getAuth();
$acl = $request->getAcl();
// Check installation completion progress.
$settings = $settingsRepo->readSettings();
if (!$settings->isSetupComplete()) {
$num_users = (int)$em->createQuery(
<<<'DQL'
SELECT COUNT(u.id) FROM App\Entity\User u
DQL
)->getSingleScalarResult();
if (0 === $num_users) {
return $response->withRedirect($request->getRouter()->named('setup:index'));
}
}
if ($auth->isLoggedIn()) {
return $response->withRedirect($request->getRouter()->named('dashboard'));
}
$flash = $request->getFlash();
if ($request->isPost()) {
try {
$rateLimit->checkRequestRateLimit($request, 'login', 30, 5);
} catch (RateLimitExceededException $e) {
$flash->addMessage(
sprintf(
'%s
%s',
__('Too many login attempts'),
__('You have attempted to log in too many times. Please wait 30 seconds and try again.')
),
Flash::ERROR
);
return $response->withRedirect($request->getUri()->getPath());
}
$user = $auth->authenticate($request->getParam('username'), $request->getParam('password'));
if ($user instanceof Entity\User) {
// If user selects "remember me", extend the cookie/session lifetime.
$session = $request->getSession();
if ($session instanceof SessionCookiePersistenceInterface) {
$rememberMe = (bool)$request->getParam('remember', 0);
$session->persistSessionFor(($rememberMe) ? 86400 * 14 : 0);
}
// Reload ACL permissions.
$acl->reload();
// Persist user as database entity.
$em->persist($user);
$em->flush();
// Redirect for 2FA.
if (!$auth->isLoginComplete()) {
return $response->withRedirect($request->getRouter()->named('account:login:2fa'));
}
// Redirect to complete setup if it's not completed yet.
if (!$settings->isSetupComplete()) {
$flash->addMessage(
sprintf(
'%s
%s',
__('Logged in successfully.'),
__('Complete the setup process to get started.')
),
Flash::SUCCESS
);
return $response->withRedirect($request->getRouter()->named('setup:index'));
}
$flash->addMessage(
'' . __('Logged in successfully.') . '
' . $user->getEmail(),
Flash::SUCCESS
);
$referrer = $request->getSession()->get('login_referrer');
if (!empty($referrer)) {
return $response->withRedirect($referrer);
}
return $response->withRedirect($request->getRouter()->named('dashboard'));
}
$flash->addMessage(
'' . __('Login unsuccessful') . '
' . __('Your credentials could not be verified.'),
Flash::ERROR
);
return $response->withRedirect($request->getUri());
}
return $request->getView()->renderToResponse($response, 'frontend/account/login');
}
}