src/EventSubscriber/PasswordExpirationManager.php line 33

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber;
  5. use App\Entity\User;
  6. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  7. use Symfony\Component\HttpKernel\KernelEvents;
  8. use Symfony\Component\HttpKernel\Event\RequestEvent;
  9. use Symfony\Component\HttpFoundation\RedirectResponse;
  10. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  11. use Symfony\Component\Security\Core\Security;
  13. class PasswordExpirationManager implements EventSubscriberInterface
  14. {
  15.     private $security;
  16.     private $urlGenerator;
  18.     public function __construct(Security $security, UrlGeneratorInterface $urlGenerator)
  19.     {
  20.         $this->security = $security;
  21.         $this->urlGenerator = $urlGenerator;
  22.     }
  24.     public static function getSubscribedEvents(): array
  25.     {
  26.         return [
  27.             KernelEvents::REQUEST => [
  28.                 ['forcePasswordChange', 0]
  29.             ],
  30.         ];
  31.     }
  33.     public function forcePasswordChange(RequestEvent $event): void
  34.     {
  35.         // only deal with the main request, disregard subrequests
  36.         if (!$event->isMainRequest()) {
  37.             return;
  38.         }
  40.         $user = $this->security->getUser();
  41.         // if you do not have a valid user, it means it's not an authenticated request, so it's not our concern
  42.         if (!$user instanceof User) {
  43.             return;
  44.         }
  46.         // if it's not their first login, and they do not need to change their password, move on
  47.          $now_date = strtotime(date("Y-m-d H:i:s"));
  48.         $pastChange_date = strtotime($user->getLastPasswordChange());
  49.         //dd($pastChange_date);
  50.         $timePassed = abs($now_date - $pastChange_date)/(60 * 60 * 24);
  51.         //dd($timePassed);
  52.         if ($user->getForcePasswordChange() == 1 && $timePassed < 90) {
  53.             return;
  54.         }
  56.         // if we get here, it means we need to redirect them to the password change view.
  57.         $redirectTo = $this->urlGenerator->generate('app_reset_password_no_token');
  58.         if ($event->getRequest()->getRequestUri() != $redirectTo){
  59.             $event->setResponse(new RedirectResponse($redirectTo));
  60.         }
  61.         return;
  62.     }
  63. }