src/StartPlatz/Bundle/UserBundle/EventSubscriber/ForcePasswordResetSubscriber.php line 36

Open in your IDE?
  1. <?php declare(strict_types=1);
  3. namespace App\StartPlatz\Bundle\UserBundle\EventSubscriber;
  5. use App\StartPlatz\Bundle\UserBundle\Entity\User;
  6. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  7. use Symfony\Component\HttpFoundation\RedirectResponse;
  8. use Symfony\Component\HttpKernel\Event\RequestEvent;
  9. use Symfony\Component\HttpKernel\KernelEvents;
  10. use Symfony\Component\Routing\RouterInterface;
  11. use Symfony\Component\Security\Core\Security;
  13. class ForcePasswordResetSubscriber implements EventSubscriberInterface
  14. {
  15.     private const ALLOWED_ROUTES = [
  16.         'password_reset_set',
  17.         'password_reset_submit',
  18.         'logout',
  19.         '_wdt',
  20.         '_profiler',
  21.     ];
  23.     public function __construct(
  24.         private readonly Security $security,
  25.         private readonly RouterInterface $router,
  26.     ) {
  27.     }
  29.     public static function getSubscribedEvents(): array
  30.     {
  31.         return [
  32.             KernelEvents::REQUEST => ['onKernelRequest', -1],
  33.         ];
  34.     }
  36.     public function onKernelRequest(RequestEvent $event): void
  37.     {
  38.         if (!$event->isMainRequest()) {
  39.             return;
  40.         }
  42.         $user = $this->security->getUser();
  43.         if (!$user instanceof User || !$user->getMustResetPassword()) {
  44.             return;
  45.         }
  47.         $route = $event->getRequest()->attributes->get('_route');
  48.         if (in_array($route, self::ALLOWED_ROUTES, true)) {
  49.             return;
  50.         }
  52.         $event->getRequest()->getSession()->getFlashBag()->add(
  53.             'notice',
  54.             'Aus Sicherheitsgründen musst du ein neues Passwort setzen.'
  55.         );
  57.         $url = $this->router->generate('password_reset_set');
  58.         $event->setResponse(new RedirectResponse($url));
  59.     }
  60. }