src/EventSubscriber/SecuritySubscriber.php line 66

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber;
  5. use App\Admin\Entity\StdUsers;
  6. use App\Admin\Entity\StdUsersLoginAudit;
  7. use Doctrine\ORM\EntityManagerInterface;
  8. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  9. use App\Event\StdWebUsersLoggedInEvent;
  10. use Symfony\Component\HttpFoundation\JsonResponse;
  11. use Symfony\Component\HttpFoundation\RedirectResponse;
  12. use Symfony\Component\HttpFoundation\RequestStack;
  13. use Symfony\Component\Security\Http\Event\LoginSuccessEvent;
  14. use Symfony\Component\Security\Http\Event\LogoutEvent;
  15. use Symfony\Contracts\EventDispatcher\EventDispatcherInterface;
  17. class SecuritySubscriber implements EventSubscriberInterface
  18. {
  19.     private $entityManager;
  20.     private $dispatcher;
  21.     private $requestStack;
  23.     public function __construct(
  24.         EntityManagerInterface $entityManager,
  25.         EventDispatcherInterface $dispatcher,
  26.         RequestStack $requestStack
  27.     ) {
  28.         $this->entityManager = $entityManager;
  29.         $this->dispatcher = $dispatcher;
  30.         $this->requestStack = $requestStack;
  31.     }
  32.     
  33.     public static function getSubscribedEvents(): array
  34.     {
  35.         return [
  36.             LoginSuccessEvent::class => ['onLoginSuccess'],
  37.             LogoutEvent::class => ['onLogout']
  38.         ];
  39.     }
  40.     
  41.     public function onLoginSuccess(LoginSuccessEvent $event): void
  42.     {
  43.         // Firewall name for webusers. Check config/packages/security.yaml
  44.         if ($event->getFirewallName() == 'main')
  45.         {
  46.             if ($event->getRequest()->isXmlHttpRequest())
  47.             {
  48.                 $currentResponse = $event->getResponse();
  49.                 if ($currentResponse instanceof RedirectResponse)
  50.                 {
  51.                     $response = new JsonResponse([
  52.                         'targetUrl' => $currentResponse->getTargetUrl()
  53.                     ], \Symfony\Component\HttpFoundation\Response::HTTP_OK);
  54.                     $event->setResponse($response);
  55.                 }
  56.                 elseif (!$currentResponse instanceof JsonResponse) {
  57.                     $response = new JsonResponse(['success' => true, 'html'=>$currentResponse->getContent()], \Symfony\Component\HttpFoundation\Response::HTTP_OK);
  58.                     $event->setResponse($response);
  59.                 }
  60.             }
  61.                         $webUsersEvent=new StdWebUsersLoggedInEvent($event->getUser(), $event->getResponse());
  62.             $this->dispatcher->dispatch($webUsersEvent,StdWebUsersLoggedInEvent::NAME);
  63.         }
  64.     }
  66.     public function onLogout(LogoutEvent $event): void
  67.     {
  68.         $token = $event->getToken();
  69.         
  70.         if (!$token) {
  71.             return;
  72.         }
  73.         
  74.         $user = $token->getUser();
  75.         
  76.         // Only log if user is a StdUsers instance (backoffice users)
  77.         if (!$user instanceof StdUsers) {
  78.             return;
  79.         }
  80.         
  81.         $request = $event->getRequest();
  82.         $session = $request->getSession();
  83.         // NOT WORKING FOR NOW
  84.         // Get the login audit ID from session (stored during login)
  85.         $loginAuditId = $session->get('_login_audit_id');
  86.         
  87.         if (!$loginAuditId) {
  88.             return;
  89.         }
  90.         
  91.         // Find the login audit record by ID
  92.         $loginAudit = $this->entityManager
  93.             ->getRepository(StdUsersLoginAudit::class)
  94.             ->find($loginAuditId);
  95.         
  96.         // If found and not already logged out, update the logout timestamp and calculate session duration
  97.         if ($loginAudit && !$loginAudit->getLogoutTimestamp()) {
  98.             $logoutTime = new \DateTime();
  99.             $loginAudit->setLogoutTimestamp($logoutTime);
  100.             
  101.             // Calculate session duration in seconds
  102.             $loginTime = $loginAudit->getLoginTimestamp();
  103.             $duration = $logoutTime->getTimestamp() - $loginTime->getTimestamp();
  104.             $loginAudit->setSessionDuration($duration);
  105.             
  106.             $this->entityManager->persist($loginAudit);
  107.             $this->entityManager->flush();
  108.             
  109.             // Clean up the session variable
  110.             $session->remove('_login_audit_id');
  111.         }
  112.     }
  113. }