src/Listener/Security/IdlePolicyListener.php line 55

Open in your IDE?
  1. <?php
  3. namespace App\Listener\Security;
  5. use App\Entity\User;
  6. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  7. use Symfony\Component\HttpFoundation\RedirectResponse;
  8. use Symfony\Component\HttpFoundation\RequestStack;
  9. use Symfony\Component\HttpFoundation\Session\Session;
  10. use Symfony\Component\HttpKernel\CacheWarmer\WarmableInterface;
  11. use Symfony\Component\HttpKernel\Event\RequestEvent;
  12. use Symfony\Component\HttpKernel\HttpKernelInterface;
  13. use Symfony\Component\HttpKernel\KernelEvents;
  14. use Symfony\Component\Routing\RouterInterface;
  15. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  16. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  17. use Symfony\Contracts\EventDispatcher\Event;
  19. class IdlePolicyListener implements EventSubscriberInterface, WarmableInterface
  20. {
  21.     /**
  22.      * @var TokenStorageInterface
  23.      */
  24.     private $tokenStorage;
  25.     /**
  26.      * @var RequestStack
  27.      */
  28.     private $requestStack;
  29.     /**
  30.      * @var RouterInterface
  31.      */
  32.     private $router;
  33.     /**
  34.      * @var int
  35.      */
  36.     private $idlePolicy;
  38.     public static function getSubscribedEvents()
  39.     {
  40.         return [
  41.             KernelEvents::REQUEST => [
  42.                 ['onRequest', 0],
  43.             ],
  44.         ];
  45.     }
  47.     public function __construct(TokenStorageInterface $tokenStorage, RequestStack $requestStack, RouterInterface $router, int $idlePolicy)
  48.     {
  49.         $this->tokenStorage = $tokenStorage;
  50.         $this->requestStack = $requestStack;
  51.         $this->router = $router;
  52.         $this->idlePolicy = $idlePolicy;
  53.     }
  55.     public function onRequest(RequestEvent $event)
  56.     {
  57.         if (HttpKernelInterface::MASTER_REQUEST != $event->getRequestType()) {
  58.             return;
  59.         }
  60.         if (!$this->tokenStorage->getToken() instanceof TokenInterface) {
  61.             return;
  62.         }
  63.         if (!$this->tokenStorage->getToken()->getUser() instanceof User) {
  64.             return;
  65.         }
  67.         if ($this->idlePolicy > 0) {
  68.             $session = $this->requestStack->getSession();
  69.             $session->start();
  70.             $lapse = time() - $session->getMetadataBag()->getLastUsed();
  71.             if ($lapse > $this->idlePolicy) {
  72.                 $this->tokenStorage->setToken(null);
  73.                 if ($session instanceof Session) {
  74.                     $session->getFlashBag()->set('warning', 'You have been signed out due to inactivity.');
  75.                     $event->setResponse(new RedirectResponse($this->router->generate('security.sign-out')));
  76.                     $dispatcher = new Event();
  77.                     $dispatcher->stopPropagation();
  78.                 }
  79.             }
  80.         }
  81.     }
  83.     public function warmUp($cacheDir)
  84.     {
  85.         return [TokenStorageInterface::class, RequestStack::class, RouterInterface::class];
  86.     }
  87. }