<serviceid="Symfony\Component\Security\Http\EventListener\AuthenticatingListener">

<serviceid="security.listener.verify_authenticator_credentials"class="Symfony\Component\Security\Http\EventListener\VerifyAuthenticatorCredentialsListener">

<tagname="kernel.event_subscriber" />

<argumenttype="service"id="security.encoder_factory" />

</service>

useSymfony\Component\EventDispatcher\EventSubscriberInterface;

useSymfony\Component\Security\Core\Encoder\EncoderFactoryInterface;

useSymfony\Component\Security\Core\Exception\BadCredentialsException;

useSymfony\Component\Security\Core\Exception\LogicException;

useSymfony\Component\Security\Http\Authenticator\CustomAuthenticatedInterface;

useSymfony\Component\Security\Http\Authenticator\PasswordAuthenticatedInterface;

classAuthenticatingListenerimplements EventSubscriberInterface

classVerifyAuthenticatorCredentialsListenerimplements EventSubscriberInterface

{

private$encoderFactory;

$this->encoderFactory =$encoderFactory;

}

publicstaticfunctiongetSubscribedEvents():array

{

return [VerifyAuthenticatorCredentialsEvent::class => ['onAuthenticating',128]];

}

publicfunctiononAuthenticating(VerifyAuthenticatorCredentialsEvent$event):void

{

$authenticator =$event->getAuthenticator();

if ($authenticatorinstanceof PasswordAuthenticatedInterface) {

$user =$event->getUser();

$event->setCredentialsValid($this->encoderFactory->getEncoder($user)->isPasswordValid(

$user->getPassword(),

$authenticator->getPassword($event->getCredentials()),

$user->getSalt()

));

$presentedPassword =$authenticator->getPassword($event->getCredentials());

if ('' ===$presentedPassword) {

thrownewBadCredentialsException('The presented password cannot be empty.');

}

if (null ===$user->getPassword()) {

return;

}

$event->setCredentialsValid($this->encoderFactory->getEncoder($user)->isPasswordValid($user->getPassword(),$presentedPassword,$user->getSalt()));

return;

}

thrownewLogicException(sprintf('Authenticator %s does not have valid credentials. Authenticators must implement one of the authenticated interfaces (%s, %s or %s).',\get_class($authenticator), PasswordAuthenticatedInterface::class, TokenAuthenticatedInterface::class, CustomAuthenticatedInterface::class));

}

publicstaticfunctiongetSubscribedEvents():array

{

return [VerifyAuthenticatorCredentialsEvent::class => ['onAuthenticating',128]];

}

}