Hi everyone, I think I have a pretty simple question, but still we were not able to resolve it with

UP58NR6BS

Hi everyone,
I think I have a pretty simple question, but still we were not able to resolve it with a reasonable amount of investigation:

• which controller or component handles the /login_check request in Yves?
• How can I intercept a successful login event in Zed (CustomerFacade->tryAuthorizeCustomerByEmailAndPassword seems not to be called)?

ULL0N440J

Maybe this one is what you're looking for:
project/src/Pyz/Yves/CustomerPage/Plugin/Provider/CustomerAuthenticationSuccessHandler.php :
onAuthenticationSuccess(
Request $request, TokenInterface $token)

UP58NR6BS

thx for the ultra-quick response - but sadly: no, I cannot use this. I need to send a message to RabbitMQ, but Yves should not have any dependency to RabbitMQ (architecture anti-pattern).

ULL0N440J

You're welcome 🙂 Sorry, I missed the call of the CustomerFacade; can't tell you where the request goes in Zed 🤐 Only used this for logging successful logins.

Alberto Reyer

/login_check comes from https://github.com/spryker/security/blob/c273f0bf219f56244cda76cc21936ace3c18d797/src/Spryker/Yves/Security/Plugin/Application/SecurityApplicationPlugin.php#L966

https://github.com/spryker/customer/blob/master/src/Spryker/Zed/Customer/Business/Customer/Customer.php#L734 is the right point to intercept customer logins.

UP58NR6BS

as far as I can see it, the only point where Zed is called during Yves Login process is a GET on /customer/gateway/customer

Stanislav Matveyev

actually

\Spryker\Client\Customer\CustomerClient::findCustomerWithEmailAndPassword()

also see \Spryker\Client\Customer\CustomerClient::login()

generates zed call to \Spryker\Zed\Customer\Communication\Controller\GatewayController

UP58NR6BS

thanks Stanislav. Already saw that - seems to be unused during Yves login process. Do you see any usage of these methods anywhere? Maybe I missed that!

Stanislav Matveyev

\SprykerShop\Yves\CustomerPage\Plugin\Provider\CustomerUserProvider::loadUserByUsername() is used by authenticator,
then received user
is checked by \Symfony\Component\Security\Core\Authentication\Provider\DaoAuthenticationProvider::checkAuthentication() inside \Symfony\Component\Security\Core\Authentication\Provider\UserAuthenticationProvider::authenticate()

Stanislav Matveyev

so as I see you need to check \Symfony\Component\Security\Core\User\UserProviderInterface and probably implement your provider instead of CustomerUserProvider

UP58NR6BS

which actually means that the check happens in Symfony called by Yves, and there is no credentials check performed by Zed in this case . Right?

Stanislav Matveyev

right, Zed just provides a user by email which contains a password. And Symfony checks if password is correct

UP58NR6BS

thanks for the confirmation. I‘ll then implement the interceptor for glue and yves separately.