src/EventSubscriber/UserSecurityCheckSubscriber.php line 61

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber;
  5. use App\Controller\ApiController;
  6. use App\Controller\AuthController;
  7. use App\Controller\ClientController;
  8. use App\Controller\FrontendController;
  9. use App\Entity\User;
  10. use Gregwar\CaptchaBundle\Controller\CaptchaController;
  11. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  12. use Symfony\Component\HttpFoundation\RedirectResponse;
  13. use Symfony\Component\HttpKernel\Event\KernelEvent;
  14. use Symfony\Component\HttpKernel\KernelEvents;
  15. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  16. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  17. use Symfony\Component\Security\Core\Security;
  18. use Symfony\Component\Security\Guard\Token\PostAuthenticationGuardToken;
  20. class UserSecurityCheckSubscriber implements EventSubscriberInterface
  21. {
  22.     public const SESSION_KEY = 'auth/securityCheckPassed';
  24.     /** @var UrlGeneratorInterface */
  25.     private $urlGenerator;
  27.     /** @var User */
  28.     private $user;
  30.     /**
  31.      * UserSecurityCheckSubscriber constructor.
  32.      * @param UrlGeneratorInterface $urlGenerator
  33.      * @param TokenStorageInterface $tokenStorage
  34.      * @param Security $security
  35.      */
  36.     public function __construct(UrlGeneratorInterface $urlGenerator, TokenStorageInterface $tokenStorage)
  37.     {
  38.         $this->urlGenerator = $urlGenerator;
  39.         try {
  40.             $token = $tokenStorage->getToken();
  41.             if ($token instanceof PostAuthenticationGuardToken) {
  42.                 $this->user = $token->getUser();
  43.             }
  44.         } catch (\Exception $e) {
  45.             $this->user = null;
  46.         }
  47.     }
  49.     public function onKernelController(KernelEvent $event) {
  50.         $request = $event->getRequest();
  51.         $controller = $event->getController();
  52.         $controllerClassName = null;
  53.         if (is_array($controller)) {
  54.             $controllerClassName = get_class($controller[0]);
  55.         } else {
  56.             $controllerClassName = get_class($controller);
  57.         }
  59.         $isLoggedIn = $this->user !== null;
  60.         $isFullUser = $isLoggedIn && $this->user->hasRole('FULL_USER');
  61.         $isSecurityCheckPassed = $request->getSession()->get(self::SESSION_KEY) === true;
  62.         $protectedControllers = [ClientController::class, ApiController::class];
  63.         $allowedControllers = [FrontendController::class, CaptchaController::class];
  64.         $isControllerAllowed = !in_array($controllerClassName, $protectedControllers);
  65.         $isEmailConfirmed = $isLoggedIn && $this->user->getIsEmailConfirmed();
  67.         if (in_array($controllerClassName, $allowedControllers)) {
  68.             return;
  69.         }
  71. //        if ($isLoggedIn && !$isEmailConfirmed) {
  72. //            if ($controllerClassName !== AuthController::class ||
  73. //                $controller[1] !== 'loginSecurityEmail'
  74. //            ) {
  75. //                $event->setController(function () {
  76. //                    return new RedirectResponse($this->urlGenerator->generate('login_security_email'));
  77. //                });
  78. //            }
  79. //
  80. //            return;
  81. //        }
  83.         if ($isFullUser && !$isControllerAllowed && !$isSecurityCheckPassed && $isEmailConfirmed) {
  84.             $event->setController(function() {
  85.                 return new RedirectResponse($this->urlGenerator->generate('login_security_check'));
  86.             });
  87.         }
  88.     }
  91.     public static function getSubscribedEvents()
  92.     {
  93.         return [
  94.             KernelEvents::CONTROLLER => 'onKernelController',
  95.         ];
  96.     }
  97. }