src/Bundles/UserBundle/EventListener/SessionIdleHandler.php line 28

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Bundles\UserBundle\EventListener;
  7. use App\Bundles\UserBundle\Service\User\UserLogoutService;
  8. use App\Platform\Service\SessionProvider;
  9. use Symfony\Component\EventDispatcher\Attribute\AsEventListener;
  10. use Symfony\Component\HttpFoundation\RedirectResponse;
  11. use Symfony\Component\HttpFoundation\Session\SessionInterface;
  12. use Symfony\Component\HttpKernel\Event\RequestEvent;
  13. use Symfony\Component\HttpKernel\HttpKernelInterface;
  14. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  15. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  17. #[AsEventListener(event: RequestEvent::class, method: 'onKernelRequest')]
  18. class SessionIdleHandler
  19. {
  20.     public function __construct(
  21.         private readonly UserLogoutService $userLogoutService,
  22.         private readonly SessionProvider $sessionProvider,
  23.         private readonly TokenStorageInterface $tokenStorage,
  24.         private readonly int $sessionIdleTime,
  25.     ) {
  26.     }
  28.     public function onKernelRequest(RequestEvent $event): void
  29.     {
  30.         if ($event->getRequestType() !== HttpKernelInterface::MAIN_REQUEST) {
  31.             return;
  32.         }
  34.         if (!$token = $this->tokenStorage->getToken()) {
  35.             return;
  36.         }
  38.         if ($this->sessionIdleTime <= 0) {
  39.             return;
  40.         }
  42.         $session = $this->sessionProvider->provide();
  43.         $session->start();
  44.         $lapse = time() - $session->getMetadataBag()->getLastUsed();
  46.         if ($lapse > $this->sessionIdleTime) {
  47.             $this->logoutAndRedirectUser($event, $token, $session);
  48.         }
  49.     }
  51.     private function logoutAndRedirectUser(RequestEvent $event, TokenInterface $token, SessionInterface $session): void
  52.     {
  53.         $this->userLogoutService->logout($event->getRequest(), $token, $session);
  54.         $event->setResponse(new RedirectResponse('/login?expiredSession=true'));
  55.     }
  56. }