src/Controller/AuthenticationController.php line 227

Open in your IDE?
  1. <?php
  3. namespace App\Controller;
  5. use Symfony\Bundle\FrameworkBundle\Controller\Controller;//A voir
  6. use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken;//A voir
  7. use Symfony\Component\HttpFoundation\Cookie;//A voir
  8. use Symfony\Component\HttpFoundation\Response;//A voir
  9. use Symfony\Component\Security\Core\Exception\UsernameNotFoundException;//A voir
  10. use Symfony\Component\Security\Http\Event\InteractiveLoginEvent;//A voir
  11. use Sensio\Bundle\FrameworkExtraBundle\Configuration\Security;//A voir
  12. use Symfony\Component\HttpFoundation\JsonResponse;//A voir
  13. use App\Entity\Utilisateur;
  14. use App\Entity\Service;
  15. use App\Entity\Parametre;
  16. use Symfony\Component\HttpFoundation\RedirectResponse;//A voir
  17. use Symfony\Component\HttpFoundation\Request;
  18. use Symfony\Contracts\Translation\TranslatorInterface;
  19. use Symfony\Component\EventDispatcher\EventDispatcher;
  20. use App\Repository\ATBGRepository;
  21. use App\Repository\AbbreviationLangueRepository;
  22. use App\Repository\AbbreviationRepository;
  23. use App\Repository\ActualiteRepository;
  24. use App\Repository\AntibiotiqueRepository;
  25. use App\Repository\CasCliniquesCategorieRepository;
  26. use App\Repository\CasCliniquesQuestionRepository;
  27. use App\Repository\CasCliniquesReponseRepository;
  28. use App\Repository\CasCliniquesReponseUtilisateurRepository;
  29. use App\Repository\CelluleRepository;
  30. use App\Repository\CelluleTitreCompletRepository;
  31. use App\Repository\CoAntibiotiqueCalculRepository;
  32. use App\Repository\ContenuRepository;
  33. use App\Repository\EtablissementRepository;
  34. use App\Repository\FamilleAntibiotiqueRepository;
  35. use App\Repository\FavorisRepository;
  36. use App\Repository\InformationHopitalRepository;
  37. use App\Repository\InformationReferenceRepository;
  38. use App\Repository\InformationRepository;
  39. use App\Repository\IntervenantSessioneppRepository;
  40. use App\Repository\LangueRepository;
  41. use App\Repository\MicroorganismeRepository;
  42. use App\Repository\NoteRepository;
  43. use App\Repository\ParametreRepository;
  44. use App\Repository\PaysRepository;
  45. use App\Repository\PersonnalisationRepository;
  46. use App\Repository\PersonnalisationSpectreRepository;
  47. use App\Repository\QualiteRepository;
  48. use App\Repository\ReferenceHopitalRepository;
  49. use App\Repository\ReferenceRepository;
  50. use App\Repository\SessioneppRepository;
  51. use App\Repository\SessioneppUrlRepository;
  52. use App\Repository\SpecialiteRepository;
  53. use App\Repository\ServiceRepository;
  54. use App\Repository\SessionConnexionRepository;
  55. use App\Repository\SpectreRepository;
  56. use App\Repository\TicketPatientRepository;
  57. use App\Repository\TypeInformationRepository;
  58. use App\Repository\UtilisateurRepository;
  59. use App\Repository\VersionRepository;
  60. use Sensio\Bundle\FrameworkExtraBundle\Configuration\IsGranted;
  61. use App\Service\InformationsComtpeService;
  62. use App\Service\ContentHandler;
  63. use App\Service\EncryptionService;
  64. use Symfony\Component\Mailer\MailerInterface;
  65. use Symfony\Bridge\Twig\Mime\TemplatedEmail;
  66. use Symfony\Component\Mime\Address;
  67. use AuthenticationBundle\Security\User\WebserviceUser;
  68. use \DateTime;
  71. class AuthenticationController extends ATBGController
  72. {
  73.     private $dispatcher;    
  74.     private $mailer;
  76.     public function __construct(
  77.         private AbbreviationLangueRepository $abbreviationLangueRepo,
  78.         private AbbreviationRepository $abbreviationRepo,
  79.         private ActualiteRepository $actualiteRepo,
  80.         private AntibiotiqueRepository $antibiotiqueRepo,
  81.         private CasCliniquesCategorieRepository $casCliniquesCategorieRepo,
  82.         private CasCliniquesQuestionRepository $casCliniquesQuestionRepo,
  83.         private CasCliniquesReponseRepository $casCliniquesReponseRepo,
  84.         private CasCliniquesReponseUtilisateurRepository $casCliniquesReponseUtilisateurRepo,
  85.         private CelluleRepository $celluleRepo,
  86.         private CelluleTitreCompletRepository $celluleTitreCompletRepo,
  87.         private CoAntibiotiqueCalculRepository $coAntibiotiqueCalculRepo,
  88.         private ContenuRepository $contenuRepo,
  89.         private EtablissementRepository $etablissementRepo,
  90.         private FamilleAntibiotiqueRepository $familleAntibiotiqueRepository,
  91.         private FavorisRepository $favorisRepo,
  92.         private InformationHopitalRepository $informationHopitalRepo,
  93.         private InformationReferenceRepository $informationReferenceRepo,
  94.         private InformationRepository $informationRepo,
  95.         private IntervenantSessioneppRepository $intervenantSessioneppRepo,
  96.         private LangueRepository $langueRepo,
  97.         private MicroorganismeRepository $microorganismeRepo,
  98.         private NoteRepository $noteRepo,
  99.         private ParametreRepository $parametreRepo,
  100.         private PaysRepository $paysRepo,
  101.         private PersonnalisationRepository $personnalisationRepo,
  102.         private PersonnalisationSpectreRepository $personnalisationSpectreRepo,
  103.         private QualiteRepository $qualiteRepo,
  104.         private ReferenceHopitalRepository $referenceHopitalRepo,
  105.         private ReferenceRepository $referenceRepo,
  106.         private ServiceRepository $serviceRepo,
  107.         private SessionConnexionRepository $sessionConnexionRepo,
  108.         private SessioneppRepository $sessioneppRepo,
  109.         private SessioneppUrlRepository $sessioneppUrlRepo,
  110.         private SpecialiteRepository $specialiteRepo,
  111.         private SpectreRepository $spectreRepo,
  112.         private TicketPatientRepository $ticketPatientRepo,
  113.         private TypeInformationRepository $typeInformationRepo,
  114.         private UtilisateurRepository $utilisateurRepo,
  115.         private VersionRepository $versionRepo,
  116.         private TranslatorInterface $translator,
  117.         private EncryptionService $encryptService,
  118.         private LangController $langService,
  119.         MailerInterface $mailer
  121.     ){
  122.         $this->dispatcher = new EventDispatcher();
  123.         $this->mailer = $mailer;
  124.     }
  125.     
  126.     private function logUserAndRedirect($username, $roles, Request $request)
  127.     {
  128.         $firewall = 'main';
  129.         
  130.         $token = new UsernamePasswordToken($username, null, $firewall, $roles);
  131.         
  132.         $this->get("security.token_storage")->setToken($token);
  134.         $event = new InteractiveLoginEvent($request, $token);
  136.         //$this->dispatcher->dispatch("security.interactive_login", $event);
  137.         $this->dispatcher->dispatch($event);
  139.         if ($request->getSession()->get('_security.main.target_path'))
  140.         {
  141.             return $this->redirect($request->getSession()->get('_security.main.target_path'));
  142.         }
  143.         else
  144.         {
  145.             $returned = parent::suppression_parametres_get($request);
  146.             if ($returned != null) 
  147.             {
  148.                 return $returned;
  149.             }
  150.             else
  151.             {
  152.                 return $this->redirectToRoute('actualites_home');
  153.             }
  154.         }
  155.     }
  157.     // les connexions ADADA et BOUTIQUE ne sont pas incluses dans les entités. Les connexions webedition et webhopital font appels à du code SQL natif sans entityRepository
  158.     private function connexionWebHopital(Request $request, &$error, &$warning, $vidal = false)
  159.     {
  160.         $roles = array('ROLE_AUTHENTICATED');
  162.         $session = $request->getSession();
  163.         $ip_client = $request->getClientIp();
  164.         $connexionReferer = false;
  165.         $referer = $request->headers->get('referer');
  166.         
  167.         if ($referer && !preg_match("/".str_replace("/", "\/", $request->getHttpHost())."/", $referer))
  168.         {
  169.             $ip_client = $referer;
  170.             $connexionReferer = true;
  171.             $url_referer = $request->getSession()->get('_security.main.target_path');
  172.             $session->invalidate(3600);
  173.             $session->set('_security.main.target_path',$url_referer);
  174.         }
  175.         // echo $ip_client;
  176.         while ($ip_client != null) 
  177.         {
  178.             $adada_connection = $this->get('doctrine')->getConnection('adada');
  179.             $sql = "" .
  180.                 "SELECT count(client_ip_ip) as nbips, client_vidal_token,client_vidal, client_nom, client_id, client_date_fin_installation, client_ref_nom, client_ref_prenom,client_cbip
  181.                  FROM ADADA_CLIENT 
  182.                  LEFT JOIN ADADA_CLIENT_IP on ADADA_CLIENT.client_id=ADADA_CLIENT_IP.client_ip_id_client 
  183.                  WHERE (ADADA_CLIENT_IP.client_ip_ip = :client_ip1 
  184.                  OR  IF(REPLACE(ADADA_CLIENT_IP.client_ip_ip, '.*', '') <> ADADA_CLIENT_IP.client_ip_ip,:client_ip2 like CONCAT(REPLACE(ADADA_CLIENT_IP.client_ip_ip, '.*', ''), '%'),''))
  185.                  AND client_produit like '%hopital_web%'";
  187.             if ($vidal && !$request->query->get('code'))
  188.             {
  189.                 $error[] = $this->translator->trans("authentification_lien_vidal_non_valide");
  190.                 $ip_client = null;
  191.             }
  192.             else
  193.             {
  194.                 if ($vidal)
  195.                 {
  196.                     $current_time = new \DateTime();
  197.                     $vidal_code_1 = $current_time->format('dmYH');
  198.                     $current_time->sub(new \DateInterval('P1H'));
  199.                     $vidal_code_2 = $current_time->format('dmYH');
  200.                     $current_time->add(new \DateInterval('P2H'));
  201.                     $vidal_code_3 = $current_time->format('dmYH');
  203.                     $sql .= ' and client_vidal = 1 and (md5(concat(client_vidal_token, :vidal_code_1)) = :code1 or md5(concat(client_vidal_token, :vidal_code_2)) = :code2 or md5(concat(client_vidal_token, :vidal_code_3)) = :code3)';
  204.                 }
  205.                 $stmt = $adada_connection->prepare($sql);
  206.                 $stmt->bindValue('client_ip1', $ip_client);
  207.                 $stmt->bindValue('client_ip2', $ip_client);
  208.                 if ($vidal)
  209.                 {
  210.                     $stmt->bindValue('vidal_code_1', $vidal_code_1);
  211.                     $stmt->bindValue('code1', $request->query->get('code'));
  212.                     $stmt->bindValue('vidal_code_2', $vidal_code_2);
  213.                     $stmt->bindValue('code2', $request->query->get('code'));
  214.                     $stmt->bindValue('vidal_code_3', $vidal_code_3);
  215.                     $stmt->bindValue('code3', $request->query->get('code'));
  216.                 }
  217.                 $stmt->execute();
  218.                 // dump($stmt);
  219.                 // dd($users);
  220.                 $users = $stmt->execute()->fetchAll();
  221.                 $user = $users[0];
  223.                 $nbips = $user['nbips'];
  224.             
  226.                 $pays_code = $this->parametreRepo->findParametrePaysCode($user['client_id']);
  227.                 if($pays_code != null && $pays_code != "") $this->langService->setLocale($request, strtolower(substr($pays_code, 0, 2)));
  228.                 else $this->langService->setLocale($request, 'fr');
  230.                 if($nbips>0)
  231.                 {
  232.                     //Une seule adresse IP, on redirige sans vérifier la clef
  233.                     if($nbips==1)
  234.                     { 
  235.                         $session->set('titre_hopital',    $user['client_nom']);
  236.                         $session->set('client_id_adada',  $user['client_id']);
  237.                         $session->set('client_vidal',  $user['client_vidal']);
  238.                         $session->set('client_vidal_token',  $user['client_vidal_token']);
  239.                         $session->set('client_cbip',  $user['client_cbip']);
  241.                         $this->checkExpirationDateWebHopital($user['client_date_fin_installation'], $error, $warning);
  242.                         $this->checkCodeFiness($user['client_id'], $error, $warning, $request);
  243.                         $ip_client = null;
  244.                     }
  245.                     else
  246.                     {
  247.                         //aucune clef passée dans l'URL
  248.                         if (!$request->query->get('cle_url') && !$session->get('cle_url'))
  249.                         {
  250.                             $error[] = $this->translator->trans("authentification_cle_authentification_pas_presente");
  251.                             $ip_client = null;
  252.                         }
  253.                         else
  254.                         {
  255.                             $cle_url = "aaaaaaaaaaaaaaaaaa";
  256.                             if (!$request->query->get('cle_url')) 
  257.                             {
  258.                                 $cle_url = $session->get('cle_url');
  259.                             }
  260.                             else
  261.                             {
  262.                                 $cle_url = $request->query->get('cle_url');
  263.                             }
  264.                             $sql = "SELECT count(client_ip_ip) as nbips, client_vidal_token, client_vidal, client_nom, client_id, client_date_fin_installation, client_ref_nom, client_ref_prenom,client_cbip
  265.                                 FROM ADADA_CLIENT
  266.                                 LEFT JOIN ADADA_CLIENT_IP on ADADA_CLIENT.client_id=ADADA_CLIENT_IP.client_ip_id_client AND (ADADA_CLIENT_IP.client_ip_ip = :ip_client1 OR :ip_client2 like CONCAT(REPLACE(ADADA_CLIENT_IP.client_ip_ip, '.*', ''), '%'))
  267.                                 WHERE ADADA_CLIENT.client_cle_url = :cle_url
  268.                                 AND client_produit like '%hopital_web%'";
  269.                             $stmt = $adada_connection->prepare($sql);
  270.                             $stmt->bindValue('ip_client1', $ip_client);
  271.                             $stmt->bindValue('ip_client2', $ip_client);
  272.                             $stmt->bindValue('cle_url', $cle_url);
  273.                             $stmt->execute();
  274.                             $users = $stmt->fetchAll();
  276.                             $row = $users[0];
  277.                             $nbips = $row['nbips'];
  278.                             if( $nbips > 0)
  279.                             {
  280.                                 //Clef url vérifiée
  281.                                 if($nbips == 1)
  282.                                 { 
  283.                                     $session->set('titre_hopital', $row['client_nom']);
  284.                                     $session->set('client_id_adada', $row['client_id']);
  285.                                     $session->set('client_vidal', $row['client_vidal']);
  286.                                     $session->set('client_vidal_token', $row['client_vidal_token']);
  287.                                     $session->set('client_cbip', $user['client_cbip']);
  288.                                     $session->set('cle_url', $cle_url);
  290.                                     $this->checkExpirationDateWebHopital($row['client_date_fin_installation'], $error, $warning);
  291.                                     $this->checkCodeFiness( $row['client_id'], $error, $warning, $request);
  292.                                     $ip_client = null;
  293.                                 }
  294.                                 else
  295.                                 {
  296.                                     $error[] = $this->translator->trans("authentification_cle_authentification_deja_connectee");
  297.                                     $ip_client = null;
  298.                                 }
  299.                             }
  300.                             else
  301.                             {
  302.                                 $error[] = $this->translator->trans("authentification_cle_authentification_pas_valide");
  303.                                 $ip_client = null;
  304.                             }
  305.                         }
  306.                     }
  307.                 }
  308.                 else
  309.                 {
  310.                     if ($connexionReferer === true) 
  311.                     {
  312.                         $ip_client = $request->getClientIp();
  313.                         $connexionReferer = false;
  314.                     }
  315.                     else
  316.                     {
  317.                         $ip_client = null;
  318.                         $error[] = $this->translator->trans("authentification_ip_non_reconnue");
  319.                     }
  320.                 }
  321.             }
  322.         }
  323.         return $roles;
  324.     }
  326.     private function checkExpirationDateWebHopital($date, &$error, &$warning)
  327.     {
  328.         // si date de fin d'installation < maintenant, on bloque. Si moins de X jours on avertie
  329.         $date_expiration = \DateTime::createFromFormat("Y-m-d", $date);
  330.         $current_date = new \DateTime();
  331.         if ($date_expiration < $current_date)
  332.         {
  333.             $error[] = $this->translator->trans("authentification_abonnement_expire");
  334.         }
  335.         else
  336.         {
  337.             // avertissement 30 jours avant
  338.             $current_date->add(new \DateInterval('P1M'));
  339.             if ($date_expiration < $current_date)
  340.             {
  341.                 $warning[] = $this->translator->trans("authentification_abonnement_bientot_expirer");
  342.             }
  343.         }
  344.     }
  346.     private function checkCodeFiness($idAdada, &$error, &$warning, Request $request)
  347.     {
  348.         $session = $request->getSession();
  349.         $em = $this->getDoctrine()->getManager();
  350.         $etablissements = $this->etablissementRepo->findby(array('clientIdAdada' => $idAdada));
  351.         if (count($etablissements) > 1) 
  352.         {
  353.             if (!$request->query->get('finess') && !$session->get('finess'))
  354.             {
  355.                 $error[] = $this->translator->trans("authentification_code_finess_pas_present");
  356.             }
  357.             else
  358.             {
  359.                 $finess = "aaaaaaaaaaaaaaaaaa";
  360.                 $nom_finess = "";
  361.                 $id_etablissement = "";
  362.                 $finessOK = false;
  363.                 if (!$request->query->get('finess')) 
  364.                 {
  365.                     $finess = $session->get('finess');
  366.                 }
  367.                 else
  368.                 {
  369.                     $finess = $request->query->get('finess');
  370.                 }
  372.                 foreach ($etablissements as $etablissement) 
  373.                 {
  374.                     if ($etablissement->getCodeFiness() == $finess) 
  375.                     {
  376.                        $finess = $etablissement->getCodeFiness();
  377.                        $nom_finess = $etablissement->getNomEtablissement();
  378.                        $id_etablissement = $etablissement->getIdEtablissement();
  379.                        $finessOK = true;
  380.                     }
  381.                 }
  383.                 if ($finessOK) 
  384.                 {
  385.                      $session->set('finess',  $finess);
  386.                      $session->set('nom_finess',  $nom_finess);
  387.                      $session->set('id_etablissement',  $id_etablissement);
  388.                      $session->set('multi_finess',  1);
  389.                 }
  390.                 else
  391.                 {
  392.                     $error[] = $this->translator->trans("authentification_code_finess_pas_trouve");
  393.                 }
  394.             }
  395.         }
  396.         else if (count($etablissements) == 1) 
  397.         {
  398.             $session->set('nom_finess',  $etablissements[0]->getNomEtablissement());
  399.             $session->set('id_etablissement',  $etablissements[0]->getIdEtablissement());
  400.             $session->set('multi_finess',  0);
  401.         }
  402.         else
  403.         {
  404.             //Pas de Code FINESS enregistrer pour ce client
  405.             $error[] = $this->translator->trans("authentification_code_finess_non_rattache");
  406.         }
  408.     }
  410.     private function certification($certificat,&$client_identifiant, &$client_date_fin, &$client_idadada, &$client_ip, &$errors)
  411.     {
  412.         $tmp = openssl_decrypt($certificat->getValeur() ,'AES-128-CBC', $this->getParameter('nom_hopital_intranet'), 0, 'AETUOSFHKMµXVN.');
  413.         $tmp = explode("||",$tmp);
  414.         $client_idadada = $tmp[0];
  415.         $client_identifiant = $tmp[1];
  416.         $client_ip = $tmp[2];
  417.         $client_date_fin = $tmp[3];
  418.     }
  420.     public function informationsKey(&$client_identifiant, &$client_date_fin, &$client_idadada, &$client_ip, &$errors)
  421.     {
  422.         $em = $this->getDoctrine()->getManager();
  423.         $path_to_web = $this->getParameter('kernel.project_dir');
  424.         if (file_exists($path_to_web . '/antibiogarde.key'))
  425.         {
  426.             $certificat = $this->parametreRepo->findCertificat($this->getParameter('client_id_adada_intranet'));
  427.             if ($certificat != null)
  428.             {
  429.                 $this->certification($certificat,$client_identifiant,$client_date_fin,$client_idadada,$client_ip,$errors);
  430.                 return true;
  431.             }
  432.             else
  433.             {
  434.                 $server_addr = '';
  435.                 if (isset($_SERVER['SERVER_ADDR']) && $_SERVER['SERVER_ADDR'] <> '') 
  436.                 { 
  437.                     $server_addr = $_SERVER['SERVER_ADDR']; 
  438.                 } else { 
  439.                     $server_addr = gethostbyname($_SERVER['SERVER_NAME']); 
  440.                 }
  442.                 $key_file= file_get_contents($path_to_web . '/antibiogarde.key');
  443.                 $request = curl_init();
  444.                 curl_setopt($request, CURLOPT_URL, $this->getParameter('url_certification_intranet'));
  445.                 curl_setopt($request,CURLOPT_POSTFIELDS, "key=".$key_file."&ip=".$server_addr."&nomhopital=".$this->getParameter('nom_hopital_intranet'));
  446.                 curl_setopt($request, CURLOPT_RETURNTRANSFER, 1);
  447.                 $datas = json_decode(curl_exec($request));
  448.                 if ($datas->responseCode == 0) 
  449.                 {
  450.                     $certificat = new Parametre();
  451.                     $certificat->setClientIdAdada($this->getParameter('client_id_adada_intranet'));
  452.                     $certificat->setClef("certificat_authenticite");
  453.                     $certificat->setValeur($datas->certificat);
  454.                     $certificat->setOrdre(0);
  455.                     $em->persist($certificat);
  456.                     $em->flush();
  457.                     $this->certification($certificat,$client_identifiant,$client_date_fin,$client_idadada,$client_ip,$errors);
  458.                     return true;
  459.                 }
  460.                 else
  461.                 {
  462.                     $errors[] = $this->translator->trans("authentification_erreur")." ".$datas->responseCode." : ".$this->translator->trans("authentification_clef_antibiogarde_non_valide_ou_expiree");
  463.                     return false;
  464.                 }
  465.             }
  466.         }
  467.         else
  468.         {
  469.             $certificat = $this->parametreRepo->findCertificat($this->getParameter('client_id_adada_intranet'));
  470.             if ($certificat != null)
  471.             {
  472.                 $em->remove($certificat);
  473.                 $em->flush();
  474.             }
  475.             $errors[] = $this->translator->trans("authentification_clef_antibiogarde_non_installe");
  476.             return false;
  477.         }
  478.     }
  480.     private function connexionIntranet(Request $request, &$errors, &$warnings)
  481.     {
  482.         $roles = array('ROLE_AUTHENTICATED');
  484.         $session = $request->getSession();
  485.         $recupOK = $this->informationsKey($client_identifiant,$client_date_fin,$client_idadada,$client_ip,$errors);
  487.         if ($recupOK) 
  488.         {
  489.             $server_addr = '';
  490.             if (isset($_SERVER['SERVER_ADDR']) && $_SERVER['SERVER_ADDR'] <> '') 
  491.             { 
  492.                 $server_addr = $_SERVER['SERVER_ADDR']; 
  493.             } else { 
  494.                 $server_addr = gethostbyname($_SERVER['SERVER_NAME']); 
  495.             }
  497.             $clefOK = (md5($client_identifiant) == md5($this->getParameter('client_clef_intranet')));
  498.             $dateOK = (date("Y-m-d") < $client_date_fin);
  499.             $ipOK = ($server_addr == $client_ip);
  500.             $idOK = ($this->getParameter('client_id_adada_intranet') == $client_idadada);
  502.             if(!$clefOK || !$dateOK || !$ipOK || !$idOK )
  503.             {
  504.                 $codeError = "";
  505.                 $codeError .= ($idOK) ? "0" : "1" ;
  506.                 $codeError .= ($ipOK) ? "0" : "1" ;
  507.                 $codeError .= ($dateOK) ? "0" : "1" ;
  508.                 $codeError .= ($clefOK) ? "0" : "1" ;
  510.                 $errors[] = $this->translator->trans("authentification_erreur")." ".$codeError." : ".$this->translator->trans("authentification_clef_antibiogarde_non_valide_ou_expiree");
  511.                 return array();
  512.             }
  513.             else
  514.             {
  515.                 $session->set('titre_hopital',          $this->getParameter('nom_hopital_intranet'));
  516.                 $session->set('client_id_adada',        $this->getParameter('client_id_adada_intranet'));
  517.                 $session->set('client_vidal',           $this->getParameter('activation_interfacage_vidal'));
  518.                 $session->set('client_vidal_token',     $this->getParameter('token_interfacage_vidal'));
  519.                 $session->set('client_cbip',            $this->getParameter('activation_interfacage_cbip'));
  521.                 $em = $this->getDoctrine()->getManager();
  522.                 $etablissements = $this->etablissementRepo->findby(array('clientIdAdada' => $client_idadada));
  523.                 $session->set('nom_finess',  $etablissements[0]->getNomEtablissement());
  524.                 $session->set('id_etablissement',  $etablissements[0]->getIdEtablissement());
  525.                 $session->set('multi_finess',  0);
  526.                 return $roles;
  527.             }
  528.         }
  529.         
  530.         return array();
  531.     }
  533.     public function login(Request $request)
  534.     {
  535.         parse_str(parse_url($request->getSession()->get('_security.main.target_path'), PHP_URL_QUERY), $output);
  536.         if (array_key_exists("finess", $output)) 
  537.         {
  538.            $request->query->set('finess', $output['finess']);
  539.         }
  540.         if (array_key_exists("cle_url", $output)) 
  541.         {
  542.            $request->query->set('cle_url', $output['cle_url']);
  543.         }
  545.         if ($this->get('security.authorization_checker')->isGranted('ROLE_AUTHENTICATED') && !$request->query->get('cle_url') && !$request->query->get('finess'))
  546.         {
  547.             $returned = parent::suppression_parametres_get($request);
  548.             if ($returned != null) 
  549.             {
  550.                 return $returned;
  551.             }
  552.             else
  553.             {
  554.                 return $this->redirectToRoute('actualites_home');
  555.             }
  556.         }
  557.     
  558.         $version_antibiogarde = $this->getParameter('version_antibiogarde');
  560.         $errors = array();
  561.         $warning = array();
  562.         $roles = array();
  563.         switch($version_antibiogarde)
  564.         {
  565.             case "web_edition":
  566.                 $errors[] = $this->translator->trans("authentification_authentifie_pour_utiliser");
  567.                 break;
  568.             case "web_hopital":
  569.                 $roles = $this->connexionWebHopital($request, $errors, $warning);
  570.                 break;
  571.             case "intranet":
  572.                 $roles = $this->connexionIntranet($request, $errors, $warning);
  573.                 break;
  574.             default:
  575.                 $errors[] = $this->translator->trans("authentification_erreur_survenue");
  576.                 break;
  577.         }
  578.         if (count($errors) > 0)
  579.         {
  580.             if ($request->getSession()->get('login_errors') == null) 
  581.             {
  582.                 foreach ($errors as $error) {
  583.                     $request->getSession()->set('login_errors', $error);
  584.                 }
  585.             }
  586.             else{
  587.                 if($request->getSession()->get('login_errors') == $this->getParameter('lien_modification_mdp_impose_webedition')) {
  588.                     $mail = $request->getSession()->get('_security.last_username');
  589.                     $request->getSession()->invalidate();
  590.                     return $this->redirect($this->getParameter('lien_modification_mdp_impose_webedition').'?mail='.$mail);
  591.                 }
  592.             }
  593.             return $this->render('Authentication/login.html.twig');
  594.         }
  595.         else
  596.         {
  597.             $request->getSession()->set('login_warnings', $warning);
  599.             return $this->logUserAndRedirect($version_antibiogarde, $roles, $request);
  600.         }
  601.     }
  603.     public function loginMessage()
  604.     {
  605.         return $this->render('Authentication/login.html.twig');
  606.     }
  608.     public function loginCheck()
  609.     {
  611.     }
  613.     public function loginForm(Request $request)
  614.     {
  615.         $errors = $request->getSession()->get('login_errors');
  616.         $request->getSession()->remove('login_errors');
  617.         return $this->render('Authentication/login-form.html.twig', array('errors' => $errors));
  618.     }
  620.     public function inscriptionEPP(InformationsComtpeService $infoCptService)
  621.     {
  622.         $errorsCompte = array();
  623.         $formDatasCompte = array();
  624.         $messageCompte = "";
  625.         $donneesFormulaire = $infoCptService->getDonneesFormulaire();
  626.         return $this->render('Authentication/mon-compte.html.twig', array('utilisateur' => null, 'errorsCompte' => $errorsCompte,'formDatasCompte' => $formDatasCompte,'messageCompte' => $messageCompte,'donneesFormulaire' => $donneesFormulaire ));
  627.     }
  629.     public function mot_de_passe_perdu_epp(InformationsComtpeService $infoCptService)
  630.     {
  631.         $error = '';
  632.         $formDatasPassword = array();
  633.         $message = '';
  634.         $donneesFormulaire = $infoCptService->getDonneesFormulaire();
  635.         return $this->render('Authentication/password-lost-form.html.twig',array('message' => $message, 'error' => $error,'formDatasPassword' => $formDatasPassword));
  636.     }
  638. /********************************************************************************************************************************************/
  639. /****************************************************   MON COMPTE   ************************************************************************/
  640. /********************************************************************************************************************************************/
  641.     /**
  642.      * Require ROLE_USER only for this action
  643.      * 
  644.      * @IsGranted("ROLE_USER")
  645.      */
  646.     public function mes_parametres($path)
  647.     {
  648.         return $this->render('Authentication/gestion-parametre-compte.html.twig', array('path' => $path, 'errorsCompte' => array(), 'errorsInfos' => ''));
  649.     }
  652.     public function conditions_utlisation()
  653.     {
  654.         return new JsonResponse( array ( 
  655.                 'responseCode' => 0,
  656.                 'content' => $this->render('Authentication/conditions-utilisation.html.twig')->getContent()
  657.             ));
  658.     }
  660.     public function mon_compte_form(Request $request, InformationsComtpeService $infoCptService)
  661.     {
  662.         $session = $request->getSession();
  663.         $em = $this->getDoctrine()->getManager();
  665.         $errorsCompte = array();
  666.         $messageCompte = "";
  667.         $messageInfo = "";
  668.         $content = '';
  669.         $formDatasCompte = array();
  670.         $conditionsOK = false;
  671.         $new = false;
  672.         $utilisateur = null;
  674.         if ($request->isMethod('POST')) 
  675.         {
  676.             $id_utilisateur = $session->get('id_utilisateur');
  677.             $client_id_adada = $session->get('client_id_adada');
  678.             $id_etablissement = $session->get('id_etablissement');
  679.             
  680.             if ($id_utilisateur == null || empty($id_utilisateur)) 
  681.             {
  682.                $utilisateur = new Utilisateur();
  683.                $utilisateur->setClientIdAdada($client_id_adada);
  684.                $utilisateur->setActif(1);
  685.                $new = true;
  686.             }
  687.             else
  688.             {
  689.                 $utilisateur = $this->utilisateurRepo->findOneby(array(
  690.                             'clientIdAdada' => $client_id_adada,
  691.                             'idUtilisateur' => $id_utilisateur
  692.                             ));
  693.             }
  694.             $utilisateur->setEtablissement($this->etablissementRepo->findOneBy(array('clientIdAdada' => $client_id_adada,'idEtablissement' => $id_etablissement)));
  696.             $isOK = true;
  697.             $new_pass = '';
  698.             $new_pass_isOK = true;
  699.             foreach ($request->request as $key => $value) 
  700.             {
  701.                 $formDatasCompte[$key] = trim($value);
  702.                 switch ($key) 
  703.                 {
  704.                     case 'qualite':
  705.                         if ($value != -1 ) 
  706.                         {
  707.                             $utilisateur->setQualite($this->qualiteRepo->findOneby(array('idQualite' => $value)));
  708.                         }
  709.                         else
  710.                         {
  711.                             $utilisateur->setQualite(null);
  712.                         }
  713.                         break;
  714.                     case 'login':
  715.                         if (trim($value) != '' && strlen(trim($value)) <= 255) 
  716.                         {
  717.                             $utilisateur->setUsername(trim($value));              
  718.                             $copieUser = $this->utilisateurRepo->findUtilisateurCopie($utilisateur->getUsername(),null,$id_utilisateur,$client_id_adada);
  719.                             if ($copieUser != null) 
  720.                             {
  721.                                $isOK = false;
  722.                                $errorsCompte["login"] = "- ".$this->translator->trans("authentification_erreur_login_utilise");
  723.                             }
  724.                         }
  725.                         else
  726.                         {
  727.                             $isOK = false;
  728.                             $errorsCompte["login"] = "- ".$this->translator->trans("authentification_erreur_saisir_login");
  729.                         }
  730.                         break;
  731.                     case 'nom':
  732.                         if (trim($value) != '' && strlen(trim($value)) <= 255) 
  733.                         {
  734.                             $utilisateur->setNom(trim($value));
  735.                         }
  736.                         else
  737.                         {
  738.                             $isOK = false;
  739.                             $errorsCompte["nom"] = "- ".$this->translator->trans("authentification_erreur_saisir_nom");
  740.                         }
  741.                         break;
  742.                     case 'prenom':
  743.                         if (trim($value) != '' && strlen(trim($value)) <= 255) 
  744.                         {
  745.                             $utilisateur->setPrenom(trim($value));
  746.                         }
  747.                         else
  748.                         {
  749.                             $isOK = false;
  750.                             $errorsCompte["prenom"] = "- ".$this->translator->trans("authentification_erreur_saisir_prneom");
  751.                         }
  752.                         break;
  753.                     case 'email':
  754.                         if (trim($value) != '' && strlen(trim($value)) <= 500) 
  755.                         {
  756.                             if (filter_var(trim($value), FILTER_VALIDATE_EMAIL)) 
  757.                             {
  758.                                 $utilisateur->setEmail(trim($value));
  760.                                 $copieUser = $this->utilisateurRepo->findUtilisateurCopie(null,$utilisateur->getEmail(),$id_utilisateur,$client_id_adada);
  761.                                 if ($copieUser != null) 
  762.                                 {
  763.                                    $isOK = false;
  764.                                    $errorsCompte["email"] = "- ".$this->translator->trans("authentification_email_deja_utilise");
  765.                                 }
  766.                             }
  767.                             else
  768.                             {
  769.                                 $isOK = false;
  770.                                 $errorsCompte["email"] = "- ".$this->translator->trans("authentification_email_saisi_non_valide");
  771.                             }
  772.                         }
  773.                         else
  774.                         {
  775.                             $isOK = false;
  776.                             $errorsCompte["email"] = "- ".$this->translator->trans("authentification_saisir_email");
  777.                         }
  778.                         break;
  779.                     case 'telephone':
  780.                         if (trim($value) != '' && strlen(trim($value)) <= 20 && preg_match("/^0\d(?:[ ]\d{2}){4}$/", trim($value)) == 1) 
  781.                         {
  782.                             $utilisateur->setTelephone(trim($value));
  783.                         }
  784.                         else
  785.                         {
  786.                             if (trim($value) == '') 
  787.                             {
  788.                                $utilisateur->setTelephone(null);
  789.                             }
  790.                             else
  791.                             {
  792.                                 $isOK = false;
  793.                                 $errorsCompte["telephone"] = "- ".$this->translator->trans("authentification_telephone_non_valide");
  794.                             }
  795.                         }
  796.                         break;
  797.                     case 'rpps':
  798.                         if (trim($value) == '') 
  799.                         {
  800.                             $utilisateur->setNumeroRpps(null);
  801.                         }
  802.                         else
  803.                         {
  804.                             $utilisateur->setNumeroRpps(trim($value));
  805.                         }
  807.                         // if (trim($value) != '' && strlen(trim($value)) <= 20 && preg_match("/^\d{11}$/", trim($value)) == 1) 
  808.                         // {
  809.                         //     $utilisateur->setNumeroRpps(trim($value));
  810.                         // }
  811.                         // else
  812.                         // {
  813.                         //     if (trim($value) == '') 
  814.                         //     {
  815.                         //         $utilisateur->setNumeroRpps(null);
  816.                         //     }
  817.                         //     else
  818.                         //     {
  819.                         //         $isOK = false;
  820.                         //         $errorsCompte["rpps"] = "- Votre numéros RPPS saisi n'est pas valide. Il doit être sous la forme de 11 chiffres sans espace.";
  821.                         //     }
  822.                         // }
  823.                         break;
  824.                      case 'specialite':
  825.                         if ($value != -1 ) 
  826.                         {
  827.                             $utilisateur->setSpecialite($this->specialiteRepo->findOneby(array('idSpecialite' => $value)));
  828.                         }
  829.                         else
  830.                         {
  831.                             $utilisateur->setSpecialite(null);
  832.                         }
  833.                         break;
  834.                      case 'serviceList':
  835.                         if ($value != -1 ) 
  836.                         {
  837.                             $utilisateur->setService($this->serviceRepo->findOneby(array('idService' => $value)));
  838.                         }
  839.                         else
  840.                         {
  841.                             $utilisateur->setService(null);
  842.                         }
  843.                         break;
  844.                     case 'serviceInput':
  845.                         if (trim($value) != '' && strlen(trim($value)) <= 255 && strlen(trim($value)) >= 1) 
  846.                         {
  847.                             $service = new Service();
  848.                             $service->setNomService(trim($value));
  849.                             $service->setClientIdAdada($client_id_adada);
  850.                             $em->persist($service);
  851.                             $utilisateur->setService($service);
  852.                         }
  853.                         else
  854.                         {
  855.                             $isOK = false;
  856.                             $errorsCompte["service"] = "- ".$this->translator->trans("authentification_service_non_valide");
  857.                         }
  858.                         break;
  859.                     case 'new_pwd':
  860.                         if ($value != '' && strlen($value) <= 255) 
  861.                         {
  862.                             $new_pass = $value;
  863.                         }
  864.                         break;
  865.                     case 'rep_new_pwd':
  866.                         if ($new_pass != '' || $value != '') 
  867.                         {
  868.                             if ( 
  869.                                 strlen($new_pass) >= 12 && strlen($value) >= 12 &&
  870.                                 preg_match('/[A-Z]/', $value) &&
  871.                                 preg_match('/[a-z]/', $value) && 
  872.                                 preg_match('/[0-9]/', $value) && 
  873.                                 preg_match('/[!@#$%^&*()_+\\-=\\[\\]{};:\'",.<>?]/', $value) &&
  874.                                 !password_verify($value, $utilisateur->getPassword())
  875.                             ) {
  876.                                 if ($value == $new_pass) 
  877.                                 {
  878.                                     $utilisateur->setPassword(password_hash($new_pass, PASSWORD_BCRYPT));
  879.                                 }
  880.                                 else
  881.                                 {
  882.                                     $isOK = false;
  883.                                     $errorsCompte["newPass"] = "- ".$this->translator->trans("authentification_mdp_differents");
  884.                                 }
  885.                             }
  886.                             else
  887.                             {
  888.                                 $isOK = false;
  889.                                 $errorsCompte["newPass"] = "- ".$this->translator->trans("authentification_mdp_non_valide");
  890.                             }
  891.                         }
  892.                         else if($new)
  893.                         {
  894.                             $isOK = false;
  895.                             $errorsCompte["newPass"] = "- ".$this->translator->trans("authentification_saisir_mdp");
  896.                         }
  897.                         break;
  898.                     case 'conditions':
  899.                             $conditionsOK = true;
  900.                         break;
  901.                     default:
  902.                         # code...
  903.                         break;
  904.                 }
  905.             }
  907.             if ($new && !$conditionsOK) 
  908.             {
  909.                 $isOK = false;
  910.                 $errorsCompte["conditions"] = "- ".$this->translator->trans("authentification_accepter_conditions");
  911.             }
  912.             if ($isOK == true) 
  913.             {
  914.                 if ($new) 
  915.                 {
  916.                     $messageCompte = $this->translator->trans("authentification_compte_enregistre");
  917.                 }
  918.                 else
  919.                 {
  920.                     $messageCompte = $this->translator->trans("authentification_modifications_ok");
  921.                 }
  922.                 $formDatasCompte = array();
  923.                 $em->persist($utilisateur);
  924.                 $em->flush();
  925.             }
  926.             else
  927.             {
  928.                 $em->clear();
  929.             }
  930.         }
  931.         $infos = $infoCptService->getInfoCompte();
  932.         $donneesFormulaire = $infoCptService->getDonneesFormulaire();
  934.         if ($new && $isOK)
  935.         {
  936.             // Création de l'e-mail : nous créons une instance du mailer symfony
  937.             $message = (new TemplatedEmail())
  938.                 ->subject($this->translator->trans("authentification_email_confirmation_inscription"))
  939.                 ->from(new Address("contact@antibiogarde.org" , "Antibiogarde"))
  940.                 ->to($utilisateur->getEmail())
  941.                 ->htmlTemplate('Asset/Courriers/confirmation-inscription.html.twig');                    
  943.             // Retour au service mailer, nous utilisons sa méthode « send() » pour envoyer notre $message
  944.             $this->mailer->send($message);
  946.             $content =  $this->render('Authentication/mon-compte.html.twig', 
  947.                 array('utilisateur' => null, 'errorsCompte' => $errorsCompte,'formDatasCompte' => $formDatasCompte,'messageCompte' => $messageCompte,'donneesFormulaire' => $donneesFormulaire )
  948.             )->getContent();
  949.         }
  950.         else
  951.         {
  952.             $content = $this->render('Authentication/mes-parametres.html.twig', array(  'infos' => $infos, 
  953.                                                                                                                 'donneesFormulaire' => $donneesFormulaire,
  954.                                                                                                                 'errorsCompte' => $errorsCompte,
  955.                                                                                                                 'formDatasCompte' => $formDatasCompte,
  956.                                                                                                                 'messageInfo' => null,
  957.                                                                                                                 'messageCompte' => $messageCompte))->getContent();
  958.         }
  959.         return new JsonResponse( array ( 
  960.                 'responseCode' => 0,
  961.                 'content' => $content
  962.             ));
  963.     }
  965.     /**
  966.      * Require ROLE_REFERENT only for this action
  967.      * 
  968.      * @IsGranted("ROLE_REFERENT")
  969.      */
  970.     public function mes_informations_form(Request $request, InformationsComtpeService $infoCptService)
  971.     {
  972.         $session = $request->getSession();
  973.         $em = $this->getDoctrine()->getManager();
  974.         $client_id_adada = $session->get('client_id_adada');
  976.         $messageInfo = "";
  977.         $messageCompte = "";
  978.         $errorsCompte = array();
  979.         $formDatasCompte = array();
  980.         if ($request->isMethod('POST')) 
  981.         {
  982.             $boutique_connection = $this->container->get('doctrine')->getConnection('adada');
  983.                 $stmt = $boutique_connection->prepare("update ADADA_CLIENT set client_vidal = :vidal, client_vidal_token = :vidal_token, client_cbip = :cbip  WHERE client_id = :client_id");
  984.                 $stmt->bindValue('vidal', $request->request->getAlnum('interfacageVidal'));
  985.                 $stmt->bindValue('vidal_token', $request->request->getAlnum('tokenVidal'));
  986.                 $stmt->bindValue('cbip', $request->request->getAlnum('interfacageCbip'));
  987.                 $stmt->bindValue('client_id', $client_id_adada);
  988.                 $stmt->execute();
  990.             $session->set('client_vidal',   $request->request->getAlnum('interfacageVidal'));
  991.             $session->set('client_vidal_token',   $request->request->getAlnum('tokenVidal'));
  992.             $session->set('client_cbip',   $request->request->getAlnum('interfacageCbip'));
  994.             $personnalisations = $this->parametreRepo->findParametreAffichagePersonnalisations($client_id_adada);
  995.             $personnalisations->setValeur($request->request->getAlnum('affichage_personnalisation'));
  996.             $em->persist($personnalisations);
  997.             $em->flush();
  999.             foreach ($request->request as $key => $value) 
  1000.             {
  1001.                 $formDatasCompte[$key] = trim($value);
  1002.             }
  1003.         }
  1005.         $infos = $infoCptService->getInfoCompte();
  1006.         $donneesFormulaire = $infoCptService->getDonneesFormulaire();
  1007.         $messageInfo = $this->translator->trans("authentification_modifications_ok");
  1008.         $content = $this->render('Authentication/mes-parametres.html.twig', array(  'infos' => $infos, 
  1009.                                                                                                                 'donneesFormulaire' => $donneesFormulaire,
  1010.                                                                                                                 'errorsCompte' => $errorsCompte,
  1011.                                                                                                                 'formDatasCompte' => $formDatasCompte,
  1012.                                                                                                                 'messageInfo' => $messageInfo,
  1013.                                                                                                                 'messageCompte' => $messageCompte));
  1014.         if ($request->isMethod('POST')) $content = $content->getContent();
  1015.         return new JsonResponse( array ( 
  1016.                 'responseCode' => 0,
  1017.                 'content' => $content
  1018.             ));
  1019.     }
  1021.     /**
  1022.      * Require ROLE_USER only for this action
  1023.      * 
  1024.      * @IsGranted("ROLE_USER")
  1025.      */
  1026.     public function load_mes_informations(Request $request, InformationsComtpeService $infoCptService)
  1027.     {
  1028.         if ($request->isXmlHttpRequest())
  1029.         {
  1030.             $infos = $infoCptService->getInfoCompte();
  1031.             $donneesFormulaire = $infoCptService->getDonneesFormulaire();
  1032.             $errorsCompte = array();
  1033.             $messageCompte = "";
  1034.             $messageInfo = "";
  1035.             $formDatasCompte = array();
  1036.             $content = $this->render('Authentication/mes-parametres.html.twig', array(  'infos' => $infos, 
  1037.                                                                                                                     'donneesFormulaire' => $donneesFormulaire,
  1038.                                                                                                                     'errorsCompte' => $errorsCompte,
  1039.                                                                                                                     'formDatasCompte' => $formDatasCompte,
  1040.                                                                                                                     'messageInfo' => $messageInfo,
  1041.                                                                                                                     'messageCompte' => $messageCompte))->getContent();
  1043.             return new JsonResponse( array ( 
  1044.                 'responseCode' => 0,
  1045.                 'content' => $content
  1046.             ));
  1047.         } else throw $this->createNotFoundException();
  1048.     }
  1050.     /**
  1051.      * Require ROLE_USER only for this action
  1052.      * 
  1053.      * @IsGranted("ROLE_USER")
  1054.      */
  1055.     public function load_parrainages(Request $request)
  1056.     {
  1057.         if ($request->isXmlHttpRequest())
  1058.         {
  1059.             $content = '';
  1060.             $errorsParrainages = array();
  1061.             $formDatasParrainages = array();
  1062.             $message = "";
  1063.             $allEmailsVide = false;
  1064.             if ($this->getParameter('version_antibiogarde') == 'web_edition') 
  1065.             {
  1066.                 $content = $this->render('Authentication/parrainages.html.twig',array('formDatasParrainages' => $formDatasParrainages,
  1067.                                                                                                                 'errorsParrainages' => $errorsParrainages,
  1068.                                                                                                                 'message' => $message,
  1069.                                                                                                                 'allEmailsVide' => $allEmailsVide))->getContent();
  1070.             }
  1072.             return new JsonResponse( array ( 
  1073.                 'responseCode' => 0,
  1074.                 'content' => $content
  1075.             ));
  1076.         } else throw $this->createNotFoundException();
  1077.     }
  1078.     
  1079.     /**
  1080.      * Require ROLE_USER only for this action
  1081.      * 
  1082.      * @IsGranted("ROLE_USER")
  1083.      */
  1084.     public function parrainages_form(Request $request)
  1085.     {
  1086.         $session = $request->getSession();
  1087.         $em = $this->getDoctrine()->getManager();
  1089.         $emails = array();
  1090.         $errorsParrainages = array();
  1091.         $formDatasParrainages = array();
  1092.         $content = "";
  1093.         $allEmailsOK = true;
  1094.         $allEmailsVide = true;
  1095.         $message = "";
  1096.         $boutique_connection = $this->container->get('doctrine')->getConnection('boutique');
  1098.         if ($request->isMethod('POST')) 
  1099.         {
  1100.             foreach ($request->request as $key => $value) 
  1101.             {
  1102.                 if (!filter_var(trim($value), FILTER_VALIDATE_EMAIL) and trim($value) != "") 
  1103.                 {
  1104.                     $allEmailsOK = false;
  1105.                     $allEmailsVide = false;
  1106.                     $errorsParrainages[] = "has-error";
  1107.                 }
  1108.                 else
  1109.                 {
  1110.                     if (trim($value) != "") 
  1111.                     {
  1112.                         $allEmailsVide = false;
  1113.                         $errorsParrainages[] = "has-success";
  1114.                         $emails[] = trim($value);
  1115.                     }
  1116.                     else
  1117.                     {
  1118.                         $errorsParrainages[] = "";
  1119.                     }
  1120.                 }
  1121.                 $formDatasParrainages[$key] = trim($value);
  1122.             }
  1123.         }
  1125.         if ($allEmailsOK && !$allEmailsVide) 
  1126.         {
  1127.             $stmt = $boutique_connection->prepare("SELECT * FROM BOU_PARAMETRE where clef = 'gainTempsFilleul'");
  1128.             $stmt = $stmt->execute();
  1129.             $data = $stmt->fetch();
  1130.             $joursMois = $data['valeur']." ".$this->translator->trans("authentification_jours");
  1131.             if (($data['valeur']*1/30) >= 1) 
  1132.             {
  1133.                 $joursMois = (int)($data['valeur']*1/30)." ".$this->translator->trans("authentification_mois");
  1134.             }
  1136.             // Récupération du service
  1137.             //$mailer = $this->container->get('mailer');
  1139.             // Création de l'e-mail : nous créons une instance du mailer symfony
  1140.             $message = (new TemplatedEmail())
  1141.                 ->subject($session->get('nom_auteur_utilisateur')." ".$this->translator->trans("authentification_decouvrir_antibiogarde"))
  1142.                 ->from(new Address("contact@antibiogarde.org" , "Antibiogarde"))
  1143.                 ->to(...$emails)
  1144.                 ->htmlTemplate('Asset/Courriers/invitation-parrainage.html.twig')
  1145.                 ->context([
  1146.                     'nomParrain' => $session->get('nom_auteur_utilisateur'),
  1147.                     'emailParrain' => $session->get('email_auteur_utilisateur'),
  1148.                     'moisGratuitFilleul' => $joursMois
  1149.                 ]);
  1151.             // Retour au service mailer, nous utilisons sa méthode « send() » pour envoyer notre $message
  1152.             $this->mailer->send($message);
  1153.             $message = $this->translator->trans("authentification_demande_parrainage_ok");
  1154.         }
  1155.         $content = $this->render('Authentication/parrainages.html.twig',array('formDatasParrainages' => $formDatasParrainages,
  1156.                                                                                 'errorsParrainages' => $errorsParrainages,
  1157.                                                                                 'message' => $message, 
  1158.                                                                                 'allEmailsVide' => $allEmailsVide))->getContent();
  1160.         return new JsonResponse( array ( 
  1161.                 'responseCode' => 0,
  1162.                 'content' => $content
  1163.             ));
  1164.     }
  1166.     /**
  1167.      * Require ROLE_USER only for this action
  1168.      * 
  1169.      * @IsGranted("ROLE_USER")
  1170.      */
  1171.     public function load_appareil(Request $request)
  1172.     {
  1173.         $session = $request->getSession();
  1175.         if ($request->isXmlHttpRequest())
  1176.         {
  1177.             $content = '';
  1178.             $message = '';
  1179.             $error = '';
  1180.             $udid = '';
  1181.             if ($this->getParameter('version_antibiogarde') == 'web_edition') 
  1182.             {
  1183.                 $boutique_connection = $this->container->get('doctrine')->getConnection('boutique');
  1184.                 $stmt = $boutique_connection->prepare("SELECT udidDevice FROM BOU_APPAREIL_CONNECTE where numUtilisateur = :numUtilisateur  and (numProduit = 1 or numProduit = 3)");
  1185.                 $stmt->bindValue('numUtilisateur', $session->get('webedition_id_utilisateur_boutique'));
  1186.                 $stmt = $stmt->execute();
  1187.                 if (count($stmt->fetchAll()) > 0) 
  1188.                 {
  1189.                     $data = $stmt->fetch();
  1190.                     $udid = $data["udidDevice"];
  1191.                 }
  1193.                 $content = $this->render('Authentication/appareil.html.twig',array('udid' => $udid,'message' => $message,'error'=>$error))->getContent();
  1194.             }
  1196.             return new JsonResponse( array ( 
  1197.                 'responseCode' => 0,
  1198.                 'content' => $content
  1199.             ));
  1200.         } else throw $this->createNotFoundException();
  1201.     }
  1203.     /**
  1204.      * Require ROLE_USER only for this action
  1205.      * 
  1206.      * @IsGranted("ROLE_USER")
  1207.      */
  1208.     public function appareil_form(Request $request)
  1209.     {
  1210.         $session = $request->getSession();
  1211.         $error = '';
  1212.         $message = '';
  1213.         if ($request->isXmlHttpRequest())
  1214.         {
  1215.             $udid = $request->request->all()['device'];
  1216.             $boutique_connection = $this->container->get('doctrine')->getConnection('boutique');
  1218.             $stmt = $boutique_connection->prepare("DELETE FROM BOU_APPAREIL_CONNECTE where numUtilisateur = :numUtilisateur and (numProduit = 1 or numProduit = 3) and udidDevice = :udid");
  1219.             $stmt->bindValue('numUtilisateur', $session->get('webedition_id_utilisateur_boutique'));
  1220.             $stmt->bindValue('udid', $udid);
  1221.             $stmt->execute();
  1223.             $stmt = $boutique_connection->prepare("SELECT udidDevice FROM BOU_APPAREIL_CONNECTE where numUtilisateur = :numUtilisateur  and (numProduit = 1 or numProduit = 3) ");
  1224.             $stmt->bindValue('numUtilisateur', $session->get('webedition_id_utilisateur_boutique'));
  1225.             $stmtExec = $stmt->execute();
  1226.             if (count($stmtExec->fetchAll()) > 0) 
  1227.             {
  1228.                 $data = $stmtExec->fetch();
  1229.                 $udid = $data["udidDevice"];
  1230.                 $error = $this->translator->trans("authentification_erreur_suppression");
  1231.             }
  1232.             else
  1233.             {
  1234.                 $udid = '';
  1235.                 $message = $this->translator->trans("authentification_suppression_ok");
  1236.             }
  1238.             $content = $this->render('Authentication/appareil.html.twig',array('udid' => $udid,'message' => $message, 'error' => $error));
  1240.             return new JsonResponse( array ( 
  1241.                     'responseCode' => 0,
  1242.                     'content' => $content
  1243.                 ));
  1244.         } else throw $this->createNotFoundException();
  1245.     }
  1247.     public function mot_de_passe_perdu_form(Request $request)
  1248.     {
  1249.         $session = $request->getSession();
  1250.         $em = $this->getDoctrine()->getManager();
  1251.         $error = '';
  1252.         $message = '';
  1253.         $formDatasPassword = array();
  1254.         if ($request->isMethod('POST')) 
  1255.         {
  1256.             $client_id_adada = $session->get('client_id_adada');
  1257.             foreach ($request->request as $key => $value) 
  1258.             {
  1259.                 $formDatasPassword[$key] = trim($value);
  1260.                 switch ($key) 
  1261.                 {
  1262.                     case 'password_mail':
  1263.                         if (filter_var(trim($value), FILTER_VALIDATE_EMAIL)) 
  1264.                         {
  1265.                             $utilisateur = $this->utilisateurRepo->findOneby(array(
  1266.                                 'clientIdAdada' => $client_id_adada,
  1267.                                 'email' => trim($value)
  1268.                                 ));
  1269.                             if ($utilisateur == null) 
  1270.                             {
  1271.                                 $error = $this->translator->trans("authentification_email_non_trouve");
  1272.                             }
  1273.                             else
  1274.                             {
  1275.                                 $nomPrenom = ($utilisateur->getQualite() != null) ? $utilisateur->getQualite()->getSlugFR()." " : "" ;
  1276.                                 $nomPrenom .= $utilisateur->getNom()." ".$utilisateur->getPrenom();
  1277.                                 $newPassword = $this->generatePassword();
  1278.                                 //Set du nouveau password
  1279.                                 $utilisateur->setPassword(password_hash($newPassword, PASSWORD_BCRYPT));
  1280.                                 $em->persist($utilisateur);
  1281.                                 $em->flush();
  1283.                                 // Création de l'e-mail : nous créons une instance du mailer symfony                                
  1284.                                 $message = (new TemplatedEmail())
  1285.                                     ->subject($this->translator->trans("authentification_identifiants_antibiogarde"))
  1286.                                     ->from(new Address("contact@antibiogarde.org" , "Antibiogarde"))
  1287.                                     ->to($utilisateur->getEmail())
  1288.                                     ->htmlTemplate('Asset/Courriers/password-lost.html.twig')
  1289.                                     ->context([
  1290.                                         'username' => $utilisateur->getUsername(),
  1291.                                         'password' => $newPassword,
  1292.                                         'nomPrenom' => $nomPrenom
  1293.                                     ]);
  1295.                                 // Retour au service mailer, nous utilisons sa méthode « send() » pour envoyer notre $message
  1296.                                 $this->mailer->send($message);
  1297.                                 $message = $this->translator->trans("authentification_identifiants_envoyes");
  1298.                                 $formDatasPassword = array();
  1299.                             }
  1300.                         }
  1301.                         else
  1302.                         {
  1303.                             $error = $this->translator->trans("authentification_email_saisi_non_valide");
  1304.                         }
  1305.                         break;
  1306.                     default:
  1307.                         # code...
  1308.                         break;
  1309.                 }
  1310.             }
  1311.         }
  1313.         $content = $this->render('Authentication/password-lost-form.html.twig',array('message' => $message, 'error' => $error, 'formDatasPassword' => $formDatasPassword));
  1314.         return new JsonResponse( array ( 
  1315.                 'responseCode' => 0,
  1316.                 'content' => $content->getContent()
  1317.             ));
  1318.     }
  1320.     public function auto_connexion(Request $request)
  1321.     {
  1322.         $session = $request->getSession();
  1323.         $login = $session->get('email_auteur_utilisateur');
  1324.         $pwd = $session->get('pwd_auteur_utilisateur');
  1325.         return $this->render('Authentication/auto-connexion.html.twig',array('login' => $login, 'pwd' => $pwd));
  1326.     }
  1328.     public function auto_connexion_edition(Request $request, $hash)
  1329.     {
  1330.         // dd($this->get("security.token_storage")->getToken());
  1331.         // dd(($this->encryptService->encryptData('doudou03|aurelien@agence-ie.com')));
  1332.         $decodeHash = $this->encryptService->decryptData($hash);
  1333.         $decodeHash = explode('|', $decodeHash);
  1334.         $session = $request->getSession();
  1335.         $login = $decodeHash[1];
  1336.         $pwd = $decodeHash[0];
  1337.         $udid = $decodeHash[2];
  1338.         if(count($decodeHash) > 3) {
  1339.             $categ = $decodeHash[3];
  1340.             $id = $decodeHash[4];
  1341.             $session->set('parametre-mobile-spectre', $categ.(($id!=null)?'/'.$id:''));
  1342.             if(count($decodeHash) > 5) {
  1343.                 $session->set('parametre-mobile-spectre', $categ.(($id!=null)?'/'.$id:'').'/'.$decodeHash[5]);
  1344.             }
  1345.         }
  1347.         $boutique_connection = $this->container->get('doctrine')->getConnection('boutique');
  1349.         if($login == '(null)' && $pwd == '(null)') {
  1350.             $stmt = $boutique_connection->prepare("SELECT bu.EMAIL, bu.PWD 
  1351.                                                     FROM BOU_UTILISATEUR bu
  1352.                                                     INNER JOIN BOU_ACCEDE ba on ba.NUMUTILISATEUR = bu.NUMUTILISATEUR
  1353.                                                     INNER JOIN BOU_NOTIFICATION_EMAIL_DEVICE bned ON bned.email = bu.EMAIL
  1354.                                                     INNER JOIN BOU_NOTIFICATION_DEVICE bnd ON bnd.id_device = bned.id_device
  1355.                                                     WHERE bnd.deviceIdentifier = :udid
  1356.                                                     AND (ba.numProduit = 1 or ba.numProduit = 3) 
  1357.                                                     LIMIT 1");
  1358.             $stmt->bindValue('udid', $udid);
  1359.             $result = $stmt->execute();
  1360.             $data = $result->fetchAll();
  1361.             if (count($data) >= 1){
  1362.                 $login = $data[0]['EMAIL'];
  1363.                 $pwd = $data[0]['PWD'];
  1364.             }
  1365.             else throw $this->createNotFoundException();
  1366.         }
  1367.         else {
  1368.             $login = $this->getParameter('utilisateur_login_mobile_spectre');
  1369.             $pwd = $this->getParameter('utilisateur_pwd_mobile_spectre');
  1370.         }
  1371.         
  1372.         $stmt = $boutique_connection->prepare("SELECT bu.NUMUTILISATEUR, bu.password as PWD
  1373.                                                 FROM BOU_UTILISATEUR bu
  1374.                                                 LEFT JOIN BOU_ACCEDE ba on ba.NUMUTILISATEUR = bu.NUMUTILISATEUR and (ba.NUMPRODUIT = 1 or ba.NUMPRODUIT = 3)
  1375.                                                 WHERE EMAIL = :username
  1376.                                                 ORDER BY ba.DATEVALIDITE DESC
  1377.                                                 LIMIT 1");
  1378.         $stmt->bindValue('username', $login);
  1379.         
  1380.         $result = $stmt->execute();
  1381.         $data = $result->fetchAll();
  1382.         
  1383.         if (count($data) >= 1 && password_verify($pwd, $data[0]['PWD']) )
  1384.         {
  1385.             $sessionCo = $this->sessionConnexionRepo->findOneByIdUtilisateurBoutique($data[0]['NUMUTILISATEUR']);
  1386.             if ($sessionCo) {
  1387.                 $em = $this->getDoctrine()->getManager();
  1388.                 $em->remove($sessionCo);
  1389.                 $em->flush();
  1390.             }
  1391.         }
  1392.         $session->set('mobile-spectre', true);
  1394.         return $this->render('Authentication/auto-connexion-edition.html.twig',array('_username' => $login, '_password' => $pwd));
  1395.     }
  1398.     public function ramsay_connexion(Request $request, $hash){        
  1399.         $session = $request->getSession();
  1400.         $em = $this->getDoctrine()->getManager();
  1401.         // On recupere la cle privé pour décryter le hash
  1402.         $privateKeyPath = $this->getParameter('kernel.project_dir') . '/public/build/certificat/ramsay/private.key';
  1403.         // On remplace les caractere speciaux du hash d'abord et ensuite, on decode base 64 le hash
  1404.         $hash_final = base64_decode(strtr($hash, '._-', '+/='));
  1406.         // Option openSSL necessaire pour le décryptage
  1407.         $key = openssl_pkey_new([
  1408.           'digest_alg' => 'sha512',
  1409.           'private_key_bits' => 1024,
  1410.           'private_key_type' => OPENSSL_KEYTYPE_RSA,
  1411.         ]);
  1412.         // Recupere la cle sous format PEM 
  1413.         openssl_pkey_export($key, $privateKey);
  1414.         // On vérifie que le fichier provateKey existe 
  1415.         if (!file_exists($privateKeyPath)) {
  1416.           file_put_contents($privateKeyPath, $privateKey);
  1417.         }
  1419.         // $publicKeyPath = $this->getParameter('kernel.project_dir') . '/public/build/certificat/ramsay/public.key';
  1420.         // $publicKey = openssl_pkey_get_details($key);
  1421.         // if (!file_exists($publicKeyPath)) {
  1422.         //   file_put_contents($publicKeyPath, $publicKey['key']);
  1423.         // }
  1424.         // $expirationDate = new \DateTime('now +2hours');
  1425.         // $data = json_encode([
  1426.         //   'RPPS' => 'test_feelandclic',
  1427.         //   'expired_at' => $expirationDate->format('Y-m-d H:i:s'),
  1428.         // ]);
  1429.         // var_dump("Donnee envoyé : <br/>".$data);
  1431.         // openssl_public_encrypt($data, $encryptedData, file_get_contents($publicKeyPath));
  1433.         // // replace ambiguous characters
  1434.         // var_dump('Transmis crypté :<br/>: '.$encryptedData);
  1435.         // var_dump('Transmis crypté et encodé base 64 :<br/>'.base64_encode($encryptedData));
  1436.         // var_dump('Transmis dans URL :<br/>'.strtr(base64_encode($encryptedData), '+/=', '._-'));
  1437.         // die();
  1439.         // ON decrypte le hash passer dans l'url avec notre clef privée
  1440.         $decryptOk = openssl_private_decrypt($hash_final, $decryptedData, file_get_contents($privateKeyPath));
  1442.         if ($decryptOk) {
  1443.             // on decode le json pour manipuler les données envoyés
  1444.             $data = json_decode($decryptedData);
  1445.             // On prepare les dates pour vérifier si le lien est expiré ou non
  1446.             $date_expiration = new DateTime($data->expired_at);
  1447.             $date_expiration = $date_expiration->format('YmdHis');
  1448.             $now = new DateTime(date('Y-m-d H:i:s'));
  1449.             $now = $now->format('YmdHis');
  1451.             //Si le lien est expiré, on set en session une variable qui permet d'affiché une modal avec une erreur
  1452.             if ($now > $date_expiration){              
  1453.                 $session->set('connexion_ramsay', 'ramsay_connexion_ko_lien_expire');
  1454.             }
  1455.             // Sinon, on tente de connecter un utilisateur temporaire
  1456.             else {
  1457.                 $session->set('connexion_ramsay', 'ramsay_connexion_ok');
  1458.                 $sql = "INSERT INTO BOU_RAMSAY_CONNEXION (rpps,date_connexion) VALUES (?,?)";
  1459.                 $this->insertupdateDeleteQueryBoutique($sql, array($data->RPPS,$now));
  1461.                 $login = $this->parametreRepo->findOneByClef($this->getParameter('ramsay_code_login'));
  1462.                 $pwd = $this->parametreRepo->findOneByClef($this->getParameter('ramsay_code_pwd'));
  1463.                 return $this->render('Authentication/auto-connexion-ramsay.html.twig',array('login' => $login->getValeur(), 'pwd' => $pwd->getValeur()));
  1464.             }        
  1465.         }
  1466.         else {
  1467.             // Si on arrive jusqu'ici, c'est que le decryptage de la chaine passé en url est en erreur
  1468.             $session->set('connexion_ramsay', 'ramsay_connexion_ko_decryptage');
  1469.         }        
  1470.                 
  1471.         return $this->redirectToRoute('actualites_home');
  1472.     }
  1474.     public function ramsay_deconnexion(Request $request){
  1475.         if ($this->container->get('security.token_storage')->getToken())
  1476.         {
  1477.             $user = $this->container->get('security.token_storage')->getToken()->getUser();
  1478.             $version_antibiogarde = $this->getParameter('version_antibiogarde');
  1479.             // pour web_edition, on supprime une connexion PC pour débloquer l'utilisateur
  1480.             $em = $this->container->get('doctrine')->getManager();
  1481.             $session = $this->sessionConnexionRepo->findOneByIdUtilisateurBoutique($user->getUniqueID());
  1482.             if ($session)
  1483.             {
  1484.                 $em->remove($session);
  1485.                 $em->flush();
  1486.             }            
  1487.         }
  1488.         $referer_url = $request->headers->get('referer');
  1490.         $currentSession =  $request->getSession(); 
  1492.         if (!$currentSession->get('cle_url') && !$currentSession->get('finess')) 
  1493.         {
  1494.             $currentSession->invalidate();
  1495.         }
  1496.         else
  1497.         {
  1498.             $cle_url = null;
  1499.             $finess = null;
  1500.             $nom_finess = null;
  1501.             $id_etablissement = null;
  1503.             if ($currentSession->get('cle_url')) 
  1504.             {
  1505.                $cle_url = $currentSession->get('cle_url');
  1506.             }
  1508.             if ($currentSession->get('finess')) 
  1509.             {
  1510.                $finess = $currentSession->get('finess');
  1511.                $nom_finess = $currentSession->get('nom_finess');
  1512.                $id_etablissement = $currentSession->get('id_etablissement');
  1513.             }
  1514.             
  1515.             $currentSession->invalidate();
  1516.             
  1517.             if ($cle_url != null) 
  1518.             {
  1519.                 $currentSession->set('cle_url',$cle_url);
  1520.             }
  1522.             if ($finess != null) 
  1523.             {
  1524.                 $currentSession->set('finess',$finess);
  1525.                 $currentSession->set('nom_finess',$nom_finess);
  1526.                 $currentSession->set('id_etablissement',$id_etablissement);
  1527.             }
  1529.         }
  1530.         return new JsonResponse(true);
  1531.     }
  1533.     private function insertupdateDeleteQueryBoutique($sql, $params=null){
  1534.         $em = $this->get('doctrine')->getConnection('boutique');
  1536.         $query = $em->prepare($sql);
  1537.         if($params != null){
  1538.             if(is_array($params)){
  1539.                 foreach ($params as $key => $value) {
  1540.                     $i=$key+1;
  1541.                     $query->bindValue($i, $value);
  1542.                 }
  1543.             }
  1544.         }
  1545.         return $query->execute();
  1546.     }
  1548.     private function generatePassword($length = 12) {
  1549.         $uppercase = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ';
  1550.         $lowercase = 'abcdefghijklmnopqrstuvwxyz';
  1551.         $digits = '0123456789';
  1552.         $specialChars = '*-+.!?$';
  1554.         // On s'assure d'avoir au moins un de chaque catégorie
  1555.         $password = $uppercase[random_int(0, strlen($uppercase) - 1)] .
  1556.                     $lowercase[random_int(0, strlen($lowercase) - 1)] .
  1557.                     $digits[random_int(0, strlen($digits) - 1)] .
  1558.                     $specialChars[random_int(0, strlen($specialChars) - 1)];
  1560.         // Ajouter des caractères aléatoires pour atteindre la longueur demandée
  1561.         $allChars = $uppercase . $lowercase . $digits . $specialChars;
  1562.         for ($i = 4; $i < $length; $i++) {
  1563.             $password .= $allChars[random_int(0, strlen($allChars) - 1)];
  1564.         }
  1566.         // Mélanger pour éviter un schéma prévisible
  1567.         return str_shuffle($password);
  1568.     }
  1569. }