src/EventSubscriber/SessionIdleSubscriber.php line 43

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber;
  5. use App\Entity\User;
  6. use Symfony\Component\HttpFoundation\RedirectResponse;
  7. use Symfony\Component\HttpFoundation\Session\SessionInterface;
  8. use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
  9. use Symfony\Component\HttpKernel\HttpKernelInterface;
  10. use Symfony\Component\Routing\RouterInterface;
  11. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  12. use Symfony\Component\HttpKernel\Event\RequestEvent;
  13. use Symfony\Component\HttpKernel\KernelEvents;
  14. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  15. use Symfony\Component\DependencyInjection\ParameterBag\ParameterBagInterface;
  16. use Symfony\Component\HttpFoundation\Session\Flash\FlashBagInterface;
  21. class SessionIdleSubscriber implements EventSubscriberInterface
  22. {
  23.     protected $session;
  24.     protected $tokenStorage;
  25.     protected $router;
  26.     protected $sessionIdleTime;
  27.     protected $flashBag;
  29.     public function __construct(
  30.         SessionInterface $session,
  31.         TokenStorageInterface $tokenStorage,
  32.         RouterInterface $router,
  33.         ParameterBagInterface $params,
  34.         FlashBagInterface $flashBag
  35.     ) {
  36.         $this->session         = $session;
  37.         $this->tokenStorage    = $tokenStorage;
  38.         $this->router          = $router;
  39.         $this->sessionIdleTime = $params->get('session_idle_time') ?? 0; //$sessionIdleTime equal to session_idle_time if is defined in parameters section, zero else
  40.         $this->flashBag        = $flashBag;
  41.     }
  43.     public function onKernelRequest(RequestEvent $event)
  44.     {
  45.        
  46.         if (HttpKernelInterface::MASTER_REQUEST != $event->getRequestType()) {
  48.             return;
  49.         }
  51.         if ($this->sessionIdleTime > 0) {
  52.             // Get the difference between now and the time of last action make it by user
  53.             $lapse = time() - $this->session->getMetadataBag()->getLastUsed(); 
  55.             if (null !== $this->tokenStorage->getToken() && "anon." !== $this->tokenStorage->getToken()->getUser()) {// if user is logged in
  56.                 $roles = $this->tokenStorage->getToken()->getUser()->getRoles();
  57.                 if ($lapse > $this->sessionIdleTime && true === in_array("ROLE_APP",$roles)) {
  58.                     $this->tokenStorage->setToken(null);
  59.                     //$this->flashBag->add('danger', "session destroy");
  60.                     if($event->getRequest()->isXmlHttpRequest()){
  61.                         throw new AccessDeniedHttpException('Session Expired.');// return status 403 for ajax call 
  62.                     } else {
  63.                         $event->setResponse(new RedirectResponse($this->router->generate('app_page_index')));
  64.                     }
  65.                 }
  67.             }
  68.             
  69.         }
  70.     }
  72.       /**
  73.      * @inheritDoc
  74.      */
  75.     public static function getSubscribedEvents()
  76.     {
  77.         return [
  78.             // must be registered before (i.e. with a higher priority than) the default Locale listener
  79.             KernelEvents::REQUEST => [['onKernelRequest', 1]]
  80.         ];
  81.     }
  82. }