src/Listener/SessionListener.php line 46

Open in your IDE?
  1. <?php
  2. /*
  3.  * This file is part of the Novo SGA project.
  4.  *
  5.  * (c) Rogerio Lino <rogeriolino@gmail.com>
  6.  *
  7.  * For the full copyright and license information, please view the LICENSE
  8.  * file that was distributed with this source code.
  9.  */
  10. namespace App\Listener;
  11. use Novosga\Entity\Usuario;
  12. use Novosga\Http\Envelope;
  13. use Symfony\Component\HttpFoundation\JsonResponse;
  14. use Symfony\Component\HttpFoundation\RedirectResponse;
  15. use Symfony\Component\HttpKernel\Event\RequestEvent;
  16. use Symfony\Component\HttpKernel\HttpKernelInterface;
  17. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  18. use Symfony\Contracts\Translation\TranslatorInterface;
  19. /**
  20.  * SessionListener
  21.  *
  22.  * @author Rogerio Lino <rogeriolino@gmail.com>
  23.  */
  24. class SessionListener extends AppListener
  25. {
  26.     /**
  27.      * @var TokenStorageInterface
  28.      */
  29.     private $tokenStorage;
  30.     
  31.     /**
  32.      * @var TranslatorInterface
  33.      */
  34.     private $translator;
  35.     
  36.     public function __construct(TokenStorageInterface $tokenStorageTranslatorInterface $translator)
  37.     {
  38.         $this->tokenStorage $tokenStorage;
  39.         $this->translator   $translator;
  40.     }
  41.     
  42.     public function onKernelRequest(RequestEvent $event)
  43.     {
  44.         if (HttpKernelInterface::MASTER_REQUEST !== $event->getRequestType()) {
  45.             return;
  46.         }
  47.         
  48.         $token   $this->tokenStorage->getToken();
  49.         $request $event->getRequest();
  50.         $session $request->getSession();
  51.         if (!$this->isApiRequest($request) && $token) {
  52.             $user      $token->getUser();
  53.             $sessionId $session $session->getId() : '-';
  54.             if ($user instanceof Usuario && $user->getSessionId() !== $sessionId) {
  55.                 $request $event->getRequest();
  56.             
  57.                 if ($request->isXmlHttpRequest()) {
  58.                     $error    $this->translator->trans('session.invalid');
  59.                     $envelope = new Envelope();
  60.                     $envelope->setSuccess(false);
  61.                     $envelope->setSessionStatus('inactive');
  62.                     $envelope->setMessage($error);
  63.                     $response = new JsonResponse($envelope);
  64.                 } else {
  65.                     $url $request->getBaseUrl() . '/logout';
  66.                     $response = new RedirectResponse($url);
  67.                 }
  68.                 $event->setResponse($response);
  69.             }
  70.         }
  71.     }
  72. }