src/Security/Voter/IsActiveSessionVoter.php line 16

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Utils\KeycloakAdmin;
  6. use Symfony\Component\EventDispatcher\EventDispatcherInterface;
  7. use Symfony\Component\HttpFoundation\RedirectResponse;
  8. use Symfony\Component\HttpFoundation\RequestStack;
  9. use Symfony\Component\HttpKernel\Event\ResponseEvent;
  10. use Symfony\Component\HttpKernel\KernelEvents;
  11. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  12. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  13. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  14. use Symfony\Component\Security\Core\User\UserInterface;
  16. class IsActiveSessionVoter extends Voter
  17. {
  18.     /**
  19.      * @param RequestStack $requestStack
  20.      * @param EventDispatcherInterface $dispatcher
  21.      * @param UrlGeneratorInterface $urlGenerator
  22.      */
  23.     public function __construct(private readonly RequestStack             $requestStack,
  24.                                 private readonly EventDispatcherInterface $dispatcher,
  25.                                 private readonly UrlGeneratorInterface    $urlGenerator)
  26.     {
  27.     }
  30.     protected function supports(string $attribute, $subject): bool
  31.     {
  32.         return $attribute == 'IS_ACTIVE_SESSION';
  33.     }
  36.     protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
  37.     {
  38.         $user = $token->getUser();
  39.         // if the user is anonymous, do not grant access
  40.         if (!$user instanceof UserInterface) {
  41.             return false;
  42.         }
  44.         $credentials = $this->requestStack->getSession()->get('tokenSecurity');
  45.         if ($credentials) {
  46.             $keycloak = new KeycloakAdmin(false);
  47.             if ($keycloak->isSessionActive()) {
  48.                 return true;
  49.             } else {
  50.                 $this->dispatcher->addListener(KernelEvents::RESPONSE, array($this, 'onKernelResponse'));
  51.             }
  52.         }
  54.         return false;
  55.     }
  57.     private function onKernelResponse(ResponseEvent $event)
  58.     {
  59.         $event->setResponse(new RedirectResponse(
  60.             $this->urlGenerator->generate('app_logout')
  61.         ));
  62.     }
  63. }