vendor/eckinox/security-bundle/src/EventSubscriber/PasswordChangeSubscriber.php line 32

Open in your IDE?
  1. <?php
  3. namespace Eckinox\SecurityBundle\EventSubscriber;
  5. use App\Entity\Security\AppUser;
  6. use App\Entity\Security\User;
  7. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  8. use Symfony\Component\HttpFoundation\RedirectResponse;
  9. use Symfony\Component\HttpKernel\Event\RequestEvent;
  10. use Symfony\Component\HttpKernel\KernelEvents;
  11. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  12. use Symfony\Component\Security\Core\Security;
  14. class PasswordChangeSubscriber implements EventSubscriberInterface
  15. {
  16.     private Security $security;
  17.     private UrlGeneratorInterface $urlGenerator;
  19.     public function __construct(Security $security, UrlGeneratorInterface $urlGenerator)
  20.     {
  21.         $this->security = $security;
  22.         $this->urlGenerator = $urlGenerator;
  23.     }
  25.     public static function getSubscribedEvents(): array
  26.     {
  27.         return [
  28.             KernelEvents::REQUEST => [['forcePasswordChange', 0]],
  29.         ];
  30.     }
  32.     public function forcePasswordChange(RequestEvent $event): void
  33.     {
  34.         $route = $event->getRequest()->get('_route');
  35.         
  36.         if (!$event->isMainRequest()) {
  37.             return;
  38.         }
  40.         $user = $this->security->getUser();
  41.         // if you do not have a valid user, it means it's not an authenticated request, so it's not our concern
  42.         if ($user instanceof AppUser) {
  43.             $route = "eckinox_security_app_user_create_password";
  44.             $twoFARoute = 'eckinox_app_2fa_login';
  45.         } elseif ($user instanceof User) {
  46.             $route = "eckinox_security_user_create_password";
  47.             $twoFARoute = 'eckinox_2fa_login';
  48.         } else {
  49.             return;    
  50.         }
  52.         if($event->getRequest()->get('_route') === $twoFARoute) {
  53.             return;
  54.         }
  56.         // if we are visiting the password change route, no need to redirect
  57.         // otherwise we'd create an infinite redirection loop
  58.         if ($event->getRequest()->get('_route') === $route) {
  59.             return;
  60.         }
  62.         // if it's not their first login, and they do not need to change their password, move on
  63.         if (!$user->isPasswordChangeRequired()) {
  64.             return;
  65.         }
  67.         // if we get here, it means we need to redirect them to the password change view.
  68.         $event->setResponse(new RedirectResponse($this->urlGenerator->generate($route)));
  70.     }
  71. }
  73. ?>