UniqueEntity & Validation Directly on Form Fields

Hey Leif,

Yes, you're correct! It's required by design by validator. Though, you can bypass allowing entity to be in invalid state with form DTO: https://symfonycasts.com/sc... - it will be further in this course. But this way requires more work, so it's still controversial question.

Thank you for sharing your solution with others btw!

Cheers!

Hey @Farry7!

Sorry to hear that! Are you getting an error? Or is it simply not working? Also make sure that you've installed the validator component - composer require validator - there was one other comment that made me think that this *could* be a possible problem.

Cheers!

Hey Gabriel F.

If you have this error on form submitting, then it's caused by setUsername(string $username) and to solve it you need to add question mark to it like: setUsername(?string $username).

IIRC latest version of maker bundle adds nullable mark to getter and setter by default.

Cheers!

Hey lesleyfernandes!

GREAT question. Validation groups :). Basically, when you create the "profile" form, you can set that form's validation group to something like "update". Then you can use groups to make the NotBlank on password not checked for the edit profile form.

We have a nice example of this inside API Platform: https://symfonycasts.com/sc... - it's not using a form, but it shows how you can group some your constraints. The only difference in your case is that you will need to configure your edit profile form to validate in, for example, the "update" and "Default" groups - https://symfony.com/doc/cur...

Let me know if that helps!

Cheers!

Hey Peter K.!

Cool question :). I had to do some digging - and I think this can be done easily (it's just not a case I had thought of before)! Here's my idea:

1) Pass a constraints option... but to the entire form itself - not just a single field. You'll do this down in configureOptions().

2) Inside this, use the new Callback() and pass this a Closure. I think it will look like this:

public function configureOptions(OptionsResolver $resolver)
{
    $resolver->setDefaults([
        'constraints' => [
            new Callback(function($data, ExecutionContextInterface $context, $payload) {
                // do your magic here!
            }
        ]
    ]);
}

I'm making several assumptions here... so I could be totally wrong. But, if you have a few minutes, let me know. It's actually a really compelling idea - a custom function for extra validation on your form type. I would love this to work :).

Cheers!

Thanks weaverryan

I have it working when I create separate form entity with just these 2 fields.

However I couldnt figure it out how would I do that in controller.

public function configureOptions(OptionsResolver $resolver)
    {
        $resolver->setDefaults([
            'constraints' => [
                new Callback(function($data, ExecutionContextInterface $context, $payload){
                    if($data['action'] == Controller::ACTION_MARK_AS_NOT_REVIEWED){
                        if(trim($data['comment']) == ''){
                            $context->buildViolation('This value should not be blank.')
                                ->atPath('comment')
                                ->addViolation();
                        }
                    }
                })
            ],
        ]);
    }

where would you paste above code for this form in controller?

$form = $this->createFormBuilder([],[
            'csrf_protection' => false,
        ])
            ->add('action', ChoiceType::class, [
                'choices' => [
                    self::ACTION_MARK_AS_REVIEWED,
                    self::ACTION_MARK_AS_NOT_REVIEWED,
                ],
                'label' => false,
                'expanded' => true,
                'multiple' => false,
                'constraints' => [
                    new NotBlank(),
                ],
            ])
            ->add('comment',null)
            ->getForm();

Hey Peter K.!

Ooh, good question :). The 2nd option to createFormBuilder() are the options you're passing to the form. And in a form class, the configureOptions is how you pass option to the form. So basically, in addition to 'csrf_protection' => false, you should also pass a constraints key in that array, set to the big thing in the first example.

But let me know if it gives you any trouble ;).

Cheers!

Thanks working like a swiss watch

Hey Polychronis

Where does the @UniqueUser constraint comes from? Anyways, you only need to define the UniqueEntity constraint at the top of your class and that's it. Try removing that @UniqueUser from each property and remove the cache manually (just in case) rm -rf var/cache/*

Cheers!

Thanks for the hint !
Got confused between
- validating a form tied to an entity
- validating a form tied to a model

Hey Markus B.!

Ah, excellent question! There are a few parts to the answer:

1) For the two password fields, use the RepeatedType. That is a built-in Symfony type that allows you to have "one field" that is actually two fields, and they must match each other else they will fail validation automatically. Super handy. We have an older (Symfony 3) tutorial that shows this - https://symfonycasts.com/screencast/symfony3-security/user-registration-form

2) For validating that the old password is "correct", you could go the "cheap" way and do this logic in your controller after submit (the downside being that you'd need to manually send some error string to the template and render it). Or, you could add a constraints option to plainOldPassword. You'll need to create a custom validation constraint (use bin/console make:validator) and point the constraint at it - e.g.

->add('plainOldPassword', PasswordType::class, [
    'mapped' => false,
    'required' => false,
    'constraints' => [new MatchesPassword()]
])

Then, in your MatchesPasswordValidator class, you can autowire the UserPasswordEncoderInterface service and use its isPasswordValid() method to check. You'll need to get current User object for this. It'll look something like this:

use Symfony\Component\Security\Core\Security;
use Symfony\Component\Security\Core\Encoder\UserPasswordEncoderInterface;

class MatchesPasswordValidator extends ConstraintValidator
{
    private $security;
    private $passwordEncoder;

    public function __construct(Security $security, UserPasswordEncoderInterface $passwordEncoder)
    {
        $this->security = $security;
        $this->passwordEncoder = $passwordEncoder;
    }

    public function validate($value, Constraint $constraint)
    {
        if (null === $value || '' === $value) {
            return;
        }

        $user = $this->security->getUser();
        if (!$this->passwordEncoder->isPasswordValid($user, $value)) {
            $this->context->buildViolation('Password does not match')
                ->addViolation();
        }
    }
}

So, there are a few steps involved :). Let us know if this helps!

Cheers!

Hey Peter K.!

> First one is regarding custom validation. I would like to have a password that contains at least 8 characters and then at least 1 upper, 1 lower, 1 number & 1 special character? How would I do this? I believe I need some sort of my own validator.

I would either use the Regex constraint (https://symfony.com/doc/cur... or the Callback constraint... if the Regex is too ugly :).

> Second question is controlling some Validation Annotation in entity by software settings(.env) for example.

THIS *would* require a custom validation constraint (which we do talk about later in this tutorial). With a custom validation constraint, you have a "validator", which is a service. Because of that, we can use dependency injection to "inject" your custom rules, for example, from .env. This would mean, for example, that you would have some new @Password annotation, which would ultimately call your custom validation constraint, where you could apply the dynamic logic.

Let me know if this all makes sense! Cool questions!

Cheers!