[Security] Support loading UserBadge directly from accessToken

Author: Jeroeny

DependencyInjection/Security/Factory/AccessTokenFactory.php

@@ -79,9 +79,9 @@ public function createAuthenticator(ContainerBuilder $container, string $firewal
 
         $container
             ->setDefinition($authenticatorId, new ChildDefinition('security.authenticator.access_token'))
-            ->replaceArgument(0, $userProvider)
-            ->replaceArgument(1, new Reference($config['token_handler']))
-            ->replaceArgument(2, new Reference($extractorId))
+            ->replaceArgument(0, new Reference($config['token_handler']))
+            ->replaceArgument(1, new Reference($extractorId))
+            ->replaceArgument(2, $userProvider)
             ->replaceArgument(3, $successHandler)
             ->replaceArgument(4, $failureHandler)
             ->replaceArgument(5, $config['realm'])

Resources/config/security_authenticator_access_token.php

@@ -26,12 +26,12 @@
         ->set('security.authenticator.access_token', AccessTokenAuthenticator::class)
             ->abstract()
             ->args([
-                abstract_arg('user provider'),
                 abstract_arg('access token handler'),
                 abstract_arg('access token extractor'),
                 null,
                 null,
                 null,
+                null,
             ])
             ->call('setTranslator', [service('translator')->ignoreOnInvalid()])
 

Tests/Functional/Bundle/AccessTokenBundle/Security/Handler/AccessTokenHandler.php

@@ -13,17 +13,18 @@
 
 use Symfony\Component\Security\Core\Exception\BadCredentialsException;
 use Symfony\Component\Security\Http\AccessToken\AccessTokenHandlerInterface;
+use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
 
 class AccessTokenHandler implements AccessTokenHandlerInterface
 {
     public function __construct()
     {
     }
 
-    public function getUserIdentifierFrom(string $accessToken): string
+    public function getUserBadgeFrom(string $accessToken): UserBadge
     {
         return match ($accessToken) {
-            'VALID_ACCESS_TOKEN' => 'dunglas',
+            'VALID_ACCESS_TOKEN' => new UserBadge('dunglas'),
             default => throw new BadCredentialsException('Invalid credentials.'),
         };
     }