src/EventSubscriber/RedirectUserSubscriber.php line 41

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber;
  5. use App\Entity\User;
  6. use App\Helper\UserHelper;
  7. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  8. use Symfony\Component\HttpFoundation\RedirectResponse;
  9. use Symfony\Component\HttpKernel\Event\RequestEvent;
  10. use Symfony\Component\HttpKernel\HttpKernelInterface;
  11. use Symfony\Component\HttpKernel\KernelEvents;
  12. use Symfony\Component\Routing\RouterInterface as Router;
  13. use Symfony\Component\Security\Core\Exception\AuthenticationCredentialsNotFoundException;
  14. use Symfony\Component\Security\Core\Security;
  16. class RedirectUserSubscriber implements EventSubscriberInterface
  17. {
  19.     /**
  20.      * @var Security $security
  21.      */
  22.     public $security;
  24.     /**
  25.      * @var Router $router
  26.      */
  27.     public $router;
  29.     /**
  30.      * @var string $passwordPolicyDeadline
  31.      */
  32.     private string $passwordPolicyDeadline;
  34.     public function __construct(Security $security, Router $router, string $passwordPolicyDeadline)
  35.     {
  36.         $this->security = $security;
  37.         $this->router = $router;
  38.         $this->passwordPolicyDeadline = $passwordPolicyDeadline;
  39.     }
  41.     public function onKernelRequest(RequestEvent $event): void
  42.     {
  43.         $route = $event->getRequest()->get('_route');
  44.         $type = $event->getRequestType();
  46.         try {
  47.             if (HttpKernelInterface::MAIN_REQUEST === $type) {
  48.                 /** @var User $user */
  49.                 if ($user = $this->security->getUser()) {
  50.                     $allowedRoutes = ['first_login', 'update_password', 'user_profile', 'supplier_profile', 'app_logout', 'app_reset_password', 'app_forgot_password_request'];
  51.                     $passwordPolicyDeadline = new \DateTime($this->passwordPolicyDeadline);
  52.                     $now = new \DateTime();
  54.                     if ($now >= $passwordPolicyDeadline && !$user->isPasswordUpdatedForNewPolicy() && !in_array($route, $allowedRoutes)) {
  55.                         $event->setResponse(new RedirectResponse($this->router->generate('update_password')));
  56.                         return;
  57.                     }
  59.                     if (!$user->isSecured() && $route !== 'first_login') {
  60.                         $event->setResponse(new RedirectResponse($this->router->generate('first_login')));
  61.                         return;
  62.                     }
  63.                 }
  65.                 $isAdmin = $this->security->isGranted('ROLE_ADMIN');
  66.                 $isUser = $this->security->isGranted('ROLE_USER');
  68.                 if (($isAdmin || $isUser) && $route == 'fos_user_security_login') {
  69.                     $event->setResponse(new RedirectResponse($this->router->generate('dashboard')));
  70.                 }
  71.             }
  72.         } catch (AuthenticationCredentialsNotFoundException $e) {
  73.         }
  75.     }
  77.     public static function getSubscribedEvents(): array
  78.     {
  79.         return [
  80.             KernelEvents::REQUEST => 'onKernelRequest',
  81.         ];
  82.     }
  83. }