Update user current information using JSON Authentication Endpoint with the security bundle

[kevinG73]

Hi,
I use Symfony 5.3 and API PLATFORM "^2.6", I built a JSON Authentication Endpoint using this doc :
https://symfony.com/doc/current/security/json_login_setup.html
so I created my own UserProvider for it.
It works but how to can refresh data of the logged-in user, I mean when I update the User entity information using aDataPersisterhow do I update the cookie or session information at the same time?
If I don't when I call [GET]/api/me I see the old data (last name, first name ...), it only changes when I log out to reconnect
You have any hints ?

[dbrumann]

The UserProviderInterface has a refreshUser method you can use for this. What does that method look like in your provider? Also, how do you get the user in your /api/me endpoint? Are you using the TokenStorage?

[kevinG73]

my current UserProvider
src/Security/UserProvider.php

class UserProvider implements UserProviderInterface, PasswordUpgraderInterface
{
    private $request;
    private $userRepository;
    private $siteRepository;

    public function __construct(RequestStack $requestStack, UserRepository $userRepository, SiteRepository $siteRepository)
    {
        $this->request = $requestStack->getCurrentRequest();
        $this->userRepository = $userRepository;
        $this->siteRepository = $siteRepository;
    }

    /**
     * Symfony calls this method if you use features like switch_user
     * or remember_me.
     *
     * If you're not using these features, you do not need to implement
     * this method.
     *
     * @throws UserNotFoundException if the user is not found
     */
    public function loadUserByIdentifier($identifier): UserInterface
    {
        $origin = $this->request->headers->get("origin");
        $site = $this->siteRepository->findOneBy(['url' => $origin]);
        if ($site === null) {
            throw new UserNotFoundException('Aucun utilisateur trouvé pour le nom d\'utilisateur' . $identifier);
        }

        $user = $this->userRepository->findOneBy(['email' => $identifier, 'site' => $site->getId()]);


        if ($user === null) {
            throw new UserNotFoundException('Aucun utilisateur trouvé pour le nom d\'utilisateur' . $identifier);
        }

        if ($user->getActive() !== true) {
            throw new UserNotFoundException('Le compte pas encore active' . $identifier);
        }

        return $user;
    }

    /**
     * @deprecated since Symfony 5.3, loadUserByIdentifier() is used instead
     */
    public function loadUserByUsername($username): UserInterface
    {
        return $this->loadUserByIdentifier($username);
    }

    /**
     * Refreshes the user after being reloaded from the session.
     *
     * When a user is logged in, at the beginning of each request, the
     * User object is loaded from the session and then this method is
     * called. Your job is to make sure the user's data is still fresh by,
     * for example, re-querying for fresh User data.
     *
     * If your firewall is "stateless: true" (for a pure API), this
     * method is not called.
     *
     * @return UserInterface
     */
    public function refreshUser(UserInterface $user)
    {
        if (!$user instanceof User) {
            throw new UnsupportedUserException(sprintf('Invalid user class "%s".', get_class($user)));
        }

        if ($user === null) {
            throw new UserNotFoundException(sprintf('User with id %s not found', json_encode($user)));
        }


        return $user;
    }

    /**
     * Tells Symfony to use this provider for this User class.
     */
    public function supportsClass($class)
    {
        return User::class === $class || is_subclass_of($class, User::class);
    }

    /**
     * Upgrades the hashed password of a user, typically for using a better hash algorithm.
     */
    public function upgradePassword(UserInterface $user, string $newHashedPassword): void
    {
        $user->setPassword($newHashedPassword);
        $this->userRepository->save($user);
    }
}

I don't use cookies
and I use $this->security->getUser(); to get the user in my /api/me endpoint

[kevinG73]

@dbrumann thank you , solved using :

public function refreshUser(UserInterface $user)
    {
        $identifier = $user->getUserIdentifier();
        $user = $this->userRepository->findOneBy(['email' => $identifier]);

        if (!$user instanceof User) {
            throw new UnsupportedUserException(sprintf('Invalid user class "%s".', get_class($user)));
        }

        if ($user === null) {
            throw new UserNotFoundException(sprintf('User with id %s not found', json_encode($user)));
        }

        return $user;
    }