src/Listener/Security/LockoutPolicyListener.php line 78

Open in your IDE?
  1. <?php
  3. namespace App\Listener\Security;
  5. use App\Entity\Notification;
  6. use App\Entity\Notification\StaffNotification;
  7. use App\Entity\User;
  8. use Doctrine\ORM\EntityManagerInterface;
  9. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  10. use Symfony\Component\HttpFoundation\RequestStack;
  11. use Symfony\Component\Security\Core\AuthenticationEvents;
  12. use Symfony\Component\Security\Core\Event\AuthenticationEvent;
  13. use Symfony\Component\Security\Core\Event\AuthenticationFailureEvent;
  14. use Symfony\Component\Security\Core\Exception\CustomUserMessageAuthenticationException;
  16. class LockoutPolicyListener implements EventSubscriberInterface
  17. {
  18.     /**
  19.      * @var EntityManagerInterface
  20.      */
  21.     private $em;
  22.     /**
  23.      * @var int
  24.      */
  25.     private $lockoutPolicy;
  26.     /**
  27.      * @var RequestStack
  28.      */
  29.     private $requestStack;
  31.     public static function getSubscribedEvents()
  32.     {
  33.         return [
  34.             AuthenticationEvents::AUTHENTICATION_FAILURE => 'onFailure',
  35.             AuthenticationEvents::AUTHENTICATION_SUCCESS => 'onSuccess',
  36.         ];
  37.     }
  39.     public function __construct(EntityManagerInterface $em, RequestStack $requestStack, int $lockoutPolicy)
  40.     {
  41.         $this->em = $em;
  42.         $this->lockoutPolicy = $lockoutPolicy;
  43.         $this->requestStack = $requestStack;
  44.     }
  46.     public function onFailure(AuthenticationFailureEvent $event)
  47.     {
  48.         $email = $event->getAuthenticationToken()->getCredentials()['_username'];
  49.         $user = $this->em->getRepository(User::class)->findUser($email);
  50.         if (!$user instanceof User) {
  51.             return;
  52.         }
  53.         if ($user->getGroups()->isEmpty()) {
  54.             return;
  55.         }
  56.         if ($user->isRemoved()) {
  57.             return;
  58.         }
  59.         if ($user->getFailures() >= $this->lockoutPolicy) {
  60.             throw new CustomUserMessageAuthenticationException('account.locked');
  61.         }
  63.         $user->incrementFailures();
  64.         if ($user->getFailures() >= $this->lockoutPolicy) {
  65.             // Create staff notification
  66.             $notification = (new StaffNotification())->setup(
  67.                 $user,
  68.                 sprintf('User %s has been blocked due to too many consecutive authentication failures.', $user->getEmail()),
  69.                 sprintf('user.lockout.%d', $user->getId()),
  70.                 'staff.users.index',
  71.                 false
  72.             );
  73.             $this->em->getRepository(Notification::class)->notifyStaff($notification, false);
  74.         }
  75.         $this->em->flush();
  76.     }
  78.     public function onSuccess(AuthenticationEvent $event)
  79.     {
  80.         $user = $event->getAuthenticationToken()->getUser();
  81.         if (!$user instanceof User) {
  82.             return;
  83.         }
  84.         $user->resetFailures();
  85.         $this->em->flush();
  86.     }
  87. }