src/EventListener/RefreshTokenValidator.php line 50

Open in your IDE?
  1. <?php
  3. namespace App\EventListener;
  5. use App\Security\User;
  6. use Symfony\Component\HttpFoundation\RedirectResponse;
  7. use Symfony\Component\HttpFoundation\Session\Flash\FlashBagInterface;
  8. use Symfony\Component\HttpFoundation\Session\SessionInterface;
  9. use Symfony\Component\HttpKernel\Event\GetResponseEvent;
  10. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  11. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  12. use Symfony\Component\Security\Core\Security;
  14. class RefreshTokenValidator
  15. {
  16.     /** @var UrlGeneratorInterface */
  17.     protected $urlGenerator;
  19.     /** @var TokenStorageInterface */
  20.     protected $token;
  22.     /** @var FlashBagInterface */
  23.     protected $flashBag;
  25.     /** @var Security */
  26.     protected $security;
  28.     /** @var SessionInterface */
  29.     protected $session;
  31.     /**
  32.      * DbLoader constructor.
  33.      *
  34.      * @param UrlGeneratorInterface $urlGenerator
  35.      * @param TokenStorageInterface $token
  36.      */
  37.     public function __construct(TokenStorageInterface $token, UrlGeneratorInterface $urlGenerator, FlashBagInterface $flashBag, Security $security, SessionInterface $session)
  38.     {
  39.         $this->token        = $token;
  40.         $this->urlGenerator = $urlGenerator;
  41.         $this->flashBag     = $flashBag;
  43.         $this->security = $security;
  44.         $this->session = $session;
  45.     }
  47.     /**
  48.      * @param GetResponseEvent $event
  49.      */
  50.     public function onKernelRequest(GetResponseEvent $event)
  51.     {
  52.         $token = $this->token->getToken();
  54.         if (!empty($token) && $event->getRequest()->get('_route') != 'app_login')
  55.         {
  56.             /** @var User $user */
  57.             $user = $token->getUser();
  59.             if ($user instanceof User && $user->getToken()->isRefreshFailed())
  60.             {
  61.                 /* Add prefix to make this messages translatable */
  62.                 $errMsg = sprintf('login.%s', 'Invalid refresh token');
  63.                 $this->flashBag->add('danger', $errMsg);
  65.                 $this->security->getToken()->setAuthenticated(false);
  66.                 /* No session, no flashbag. */
  67. //            $this->session->invalidate();
  69.                 $event->setResponse(new RedirectResponse($this->urlGenerator->generate('app_login')));
  70.             }
  71.         }
  72.     }
  73. }