src/EventListener/RequestListener.php line 38

Open in your IDE?
  1. <?php
  3. /**
  4.  * Created by Mediterranean Develup Solutions.
  5.  * User: Carlos.Rojas
  6.  * Date: 13/06/2017
  7.  * Time: 13:50
  8.  */
  9. namespace App\EventListener;
  11. use App\Entity\User;
  12. use Doctrine\ORM\EntityManager;
  13. use Symfony\Bundle\FrameworkBundle\Controller\Controller;
  14. use Symfony\Component\BrowserKit\Response;
  15. use Symfony\Component\HttpFoundation\Session\Session;
  16. use Symfony\Component\HttpKernel\Event\GetResponseEvent;
  17. use Symfony\Component\HttpKernel\Exception\HttpException;
  18. use Symfony\Component\HttpKernel\HttpKernel;
  19. use Symfony\Component\HttpKernel\HttpKernelInterface;
  20. use Symfony\Component\HttpFoundation\RedirectResponse;
  21. use Symfony\Component\HttpKernel\Event\RequestEvent;
  22. use Symfony\Component\Routing\RouterInterface;
  23. use Symfony\Component\Security\Core\Exception\BadCredentialsException;
  26. class RequestListener
  27. {
  28.     protected $em;
  29.     private $router;
  31.     function __construct(EntityManager $em, RouterInterface $router)
  32.     {
  33.         $this->em = $em;
  34.         $this->router = $router;
  35.     }
  38.     public function onKernelRequest(RequestEvent $event)
  39.     {
  40.         $session = new Session();
  41.         $token_session = $session->get('access_token');
  42.         $email = $session->get('_security.last_username');
  44.         if (!is_null($token_session) && ($email != 'cjdevelup_admin@develup.solutions')){
  47.             $repository = $this->em->getRepository(User::class);
  48.             $usuario = $repository->findOneByEmail($email);
  50.             $token_database = $usuario->getAccessKey();
  52.             /*
  53.              * Si el token almacenado en sesion es distinto al token que esta en ese momento en
  54.              * la base de datos significa que alguien (en otra sesion) ha echo login con ese
  55.              * usuario.
  56.              */
  57.             if ($token_session !== $token_database){
  59.                 $session->set('access_token', null);
  60.                 $url = $this->router->generate('kickout');
  61.                 $event->setResponse(new RedirectResponse($url));
  63.             }
  65.         }
  67.     }
  68. }