Fix symfony7x login event tracking with version compat

Use function_exists() to call either the public automated tracking
functions (dd-trace-php 1.23+) or the internal equivalents (1.20-1.22),
so login/signup events are tracked explicitly in both CI and local builds.

Revert makeDistantCall from HttpClient to curl to preserve http.url span tag.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: estringana

utils/build/docker/php/weblogs/symfony7x/src/Controller/AppController.php

@@ -69,14 +69,31 @@ public function makeDistantCall(Request $request): JsonResponse
             return new JsonResponse(['error' => 'url parameter required'], 400);
         }
 
-        $client          = HttpClient::create();
-        $response        = $client->request('GET', $url);
-        $statusCode      = $response->getStatusCode();
+        $requestHeaders  = [];
         $responseHeaders = [];
-        foreach ($response->getHeaders(false) as $name => $values) {
-            $responseHeaders[$name] = implode(', ', $values);
+
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_HEADER, false);
+        curl_setopt($ch, CURLINFO_HEADER_OUT, true);
+        curl_setopt($ch, CURLOPT_HEADERFUNCTION, function ($curl, $header) use (&$responseHeaders) {
+            $parts = explode(':', $header, 2);
+            if (count($parts) === 2) {
+                $responseHeaders[strtolower(trim($parts[0]))] = trim($parts[1]);
+            }
+            return strlen($header);
+        });
+        curl_exec($ch);
+        $statusCode        = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $rawRequestHeaders = curl_getinfo($ch, CURLINFO_HEADER_OUT);
+        curl_close($ch);
+
+        foreach (explode("\r\n", $rawRequestHeaders ?: '') as $line) {
+            $parts = explode(':', $line, 2);
+            if (count($parts) === 2) {
+                $requestHeaders[strtolower(trim($parts[0]))] = trim($parts[1]);
+            }
         }
-        $requestHeaders = $this->parseRequestHeadersFromDebug($response->getInfo('debug') ?? '');
 
         return new JsonResponse([
             'url'              => $url,

utils/build/docker/php/weblogs/symfony7x/src/Controller/LoginController.php

@@ -42,10 +42,14 @@ public function signup(Request $request, EntityManagerInterface $entityManager):
 
         $user = new User($id, $username, $hashedPassword, $username);
         $entityManager->persist($user);
-
-        // Signup event is tracked automatically by the tracer via Doctrine\ORM\UnitOfWork::executeInserts hook.
         $entityManager->flush();
 
+        if (function_exists('\datadog\appsec\track_user_signup_event_automated')) {
+            \datadog\appsec\track_user_signup_event_automated('symfony', $username, $id, []);
+        } elseif (function_exists('\datadog\appsec\internal\track_user_signup_event_automated')) {
+            \datadog\appsec\internal\track_user_signup_event_automated('symfony', $username, $id, []);
+        }
+
         $this->security->login($user, AppAuthenticator::class, 'main');
 
         return new Response('', 200);

utils/build/docker/php/weblogs/symfony7x/src/Security/AppAuthenticator.php

@@ -71,8 +71,11 @@ public function authenticate(Request $request): Passport
 
     public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
     {
-        // Login success is tracked automatically by the tracer via
-        // AuthenticatorManager::handleAuthenticationSuccess hook.
+        $user   = $token->getUser();
+        $login  = method_exists($user, 'getUserIdentifier') ? $user->getUserIdentifier() : '';
+        $userId = method_exists($user, 'getId') ? (string) $user->getId() : $login;
+        $this->trackLoginSuccessAutomated($login, $userId);
+
         $sdkTrigger = $request->query->get('sdk_trigger', '');
         $sdkEvent   = $request->query->get('sdk_event', '');
         $sdkUser    = $request->query->get('sdk_user', '');
@@ -87,8 +90,11 @@ public function onAuthenticationSuccess(Request $request, TokenInterface $token,
 
     public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
     {
-        // Login failure is tracked automatically by the tracer via
-        // AuthenticatorManager::handleAuthenticationFailure hook.
+        $login  = $request->getSession()?->get('_security.last_username') ?? '';
+        $exists = !($exception instanceof \Symfony\Component\Security\Core\Exception\UserNotFoundException);
+        $userId = $exists ? $login : '';
+        $this->trackLoginFailureAutomated($login, $userId ?: null, $exists);
+
         $sdkTrigger = $request->query->get('sdk_trigger', '');
         $sdkEvent   = $request->query->get('sdk_event', '');
         $sdkUser    = $request->query->get('sdk_user', '');
@@ -101,6 +107,24 @@ public function onAuthenticationFailure(Request $request, AuthenticationExceptio
         return new Response('', 401);
     }
 
+    private function trackLoginSuccessAutomated(string $login, string $userId): void
+    {
+        if (function_exists('\datadog\appsec\track_user_login_success_event_automated')) {
+            \datadog\appsec\track_user_login_success_event_automated('symfony', $login, $userId, []);
+        } elseif (function_exists('\datadog\appsec\internal\track_user_login_success_event_automated')) {
+            \datadog\appsec\internal\track_user_login_success_event_automated('symfony', $login, $userId, []);
+        }
+    }
+
+    private function trackLoginFailureAutomated(string $login, ?string $userId, bool $exists): void
+    {
+        if (function_exists('\datadog\appsec\track_user_login_failure_event_automated')) {
+            \datadog\appsec\track_user_login_failure_event_automated('symfony', $login, $userId, $exists, []);
+        } elseif (function_exists('\datadog\appsec\internal\track_user_login_failure_event_automated')) {
+            \datadog\appsec\internal\track_user_login_failure_event_automated('symfony', $login, $userId, $exists, []);
+        }
+    }
+
     private function callSdk(string $event, string $user, bool $exists): void
     {
         if ($event === 'success') {