Merge pull request #202 from vtsykun/feat/api-token2

Allow to regenerate api token.

src/Controller/UserController.php

@@ -47,7 +47,6 @@
 use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
 use Symfony\Component\Security\Core\Exception\AccessDeniedException;
 use Symfony\Component\Security\Core\User\UserInterface;
-use Symfony\Component\Security\Http\Attribute\IsGranted;
 
 /**
  * @author Jordi Boggiano <[email protected]>
@@ -78,6 +77,25 @@ public function showAction(Request $request): Response
         ]);
     }
 
+    #[Route('/profile/regenerate-token', name: 'profile_regenerate_token')]
+
+    public function regenerateToken(Request $request): Response
+    {
+        $user = $this->getUser();
+        if (!$user instanceof User) {
+            throw $this->createNotFoundException();
+        }
+
+        if (!$this->isCsrfTokenValid('token', $request->query->get('_token'))) {
+            return new Response('Invalid Csrf Params', 400);
+        }
+
+        $user->generateApiToken();
+        $this->getEM()->flush();
+
+        return $this->redirectToRoute('profile_show');
+    }
+
     #[Route('/profile/edit', name: 'profile_edit')]
     public function editAction(Request $request): Response
     {

templates/profile/show.html.twig

@@ -6,6 +6,8 @@
 <section class="col-md-9">
     {% set isMaintainer = is_granted('ROLE_MAINTAINER') %}
     {% set apiToken = get_api_token(app.user, false, true) %}
+    {% set token = csrf_token('token') %}
+
     {%- if apiToken is not null %}
         <h3 class="font-normal profile-title">{{ 'profile.your_api_token'|trans }}</h3>
 
@@ -15,6 +17,7 @@
                 <button class="btn btn-success btn-show-api-token" type="button">{{ 'profile.show_api_token'|trans }}</button>
             </span>
         </div>
+        <a href="{{ path('profile_regenerate_token', {'_token': token}) }}" class="onclick-confirm" data-msg="Are you sure you want to refresh the token?"><i class="fa fa-refresh"></i> Regenerate token</a>
 
         <p>You need to authenticate to access their Composer repository, for example to enter credentials run command:</p>
         <pre>composer config --global --auth http-basic.{{ app.request.getHttpHost() }} {{ user.userIdentifier }} {{ show_api_token(apiToken) }}</pre>