set('usrOrganization', $usr->getOrganization());
  53.                     //$session->set('usrIsBioAuth', $usr->getIsBioAuth());
  54.                     
  55.                     if($usr->getIsBioAuth()==2)//Pending bio verification
  56.                     {
  57.                         return $this->redirectToRoute('dashboard_double_auth_verification');
  58.                     }    
  60.                     if($usr->getIsBioAuth()==0 or $usr->getIsBioAuth() == null)//Pending bio subscription
  61.                     {
  62.                         return $this->redirectToRoute('dashboard_double_auth_subscription');
  63.                     }
  65.                     return $this->redirectToRoute('dashboard_double_auth_verification');
  66.                     
  67.                 }else{
  68.                     $msg = "Wrong password...";
  69.                 }
  70.             }else{
  71.                 $msg = "Wrong login...";
  72.             }
  73.         }
  74.         if($msg)
  75.         {
  76.             $this->get('session')->getFlashBag()->add('danger', $msg);                    
  77.         }
  78.         // get the login error if there is one
  79.          $error = $authenticationUtils->getLastAuthenticationError();
  81.          // last username entered by the user
  82.          $lastUsername = $authenticationUtils->getLastUsername();
  83.         //dump($authenticationUtils);
  84.           return $this->render('security/index.html.twig', [
  85.              'controller_name' => 'LoginController',
  86.              'last_username' => $lastUsername,
  87.              'error'         => $error,
  88.              'msg'         => $msg,
  89.           ]);
  91.         /*  
  92.         return $this->render('security/index.html.twig', [
  93.             'controller_name' => 'SecurityController',
  94.         ]);
  95.         */
  96.     }
  97.    
  98.     /**
  99.      * @Route("/home", name="app_home")
  100.      */
  101.     public function homePage(Request $request, SuggestionRepository $suggestionRepo, UserRepository $userRepo): Response
  102.     {
  103.         $session = $request->getSession();
  104.         $login = $session->get('usrLogin');
  106.         $suggestion = new Suggestion();
  107.         $form = $this->createForm(SuggestionType::class, $suggestion);
  108.         $form->handleRequest($request);
  110.         if($login)
  111.         {
  112.             $usr = $userRepo->findOneBy(['username'=>$login]);
  113.             if(!empty($usr))
  114.             {
  115.                 
  116.                     $session = $request->getSession();
  117.                     $session->set('usrLogin', $usr->getUsername());
  118.                     $session->set('usrFirstName', $usr->getFirstName());
  119.                     $session->set('usrFullName', $usr->getSurName()." ".$usr->getFirstName());
  120.                     $session->set('usrSurName', $usr->getSurName());
  121.                     $session->set('usrPhone', $usr->getPhone());
  122.                     $session->set('usrEmail', $usr->getEmail());
  123.                     $session->set('usrOrganization', $usr->getOrganization());
  124.                     //$session->set('usrIsBioAuth', $usr->getIsBioAuth());
  125.                     
  126.                     if($usr->getIsBioAuth()==2)//Pending bio verification
  127.                     {
  128.                         return $this->redirectToRoute('dashboard_double_auth_verification');
  129.                     }    
  131.                     if($usr->getIsBioAuth()==0 or $usr->getIsBioAuth() == null)//Pending bio subscription
  132.                     {
  133.                         return $this->redirectToRoute('dashboard_double_auth_subscription');
  134.                     }
  136.                     if ($form->isSubmitted() && $form->isValid()) 
  137.                     {
  138.                         $suggestion->setUser($usr);
  139.                         $suggestionRepository->add($suggestion, true);
  140.                         $this->get('session')->getFlashBag()->add('success', "Succesfully saved..."); 
  141.                 
  142.                         //return $this->redirectToRoute('app_suggestion_index', [], Response::HTTP_SEE_OTHER);
  143.                     }
  144.             }else
  145.             {
  146.                 $this->get('session')->getFlashBag()->add('danger', "An error occurred during the operation, try again..."); 
  147.                 return $this->redirectToRoute('app_login');
  148.             }
  149.         }else
  150.         {    
  151.             $this->get('session')->getFlashBag()->add('danger', "Your session has expired, log in..."); 
  152.             return $this->redirectToRoute('app_login');
  153.         }
  154.         
  155.         return $this->renderForm('security/home.html.twig', 
  156.         [
  157.             'userName' => $session->get('usrFullName'),
  158.             'suggestion' => $suggestion,
  159.             'form' => $form,
  160.         ]);
  161.     }
  163.     /**
  164.      * @Route("/enroll", name="app_enroll")
  165.      */
  166.     public function enroll(Request $request, UserRepository $userRepo): Response
  167.     {   
  168.         $user = new User();
  169.         $form = $this->createForm(UserType::class, $user);
  170.         $form->handleRequest($request);
  172.         if ($form->isSubmitted() && $form->isValid()) 
  173.         {
  174.             $userRepo->add($user, true);
  176.             $this->get('session')->getFlashBag()->add('success', "Your account has been successfully created...");
  177.                     
  178.             return $this->redirectToRoute('app_login', [], Response::HTTP_SEE_OTHER);
  179.         }
  181.         return $this->renderForm('security/enroll.html.twig', [
  182.             'user' => $user,
  183.             'form' => $form,
  184.         ]);
  185.         
  186.     }
  187.     
  188.     /**
  189.      * Subscribe IDO to an account for Bio validation OK
  190.      *
  191.      * @Route("/double/auth/subscription", name="dashboard_double_auth_subscription", methods={"GET", "POST"})
  192.      * 
  193.      */
  194.     public function doubleAuthSubscriptionAction(Request $request, BioAuthRepository $bioAuthRepository,  CheckQrRepository $checkQrRepository,  ApplicationRepository $applicationRepository, UserRepository $userRepo): Response
  195.     {
  196.         $session = $request->getSession();
  197.         $lgin = $session->get('usrLogin');
  198.         $fullName = $session->get('usrFullName');
  199.         
  200.        // $session->set('usrFullName', $usr->getUsername()." ".$usr->getFirstName());
  201.         if($_POST)
  202.         {
  203.             $action = $request->get("action");
  204.             if($action=="preenroler")
  205.             {
  206.                 $civilite = $request->get("civilite");
  207.                 $nom = $request->get("nom");
  208.                 $prenom = $request->get("prenom");
  209.                 $dateNaissance = $request->get("dateNaissance");
  210.                 $lieuNaissance = $request->get("lieuNaissance");
  211.                 $nationalite = $request->get("nationalite");
  212.                 $numeroTelephone = $request->get("numeroTelephone");
  213.                 $adresseEmail = $request->get("adresseEmail");
  214.                 
  215.                 $curl = curl_init();
  217.                 curl_setopt_array($curl, array(
  218.                         CURLOPT_URL => $this->getParameter('kyvala_host').'/person/pre/enrolement/new/json',
  219.                         CURLOPT_RETURNTRANSFER => true,
  220.                         CURLOPT_ENCODING => '',
  221.                         CURLOPT_MAXREDIRS => 10,
  222.                         CURLOPT_TIMEOUT => 0,
  223.                         CURLOPT_FOLLOWLOCATION => true,
  224.                         CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  225.                         CURLOPT_CUSTOMREQUEST => 'POST',
  226.                         CURLOPT_POSTFIELDS => array('civilite' => 'Mme/Mr','nom' => $nom,'prenom' =>$prenom,'dateNaissance' => $dateNaissance,'lieuNaissance' => $lieuNaissance ,'nationalite' => $nationalite,'numeroTelephone' => $numeroTelephone,'adresseEmail' => $adresseEmail ),
  227.                 ));
  229.                 $response = curl_exec($curl);
  231.                 $response = json_decode($response,true);
  232.                 curl_close($curl);
  233.                 
  234.                 if($response['Etat']=="SUCCESS")
  235.                 {
  236.                     return $this->render('security/kyvala-subscription.html.twig', array(
  237.                         'isModal'=>3,// pour le préenrolement succes
  238.                         'message'=>$response['Message'],
  239.                         'reference'=>$response['sqr'],
  240.                         'statut'=>$response['Etat']
  241.                     ));  
  242.                 }else
  243.                 {
  244.                     // erreur de traitement
  245.                     $this->get('session')->getFlashBag()->add('warning', "An error occurred while saving. Please try again...");
  246.                     
  247.                 }
  248.             }elseif($action=="souscrire")
  249.             {
  250.                 $ref1 = $request->get("ref1");
  251.                 $ref2 = $request->get("ref2");
  252.                 $ref3 = $request->get("ref3");
  254.                 $reference = $ref1."-". $ref2."-". $ref3;
  255.                 $identifiant = $session->get('usrLogin');;
  256.                 $appKey = $this->getParameter('token_key');
  258.                 if (!empty($identifiant) && !empty($reference) && !empty($appKey)) 
  259.                 {
  260.                     $application = $applicationRepository->findOneBy(['applicationPass'=>$appKey]);
  261.                     if($application)
  262.                     {
  263.                         $checkQr = $checkQrRepository->findOneBy(['numero'=>$reference]);
  264.                         //$person = $personRepository->findOneBySqr($reference);
  265.                         if($checkQr)
  266.                         {
  267.                             $userToActivate = $bioAuthRepository->findOneBy(['application'=>$application, 'identification'=>$identifiant]);
  268.                             if(!$userToActivate)
  269.                             {
  270.                                 $bioAuth = new BioAuth();
  271.                                 
  272.                                 $bioAuth->setIdentification($identifiant);
  273.                                 $bioAuth->SetUserReference($checkQr);
  274.                                 $bioAuth->setApplication($application);
  275.                                 
  276.                                 $bioAuthRepository->add($bioAuth, false);
  277.                                 /*
  278.                                 $return = array(
  279.                                     'Etat' => 'SUCCESS',
  280.                                     'Message' => "Double authentification configurée avec succès sur ce compte...",
  281.                                     'civility'=>$checkQr->getPersonCivil()[0]->getCivility(),
  282.                                     'firstName'=>$checkQr->getPersonCivil()[0]->getFirstName(),
  283.                                     'lastName'=>$checkQr->getPersonCivil()[0]->getLastName(),
  284.                                     'selfie_link'=>"uploads/kyvala/enrolment/".$checkQr->getPersonBiometrics()[0]->getFace(),
  285.                                     //'sqr'=>$person->getCheckQr()->getNumero(),
  286.                                     //'hash'=>$person->getCheckQr()->getLibelle(),
  287.                                     //'transactionId'=>$person->getEnrolmentId(),
  288.                                     //'transactionUid'=>$person->getEnrolmentUid(),
  289.                                 );
  290.                                 */
  291.                                 
  292.                                 $acc = $userRepo->findOneby(["username"=>$identifiant]);
  293.                                 $acc->setIsBioAuth(1);//activation de la double auth                                    
  294.                                 $userRepo->add($acc, true);
  296.                                 return $this->render('security/kyvala-subscription.html.twig', array(
  297.                                     'isModal'=>2,// pour la souscription directe
  298.                                     'message'=>"Biometric authentication successfully configured on this account...",
  299.                                     'referece'=>$reference,
  300.                                     'statut'=>'SUCCESS',
  301.                                     'nom'=>$checkQr->getPersonCivil()[0]->fullName(),
  302.                                     'loginUser'=>$lgin,
  303.                                     'selfie_link'=>"uploads/kyvala/enrolment/".$checkQr->getPersonBiometrics()[0]->getFace(),
  304.                                 ));   
  305.                             }else
  306.                             {
  307.                                 $this->get('session')->getFlashBag()->add('warning', "Unable to continue processing. Two-factor authentication for this account is already enabled....");
  308.                             }
  309.                             
  310.                         }else
  311.                         {
  312.                             $this->get('session')->getFlashBag()->add('warning', "This IDO is not associated with any enrolled individual. Please check and try again...");
  313.                         }
  314.                     }else
  315.                     {
  316.                         $this->get('session')->getFlashBag()->add('warning', "You do not have permission for this request...");
  317.                     }
  318.                 }else
  319.                 {
  320.                     $this->get('session')->getFlashBag()->add('warning', "Missing required parameters...");
  321.                 }
  322.             }
  323.         }
  325.         return $this->render('security/kyvala-subscription.html.twig', array(
  326.             'isModal'=>1,
  327.             'loginUser'=>$lgin,
  328.             'fullName'=>$fullName
  329.         ));
  330.     }
  331.     
  332.     /**
  333.      * Initier une transaction de double véritifation sur Kyvala Poc OK
  334.      *
  335.      * @Route("/double/auth/verification", name="dashboard_double_auth_verification", methods ={"GET", "POST"})
  336.      * 
  337.      */
  338.     public function doubleAuthVerificationAction(Request $request, BioAuthHistoryRepository $bioAuthHistoryRepository, BioAuthRepository $bioAuthRepository, ApplicationRepository $applicationRepository,  CheckQrRepository $checkQrRepository): Response
  339.     {
  340.         
  341.         $session = $request->getSession();
  343.         //Get sqr and image link
  344.         $curl = curl_init();
  346.         curl_setopt_array($curl, array(
  347.             CURLOPT_URL => 'https://checktatoo.com/fr/notification/generate/qr/sqr/token',
  348.             CURLOPT_RETURNTRANSFER => true,
  349.             CURLOPT_ENCODING => '',
  350.             CURLOPT_MAXREDIRS => 10,
  351.             CURLOPT_TIMEOUT => 0,
  352.             CURLOPT_FOLLOWLOCATION => true,
  353.             CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  354.             CURLOPT_CUSTOMREQUEST => 'GET',
  355.         ));
  357.         $response = curl_exec($curl);
  359.         $response = json_decode($response,true);
  360.         curl_close($curl);
  361.         //dump($response);
  362.         if($response['Etat']=="SUCCESS")
  363.         {
  364.             /*
  365.             {
  366.                 "Etat": "SUCCESS",
  367.                 "Message": "Le qr a été généré avec succès...",
  368.                 "step": "process",
  369.                 "hash": "1BDKqdWcWw1yXPSVDadPB9Q==",
  370.                 "ref": "6159-6416-5827",
  371.                 "qrCode": "checktatoo.com/qrcode/token_authentification_qr_2024090306593077.png"
  372.             }
  373.             */
  374.             
  375.             $identifiant =  $session->get('usrLogin');// app unique identifier
  376.             $authReference = $response['ref'];//project transaction reference
  377.             $appKey = $this->getParameter('token_key');// project unique key
  379.             if (!empty($identifiant) && !empty($authReference) && !empty($appKey)) 
  380.             {
  381.                 $application = $applicationRepository->findOneBy(['applicationPass'=>$appKey]);
  382.                 if($application)
  383.                 {
  384.                     $bioAuth = $bioAuthRepository->findOneBy(['application'=>$application, 'identification'=>$identifiant]);
  386.                     if($bioAuth)
  387.                     {                                               
  388.                         try 
  389.                         {
  390.                             
  391.                             //Buffering the output
  392.                             ob_start();  
  393.                             
  394.                             //Getting configuration details 
  395.                             system('ipconfig /all');  
  396.                             
  397.                             //Storing output in a variable 
  398.                             $configdata=ob_get_contents();  
  399.                             
  400.                             // Clear the buffer  
  401.                             ob_clean();  
  402.                             
  403.                             //Extract only the physical address or Mac address from the output
  404.                             $mac = "Adresse physique";  
  405.                             //$mac = "Physical";  
  406.                             $pmac = strpos($configdata, $mac);
  407.                             
  408.                             // Get Physical Address  
  409.                             $macaddr=substr($configdata,($pmac+41),17);  
  410.                             //$macaddr=substr($configdata,($pmac+36),17); 
  411.                             
  412.                             $bioAuthHistory = new BioAuthHistory();
  414.                             $bioAuthHistory->setTransactionReference($authReference);
  415.                             $bioAuthHistory->setBioAuth($bioAuth);
  416.                             
  417.                             // get client infos
  418.                             $bioAuthHistory->setHttpRemoteIp(htmlspecialchars($request->server->get('HTTP_REMOTE_IP')));
  419.                             $bioAuthHistory->setRemotePort(htmlspecialchars($request->server->get('REMOTE_PORT')));
  420.                             $bioAuthHistory->setRemoteAdress(htmlspecialchars($request->server->get('REMOTE_ADDR')));
  421.                             $bioAuthHistory->setHttpUserAgent(htmlspecialchars($request->server->get('HTTP_USER_AGENT')));
  422.                             $bioAuthHistory->setGeoipLongitude(htmlspecialchars($request->server->get('GEOIP_LONGITUDE')));
  423.                             $bioAuthHistory->setGeoipLatitude(htmlspecialchars($request->server->get('GEOIP_LATITUDE')));
  424.                             $bioAuthHistory->setGeoipAreaCode(htmlspecialchars($request->server->get('GEOIP_AREA_CODE')));
  425.                             $bioAuthHistory->setGeoipDmaCode(htmlspecialchars($request->server->get('GEOIP_DMA_CODE')));
  426.                             $bioAuthHistory->setGeoipCity(htmlspecialchars($request->server->get('GEOIP_CITY')));
  427.                             $bioAuthHistory->setGeoipRegion(htmlspecialchars($request->server->get('GEOIP_REGION')));
  428.                             $bioAuthHistory->setGeoipCountryName(htmlspecialchars($request->server->get('GEOIP_COUNTRY_NAME')));
  429.                             $bioAuthHistory->setGeoipCountryCode(htmlspecialchars($request->server->get('GEOIP_COUNTRY_CODE')));
  430.                             $bioAuthHistory->setUniqueId(htmlspecialchars($request->server->get('UNIQUE_ID')));
  431.                             $bioAuthHistory->setMac(htmlspecialchars($macaddr));                          
  432.                             
  433.                             //Send notification to Firebase
  434.                             //if(!empty($bioAuthHistory->getBioAuth()->getUserReference()->getPersoncivil()[0]->getFirebaseToken()))
  435.                             if(!empty($bioAuthHistory->getBioAuth()->getUserReference()->getPersonAppIdentitiesUserReference()[0]->getToken()))
  436.                             {
  437.                                 $this->ParamsWithSendPushNotification($bioAuthHistory->getBioAuth()->getUserReference()->getPersonAppIdentitiesUserReference()[0]->getToken(),"Authentication request!!! ",$bioAuthHistory->getTransactionReference().": ".$bioAuthHistory->getBioAuth()->getUserReference()->getPersoncivil()[0]->fullName().", Please confirm that you wish to access your account in the space ". $bioAuthHistory->getBioAuth()->getApplication()->getName(). " from a device with the ip address : ". $bioAuthHistory->getHttpRemoteIp() ." on the ".date("d-m-Y H:i:s")." or report if it's not you.");
  438.                                 $this->ParamsWithSendPushNotification($bioAuthHistory->getBioAuth()->getUserReference()->getPersonAppIdentitiesUserReference()[0]->getToken(),"Demande d'authentification !!! ",$bioAuthHistory->getTransactionReference().": ".$bioAuthHistory->getBioAuth()->getUserReference()->getPersoncivil()[0]->fullName().", Merci de confirmer que vous souhaitez acceder à votre compte dans l'espace ". $bioAuthHistory->getBioAuth()->getApplication()->getName(). " à partir d'un périphérique ayant l'adresse ip : ". $bioAuthHistory->getHttpRemoteIp() ." le ".date("d-m-Y H:i:s")." ou signalez s'il ne s'agit pas de vous.");
  439.                             }
  440.                             
  441.                             $bioAuthHistoryRepository->add($bioAuthHistory, true);
  442.                             
  443.                             return $this->render('security/kyvala-verification.html.twig', array(
  444.                                 'Message' => "Request for biometric authentication successfully registered...",
  445.                                 'nom'=>$bioAuthHistory->getBioAuth()->getUserReference()->getPersonCivil()[0]->fullName(),
  446.                                 'selfie_link'=>"uploads/kyvala/enrolment/".$bioAuthHistory->getBioAuth()->getUserReference()->getPersonBiometrics()[0]->getFace(),
  447.                                 'Etat' => 'SUCCESS',
  448.                                 'step'=>'process',
  449.                                 'ref'=>$response['ref'],
  450.                                 'stop'=>'1',
  451.                                 'qrCode'=>$response['qrCode'],
  452.                                 'key'=>$this->getParameter('token_key')
  453.                             ));
  455.                         } catch (\Throwable $error) 
  456.                         {
  457.                             //not actions
  458.                             $fs = new Filesystem();
  459.                             //$fs->appendToFile('EventLogFiles.txt', "\r\n ".json_encode($error));
  460.                             $fs->appendToFile('EventLogFiles.txt', "\r\n ".$error);
  461.                             /*$return = array(
  462.                                 'Etat' =>'FAILED' , 
  463.                                 'Message' =>"Une erreur est survenue lors de l'opération. Veuillez essayer ultérieurement SVP", 
  464.                                 'error'=>json_encode($error),
  465.                             );*/
  466.                             $this->get('session')->getFlashBag()->add('warning', "An error occurred during the operation. Please try later...");
  467.                             return $this->redirectToRoute('app_login');
  468.                         }
  469.                         
  470.                     }else
  471.                     {
  472.                         $this->get('session')->getFlashBag()->add('warning', "Biometric authentication has not yet been configured on this account. Please follow the following steps to activate the service on your account...");
  473.                         return $this->redirectToRoute('app_login');
  474.                     }
  476.                 }else
  477.                 {
  478.                     $this->get('session')->getFlashBag()->add('warning', "You do not have permission for this request...");
  479.                     return $this->redirectToRoute('app_login');                    
  480.                 }
  482.             }else
  483.             {
  484.                 $this->get('session')->getFlashBag()->add('warning', "Missing required parameters...");
  485.                 return $this->redirectToRoute('app_login');                    
  486.             }
  487.             
  488.         }elseif($response['Etat']=="FAILED")
  489.         {
  490.             $this->get('session')->getFlashBag()->add('warning', "Unable to reach the partner's server, try again...");
  491.             return $this->redirectToRoute('app_login');
  492.         }
  493.     }
  494.     
  495.     /**
  496.      * Check Status of an existing authentification OK
  497.      *
  498.      * @Route("/check/auth/status", name="dashboard_check_auth_status", methods={"GET", "POST"})
  499.      * 
  500.      */
  501.     public function checkAuthStatusAction(Request $request, BioAuthHistoryRepository $bioAuthHistoryRepository, ApplicationRepository $applicationRepository, UserRepository $userRepo): Response
  502.     {
  503.         //$em = $this->getDoctrine()->getManager(); 
  504.         //$reference = $request->get('authReference');
  505.         //$appKey = $this->getParameter('token_key');
  507.         $authReference = $request->get("authReference");//project transaction reference
  508.         $appKey = $this->getParameter('token_key');// project unique key
  510.             if (!empty($authReference) && !empty($appKey)) 
  511.             {
  512.                 $application = $applicationRepository->findOneBy(['applicationPass'=>$appKey]);
  513.                 if($application)
  514.                 {
  515.                     $bioAuthHistory = $bioAuthHistoryRepository->findOneBy(['transactionReference'=>$authReference]);
  517.                     if($bioAuthHistory)
  518.                     {
  519.                         /*
  520.                         $return = array(
  521.                             'Etat' => 'SUCCESS',
  522.                             'Message' => "Enregistrement recupérée avec succès...",
  523.                             'authentication_status' => $bioAuthHistory->getUserAccess(),
  524.                             'transaction_reference' => $bioAuthHistory->getTransactionReference(),
  525.                             //'nom'=>$bioAuthHistory->getBioAuth()->getPerson()->fullName(),
  526.                             //'sqr'=>$bioAuthHistory->getBioAuth()->getPerson()->getCheckQr()->getNumero(),
  527.                             //'hash'=>$bioAuthHistory->getBioAuth()->getPerson()->getCheckQr()->getLibelle(),
  528.                             //'transactionId'=>$bioAuthHistory->getBioAuth()->getPerson()->getEnrolmentId(),
  529.                             //'transactionUid'=>$bioAuthHistory->getBioAuth()->getPerson()->getEnrolmentUid(),
  530.                         );*/
  532.                         switch ($bioAuthHistory->getUserAccess())
  533.                         {
  534.                             case 'GRANTED':
  535.                                 # code...
  536.                                 $identifiant = $bioAuthHistory->getBioAuth()->getIdentification();
  537.                                 $account = $userRepo->findOneby(["username"=>$identifiant]);
  538.                                 $account->setIsBioAuth(1);// on met que le bio auth est ok.                                   
  539.                                 $userRepo->add($account, true);
  540.                                 
  541.                                 $this->get('session')->getFlashBag()->add('success', "Double authentication completed successfully. Welcome ".$account->fullName());
  542.                                 break;
  543.                             case 'REJECTED':
  544.                                 # code...
  545.                                 break;                
  546.                             case 'SIGNALED':
  547.                                 # code...
  548.                                 break;                
  549.                             default:
  550.                                 # code...
  551.                                 break;
  552.                         }
  554.                         $return = array(
  555.                             'Etat' =>'SUCCESS' , 
  556.                             'Message' =>"Record successfully recovered...", 
  557.                             'auth_status'=>$bioAuthHistory->getUserAccess()
  558.                         );
  560.                     }else
  561.                     {
  562.                         $return = array(
  563.                             'Etat' =>'FAILED' , 
  564.                             'Message' =>"The reference is not associated with any pending transaction...", 
  565.                         );
  566.                     }
  568.                 }else
  569.                 {
  570.                     $return = array(
  571.                         'Etat' =>'FAILED' , 
  572.                         'Message' =>"You do not have permission for this request...", 
  573.                     );
  574.                 }
  576.             }else
  577.             {
  578.                 $return = array(
  579.                     'Etat' =>'FAILED' , 
  580.                     'Message' =>"Missing required parameters...", 
  581.                 );
  582.             }
  583.         
  584.         return new JsonResponse($return);
  585.     }
  587.     //notifications push avec paramètres OK
  588.     public function ParamsWithSendPushNotification($user_notification_token,$title,$message)
  589.     {
  590.         //https://www.youtube.com/watch?v=YHniUsrmX9Y
  591.         $fs = new Filesystem();
  593.         $credential = new ServiceAccountCredentials(
  594.             "https://www.googleapis.com/auth/firebase.messaging",
  595.             json_decode(file_get_contents
  596.             ("kyvala-45525-firebase-adminsdk-cxpp5-cf78b66d72.json"),true)
  597.         );
  599.         $token = $credential->fetchAuthToken(HttpHandlerFactory::build());
  600.         $accessToken = $token['access_token'];
  602.         $ch = curl_init("https://fcm.googleapis.com/v1/projects/kyvala-45525/messages:send");
  604.         curl_setopt($ch, CURLOPT_HTTPHEADER,[
  605.             'Content-Type: application/json',
  606.             'Authorization: ' . 'Bearer ' .$accessToken
  607.         ]);
  609.         curl_setopt($ch, CURLOPT_POSTFIELDS, '{
  610.             "message": {
  611.                 "token":"'.$user_notification_token.'",
  612.                 "notification": {
  613.                     "title":"'.$title.'",
  614.                     "body":"'.$message.'",
  615.                     "image":"http://poc.kyvala.com/uploads/TOKEN/Token-logo-avec-fond.png"
  616.                 }
  617.             }
  618.         }');
  620.         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  621.         curl_setopt($ch, CURLOPT_VERBOSE, true);
  623.         $response = curl_exec($ch);
  624.         
  625.         if (curl_errno($ch)) 
  626.         {
  627.             print "Error: " . curl_error($ch);
  628.             $fs->appendToFile('EventLogNotification.txt', "\r\n ".date("d-m-Y H:i:s")." : deviceToken :".$user_notification_token.", Title: ".$title.", Notification: ".$message.", Error:  ".json_encode(curl_error($ch)));
  629.             exit();
  630.         }else
  631.         {
  632.             $json = json_decode($response, true);
  633.         }
  635.         // Show me the result
  636.         curl_close($ch);
  637.         //dump($season_data);
  638.         
  639.         $fs->appendToFile('EventLogNotification.txt', "\r\n ".date("d-m-Y H:i:s")." : DeviceToken :".$user_notification_token.", Title: ".$title.", Notification: ".$message.", Retours: ".json_encode($response));
  640.         // return a JSON object to caller
  641.         return $json;
  642.     }
  644. }