Verifying the Signed Confirm Email URL

Hello I have tried a slightly different approach. I actually have created a verification system which sends a random code via email and following your reccomendation in this chapter "If you wanted to be even cooler, you could manually authenticate the user in the same way that we did earlier in our registration controller. That's totally ok and up to you." I have tried to authenticate the user:

/**
   * @Route("/verify/{user}", name="user-verify")
   */


  public function userVerify(
    User $user,
    EntityManagerInterface $em,
    Request $request,
    UserAuthenticatorInterface $userAuthenticator,
    FormLoginAuthenticator $formLoginAuthenticator,
  ) {
  
  $form = $this->createFormBuilder()
      ->add('verification', TextType::class)
      ->add('userId', HiddenType::class, [
        'data' => $user->getId()
      ])
      ->add('send', SubmitType::class)
      ->getForm();
    $form->handleRequest($request);
    
     if ($form->isSubmitted() && $form->isValid()) {
      $data = $form->getData();
      if ($data['verification'] == $user->getVerification()) {
        $user->setVerification('verified');
        $em->persist($user);
        $em->flush();
        $userAuthenticator->authenticateUser(
          $user,
          $formLoginAuthenticator,
          $request
        );
        //dd($user); -> returns $user Object
        return $this->redirectToRoute('frontend_user');
      }

My security.yaml file:

form_login:
                login_path: app_login
                check_path: app_login
                username_parameter: email
                password_parameter: password
                enable_csrf: true
                default_target_path: frontend_user
                use_referer: true
                target_path_parameter: frontend_user

After the redirection $this->getUser() returns null thus the session is not mantained, so seems that validation did not work or at least the session was not retained and I would need to send the verified user to login which is possible but not desired in my case. How can I find out what has happened during that redirection? What would be the best debugging strategy?

Hey Juan E.!

Hmm, that's a mystery! And you've asked the correct questions: how to debug / find out what happened during that redirection.

Here's what I like to do:

A) In config/packages/dev/web_profiler.yaml, you should have a intercept_redirects: false line. Change that to intercept_redirects: true.

B) Now, whenever Symfony redirects you, instead of redirecting, you will see a page that says something like "About to redirect you to http://...". But it hasn't actually redirected you.

How is that useful? Because now you can do this:

1) Click the link, which will hit this URL, submit the form and (should) authenticate the user (make sure you put your redirectToRoute() back)
2) But, instead of redirecting, it will stop and show you the message. The useful thing is that, on this screen, you will see the web debug toolbar for this page. The question is: do you see yourself as authenticated in the web debug toolbar?

The answer to this question will tell us where to look next. If you ARE authenticated (but then when you click the link to "follow the redirect" suddenly you are not authenticated), then you are "losing" authentication, probably because some data on your User object is being seen as "changed" (if you have this situation, I can tell you more - it is common if you, for some reason, implement a custom \Serializable interface on your User class, which you probably shouldn't have).

Let me know what you find out.

Cheers!

Hi I just managed to make it work using the rememberMe Handler Interface and adding this line before the redirect:

$rememberMe->createRememberMeCookie($this->getUser());

Hi, as I said in the previous reply I still get "kicked out" this is my User.php entity, I wonder if the libPhoneNumber object could be the problem.

`<?php

namespace App\Entity;

use Doctrine\Common\Collections\ArrayCollection;
use Doctrine\Common\Collections\Collection;
use Doctrine\ORM\Mapping as ORM;
use Symfony\Component\Security\Core\User\UserInterface;
use Symfony\Component\Serializer\Annotation\Groups;
use Symfony\Component\Validator\Constraints as Assert;
use Symfony\Bridge\Doctrine\Validator\Constraints\UniqueEntity;
use Adamski\Symfony\PhoneNumberBundle\Model\PhoneNumber;
use Adamski\Symfony\PhoneNumberBundle\Validator\Constraints\PhoneNumber as AssertPhoneNumber;

/**

• @ORM\Entity(repositoryClass=App\Repository\UserRepository::class)
• @UniqueEntity(fields={"email"}, message="This value is already used.")
  */
  class User implements UserInterface
  {

const REGISTERED_SUCCESFULLY = 'Se ha registrado exitosamente';
/**
 * @ORM\Id
 * @ORM\GeneratedValue
 * @ORM\Column(type="integer")
 */
private $id;

/**
 * @ORM\Column(type="string", length=180, unique=true)
 * @Groups("main")
 * 
 * @Assert\NotBlank()
 * @Assert\Email()
 */
private $email;

/**
 * @ORM\Column(type="json")
 * @Groups("main")
 *
 */
private $roles = [];

/**
 * @var string The hashed password
 * @ORM\Column(type="string", nullable=true)
 * @Assert\NotBlank()
 */
private $password;

/**
 * @ORM\Column(type="string", length=2, nullable=true)
 * @Groups("main")
 */
private $langue;

/**
 * @ORM\Column(type="string", length=255, nullable=true)
 * @Groups("main")
 * @Assert\NotBlank()
 */
private $nom;

/**
 * @ORM\Column(type="string", length=255, nullable=true)
 * @Groups("main")
 * @Assert\NotBlank()
 */
private $prenom;

/**
 * @Groups("main")
 * @AssertPhoneNumber
 * @ORM\Column(name="telephone", type="phone_number", nullable=true)
 */

private $telephone;

/**
 * @ORM\Column(type="string", length=15, nullable=true)
 * @Groups("main")
 */
private $position;

/**
 * @ORM\Column(type="datetime")
 * @Groups("main")
 */
private $date_ajout;

/**
 * @ORM\ManyToMany(targetEntity=Dates::class, inversedBy="users")
 */
private $date;

/**
 * @ORM\OneToMany(targetEntity=Reservation::class, mappedBy="user", cascade={"persist","remove"})
 */
private $reservation;

/**
 * @ORM\OneToMany(targetEntity=BlogTranslation::class, mappedBy="user", orphanRemoval=true)
 */
private $blogTranslations;

/**
 * @ORM\OneToMany(targetEntity=Document::class, mappedBy="user")
 */
private $documents;

/**
 * @ORM\OneToMany(
 *                  targetEntity=Travellers::class, 
 *                  mappedBy="user",
 *                  fetch="EXTRA_LAZY",
 *                  orphanRemoval=true,
 *                  cascade={"persist"}
 * )
 */

private $travellers;

/**
 * @ORM\Column(type="string", length=255, nullable=true)
 */
private $address;

/**
 * @ORM\Column(type="string", length=6, nullable=true)
 */
private $postcode;

/**
 * @ORM\Column(type="string", length=255, nullable=true)
 */
private $city;

/**
 * @ORM\Column(type="string", length=255, nullable=true)
 */
private $country;

/**
 * @ORM\Column(type="string", length=255, nullable=true)
 */
private $nationality;

/**
 * @ORM\Column(type="string", length=3, nullable=true)
 */
private $sizes;

/**
 * @ORM\Column(type="string", length=255, nullable=true)
 */
private $verification;

/**
 * @ORM\OneToMany(targetEntity=ReservationData::class, mappedBy="User", orphanRemoval=true)
 */
private $reservationData;

/**
 * @ORM\OneToMany(targetEntity=Codespromo::class, mappedBy="user")
 */
private $codespromos;

/**
 * @ORM\Column(type="boolean")
 */
private $isVerified = false;

public function __construct()
{
    $this->date = new ArrayCollection();
    $this->reservation = new ArrayCollection();
    $this->blogTranslations = new ArrayCollection();
    $this->documents = new ArrayCollection();
    $this->travellers = new ArrayCollection();
    $this->reservations = new ArrayCollection();
    $this->reservationData = new ArrayCollection();
    $this->codespromos = new ArrayCollection();
}

public function getId(): ?int
{
    return $this->id;
}

public function getEmail(): ?string
{
    return $this->email;
}

public function setEmail(string $email): self
{
    $this->email = $email;

    return $this;
}
/**
 * A visual identifier that represents this user.
 *
 * @see UserInterface
 */
public function getUserIdentifier(): string
{
    return (string)$this->email;
}

/**
 * @deprecated since Symfony 5.3, use getUserIdentifier instead
 *
 */
public function getUsername(): string
{
    return (string) $this->email;
}

/**
 * @see UserInterface
 */
public function getRoles(): array
{
    $roles = $this->roles;
    // guarantee every user at least has ROLE_USER
    $roles[] = 'ROLE_USER';

    return array_unique($roles);
}

public function setRoles(array $roles): self
{
    $this->roles = $roles;

    return $this;
}

/**
 * @see UserInterface
 */
public function getPassword(): string
{
    return (string) $this->password;
}

public function setPassword(string $password): self
{
    $this->password = $password;

    return $this;
}

/**
 * Returning a salt is only needed, if you are not using a modern
 * hashing algorithm (e.g. bcrypt or sodium) in your security.yaml.
 *
 * @see UserInterface
 */
public function getSalt(): ?string
{
    return null;
}

/**
 * @see UserInterface
 */
public function eraseCredentials()
{
    // If you store any temporary, sensitive data on the user, clear it here
    // $this->plainPassword = null;
}

public function getLangue(): ?string
{
    return $this->langue;
}

public function setLangue(string $langue): self
{
    $this->langue = $langue;

    return $this;
}

public function getNom(): ?string
{
    return $this->nom;
}

public function setNom(string $nom): self
{
    $this->nom = $nom;

    return $this;
}

public function getPrenom(): ?string
{
    return $this->prenom;
}

public function setPrenom(string $prenom): self
{
    $this->prenom = $prenom;

    return $this;
}

public function getTelephone(): ?PhoneNumber
{
    return $this->telephone;
}

public function setTelephone(?PhoneNumber $telephone): self
{
    $this->telephone = $telephone;

    return $this;
}

public function getPosition(): ?string
{
    return $this->position;
}

public function setPosition(?string $position): self
{
    $this->position = $position;

    return $this;
}

public function getDateAjout(): ?\DateTimeInterface
{
    return $this->date_ajout;
}

public function setDateAjout(\DateTimeInterface $date_ajout): self
{
    $this->date_ajout = $date_ajout;

    return $this;
}

/**
 * @return Collection|Dates[]
 */
public function getDate(): Collection
{
    return $this->date;
}

public function addDate(Dates $date): self
{
    if (!$this->date->contains($date)) {
        $this->date[] = $date;
    }

    return $this;
}

public function removeDate(Dates $date): self
{
    $this->date->removeElement($date);

    return $this;
}

/**
 * @return Collection|Reservations[]
 */
public function getReservation(): Collection
{
    return $this->reservation;
}

public function addReservation(Reservation $reservation): self
{
    if (!$this->reservation->contains($reservation)) {
        $this->reservation[] = $reservation;
    }

    return $this;
}

public function removeReservation(Reservation $reservation): self
{
    $this->reservation->removeElement($reservation);

    return $this;
}

/**
 * @return Collection|BlogTranslation[]
 */
public function getBlogTranslations(): Collection
{
    return $this->blogTranslations;
}

public function addBlogTranslation(BlogTranslation $blogTranslation): self
{
    if (!$this->blogTranslations->contains($blogTranslation)) {
        $this->blogTranslations[] = $blogTranslation;
        $blogTranslation->setUser($this);
    }

    return $this;
}

public function removeBlogTranslation(BlogTranslation $blogTranslation): self
{
    if ($this->blogTranslations->removeElement($blogTranslation)) {
        // set the owning side to null (unless already changed)
        if ($blogTranslation->getUser() === $this) {
            $blogTranslation->setUser(null);
        }
    }

    return $this;
}

/**
 * @return Collection|Document[]
 */
public function getDocuments(): Collection
{
    return $this->documents;
}

public function addDocument(Document $document): self
{
    if (!$this->documents->contains($document)) {
        $this->documents[] = $document;
        $document->setUser($this);
    }

    return $this;
}

public function removeDocument(Document $document): self
{
    if ($this->documents->removeElement($document)) {
        // set the owning side to null (unless already changed)
        if ($document->getUser() === $this) {
            $document->setUser(null);
        }
    }

    return $this;
}

/**
 * @return Collection|Travellers[]
 */
public function getTravellers(): Collection
{
    return $this->travellers;
}

public function addTraveller(Travellers $traveller): self
{
    if (!$this->travellers->contains($traveller)) {
        $this->travellers[] = $traveller;
        $traveller->setUser($this);
    }

    return $this;
}

public function removeTraveller(Travellers $traveller): self
{
    if ($this->travellers->removeElement($traveller)) {
        // set the owning side to null (unless already changed)
        if ($traveller->getUser() === $this) {
            $traveller->setUser(null);
        }
    }

    return $this;
}

public function __toString(): string
{
    return $this->getUserIdentifier();
}

/**
 * @return Collection|Reservation[]
 */
public function getReservations(): Collection
{
    return $this->reservation;
}

public function getAddress(): ?string
{
    return $this->address;
}

public function setAddress(?string $address): self
{
    $this->address = $address;

    return $this;
}

public function getPostcode(): ?string
{
    return $this->postcode;
}

public function setPostcode(?string $postcode): self
{
    $this->postcode = $postcode;

    return $this;
}

public function getCity(): ?string
{
    return $this->city;
}

public function setCity(?string $city): self
{
    $this->city = $city;

    return $this;
}

public function getCountry(): ?string
{
    return $this->country;
}

public function setCountry(?string $country): self
{
    $this->country = $country;

    return $this;
}

public function getNationality(): ?string
{
    return $this->nationality;
}

public function setNationality(?string $nationality): self
{
    $this->nationality = $nationality;

    return $this;
}

public function getSizes(): ?string
{
    return $this->sizes;
}

public function setSizes(?string $sizes): self
{
    $this->sizes = $sizes;

    return $this;
}

public function getVerification(): ?string
{
    return $this->verification;
}

public function setVerification(?string $verification): self
{
    $this->verification = $verification;

    return $this;
}

/**
 * @return Collection|ReservationData[]
 */
public function getReservationData(): Collection
{
    return $this->reservationData;
}

public function addReservationData(ReservationData $reservationData): self
{
    if (!$this->reservationData->contains($reservationData)) {
        $this->reservationData[] = $reservationData;
        $reservationData->setUser($this);
    }

    return $this;
}

public function removeReservationData(ReservationData $reservationData): self
{
    if ($this->reservationData->removeElement($reservationData)) {
        // set the owning side to null (unless already changed)
        if ($reservationData->getUser() === $this) {
            $reservationData->setUser(null);
        }
    }

    return $this;
}

/**
 * @return Collection|Codespromo[]
 */
public function getCodespromos(): Collection
{
    return $this->codespromos;
}

public function addCodespromo(Codespromo $codespromo): self
{
    if (!$this->codespromos->contains($codespromo)) {
        $this->codespromos[] = $codespromo;
        $codespromo->setUser($this);
    }

    return $this;
}

public function removeCodespromo(Codespromo $codespromo): self
{
    if ($this->codespromos->removeElement($codespromo)) {
        // set the owning side to null (unless already changed)
        if ($codespromo->getUser() === $this) {
            $codespromo->setUser(null);
        }
    }

    return $this;
}

public function getIsVerified(): ?bool
{
    return $this->isVerified;
}

public function setIsVerified(bool $isVerified): self
{
    $this->isVerified = $isVerified;

    return $this;
}

}`

Hi thank you, I have proceeded following your indications and so far I find my self in the place we expected. By preventing direct redirection I got to that "intermediate" page and the user was still logged in, but after redirection it disappeared. Since the project I am managing "inherits" many elements from a former project I will clean up the data model of the user class and then test again, if I get no progress I may send here the User.php entity class with the hope you may find something I couldn't, I will try tomorrow and whatever the outcome I will post it here. Thanks so much.

Hey Juan!

I see that you got this working, I just wanted to apologize for not replying - I'm not sure how I lost this message! Overall, your solution is probably fine. If you'd like to learn more about the underlying issue and solution, you can read about it on this thread: https://symfonycasts.com/sc...

Cheers!

Hi,
How to translate $e->getReason() ? I don't see any domain in debug bar.

Thank you.

Hey Ruslan,

I think you need to translate the exact text if the error is from core Symfony. If the error message is your custom - you can use a translation message key, translate it in translation files, and use the translator in that spot to translate.

I hope this helps!

Cheers!

Hi Victor,
In this tutorial, we have changed Error messages for Login form (lesson 10) in translations\security.en.yaml. As I understand "security" is domain and I can see it in debug bar "Translation".
$e->getReason() is from VerifyEmailExceptionInterface. - but here I miss understand how to translate (I mean translation file name)

Thank you.

Looks like I understand my fault.
in this code I need to pass $error
-----
} catch (VerifyEmailExceptionInterface $e){
$this->addFlash('error', $e->getReason());

return $this->redirectToRoute('app_register');
}
-----

and in twig use the same construction like in login.html.twig.
<div class="alert alert-danger">{{ error.messageKey|trans(error.messageData, 'security') }}</div>

Am I right?

Hey Ruslan,

I'm not sure you can pass the error object, IIRC you can only pass string to the addFlash() method. So, either you need to translate the message in PHP using trans() method before pass the string to the addFlash(), or you can pass the untranslated string to the addFlash() and translate it later in the template, i.e. "<div class="alert alert-success">{{ flash|trans }}</div>" as you mentioned, but yeah, if the message requires some messageData - it you do need to pass it into the template somehow, so probably better to translate in PHP where you have access to the object.

But if it's possible to pass the object - yeah, you can try your solution as well then. But you would need one more check in the template - you would need to know if you passed a string or an object and so render it a bit differently.

Cheers!