framework:
    session:
        cookie_domain: .apicart.net
        cookie_lifetime: 1209600 # 14 days
        gc_maxlifetime: 1209600 # 14 days
        cookie_samesite: lax
        cookie_secure: auto
        handler_id: Symfony\Component\HttpFoundation\Session\Storage\Handler\RedisSessionHandler
        name: PHPSESSID

services:
    SessionRedis:
        class: Redis
        calls:
            -   method: connect
                arguments:
                    - '%env(SESSION_REDIS_HOST)%'
                    - '%env(int:SESSION_REDIS_PORT)%'
            -   method: select
                arguments:
                    - '%env(int:SESSION_REDIS_DATABASE)%'

    Symfony\Component\HttpFoundation\Session\Storage\Handler\RedisSessionHandler:
        arguments:
            - '@SessionRedis'

security:
    providers:
        apicart_accounts_provider:
            id: Apicart\Accounts\Security\UserProvider

    firewalls:
        dev:
            pattern: ^/(_(profiler|wdt)|css|images|js)/
            security: false
        main:
            pattern: ^/
            provider: apicart_accounts_provider
            user_checker: Apicart\Accounts\Security\UserChecker
            anonymous: ~

final class UserProvider implements UserProviderInterface
{
    private $userApi;

    public function __construct(UserApi $userApi)
    {
        $this->userApi = $userApi;
    }

    public function loadUserByUsername($username)
    {
        $user = $this->userApi->findByUsername($username);
        if ($user === null) {
            throw new UsernameNotFoundException;
        }
        return $user;
    }

    public function refreshUser(UserInterface $user)
    { /** ... **/ }

    public function supportsClass($class)
    { /** ... **/ }
}

class User implements UserInterface, Serializable
{

    //...

    public function serialize(): string
    {
        return serialize([
            $this->username,
            $this->password,
            $this->salt,
        ]);
    }
    
    public function unserialize($serialized): void
    {
        [
            $this->username,
            $this->password,
            $this->salt,
        ] = unserialize($serialized, ['allowed_classes' => false]);
    }

}

private function hasUserChanged(UserInterface $user)
{

    if ($this->user instanceof EquatableInterface) {
        return !(bool) $this->user->isEqualTo($user);
    }

    if ($this->user->getPassword() !== $user->getPassword()) {
        return true;
    }

    if ($this->user->getSalt() !== $user->getSalt()) {
        return true;
    }

    if ($this->user->getUsername() !== $user->getUsername()) {
        return true;
    }

    // AdvancedUserInterface is deprecated since Symfony 4.1

    return false;
}

final class UserChecker implements UserCheckerInterface
{
    public function checkPreAuth(UserInterface $user): void
    { /** ... **/ }


    public function checkPostAuth(UserInterface $user): void
    {
        if (! $user instanceof User) {
            return;
        }

        if (! $user->isActive()) {
            throw new AccountDeactivatedException;
        }
    }
}

trait AccountsRedirectTrait 
{
    private $host = 'https://accounts.apicart.net';

    public function redirectToLogin(): RedirectResponse
    {
        $request = $this->getRequest();

        return new RedirectResponse(
            $this->host . '?backlink=' . $this->getBacklink($request)
        );
    }

    public function redirectToLogout(): RedirectResponse
    {
        $request = $this->getRequest();

        return new RedirectResponse(
            $this->host . '/logout?backlink=' . $this->getBacklink($request)
        );
    }

    private function getBacklink(Request $request): string
    {
        return $this->urlGenerator->generate(
            $request->get('_route'),
            $request->get('_route_params'),
            UrlGeneratorInterface::ABSOLUTE_URL
        );
    }
}