src/EventListener/AuthenticationPostListener.php line 33

Open in your IDE?
  1. <?php
  3. namespace App\EventListener;
  5. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  6. use Symfony\Component\HttpKernel\Event\RequestEvent;
  7. use Symfony\Component\HttpKernel\KernelEvents;
  8. use Symfony\Component\Security\Core\Security;
  9. use Symfony\Component\HttpFoundation\RedirectResponse;
  10. use Symfony\Component\Routing\RouterInterface;
  11. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  13. class AuthenticationPostListener implements EventSubscriberInterface
  14. {
  15.     private $security;
  16.     private $router;
  17.     private $tokenStorage;
  19.     public function __construct(Security $security, RouterInterface $router, TokenStorageInterface $tokenStorage)
  20.     {
  21.         $this->security = $security;
  22.         $this->router = $router;
  23.         $this->tokenStorage = $tokenStorage;
  24.     }
  26.     public static function getSubscribedEvents()
  27.     {
  28.         return [
  29.             KernelEvents::REQUEST => ['onKernelRequest', 5]
  30.         ];
  31.     }
  33.     public function onKernelRequest(RequestEvent $event)
  34.     {
  35.        
  36.         $request = $event->getRequest();
  37.         //dump($request->getPathInfo());
  38.         //exit;
  39.         if (in_array($request->getPathInfo(), ['/login', '/login_check', '/reinitialize', '/logout'])) {
  40.             // Skip checks for these paths
  41.             return;
  42.         }
  43.         
  44.       
  45.         $token = $this->tokenStorage->getToken();
  46.         
  47.         if ($token && $this->security->isGranted('IS_AUTHENTICATED_FULLY')) {
  48.             $user = $token->getUser();
  49.             
  51.             // Check for password expiration or any other condition
  52.             if ($this->hasPasswordExpired($user->getDateMajMdp())) {
  53.                 $response = new RedirectResponse($this->router->generate('ctsweb_front_login'));
  54.                 $event->setResponse($response);
  55.                 return;
  56.             }
  58.         }
  59.     }
  61.     public function hasPasswordExpired(\DateTime $passwordUpdateDate) {
  62.         $interval = date_interval_create_from_date_string("90 days");
  63.         $passwordUpdateDate = $passwordUpdateDate->format('Y-m-d H:i:s');
  64.         $expirationDate = date_add(new \DateTime($passwordUpdateDate), $interval);
  65.         $dateNow = (new \DateTime())->setTimezone(new \DateTimeZone('Europe/Paris'));
  66.         return $expirationDate < $dateNow;
  67.     }
  68. }