src/Security/SessionIdleHandler.php line 45

Open in your IDE?
  1. <?php
  3. namespace App\Security;
  5. use Symfony\Component\HttpKernel\HttpKernelInterface;
  6. use Symfony\Component\HttpKernel\Event\RequestEvent;
  7. use Symfony\Component\HttpFoundation\Session\SessionInterface;
  8. use Symfony\Component\Routing\RouterInterface;
  9. use Symfony\Component\HttpFoundation\RedirectResponse;
  10. use Symfony\Component\HttpFoundation\RequestStack;
  11. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  13. class SessionIdleHandler
  14. {
  15.     
  16.     protected $session;
  17.     protected $securityToken;
  18.     protected $router;
  19.     protected $maxIdleTime;
  20.     protected $requestStack;
  21.     
  22.     public function __construct($maxIdleTime, TokenStorageInterface $securityToken, RouterInterface $router, RequestStack $requestStack)
  23.     {
  24.         $this->requestStack = $requestStack;
  25.         $this->session = null; 
  26.         $this->securityToken = $securityToken;
  27.         $this->router = $router;
  28.         $this->maxIdleTime = $maxIdleTime;
  29.     }
  30.     
  31.     public function onKernelRequest(RequestEvent $event)
  32.     {
  33.         if (HttpKernelInterface::MASTER_REQUEST != $event->getRequestType()) {
  34.             
  35.             return;
  36.         }
  37.         
  38.         if(is_null($this->session)) {
  39.             $this->session = $this->requestStack->getSession();
  40.         }
  41.         
  42.         if ($this->maxIdleTime > 0) {
  43.             
  44.             $this->session->start();
  45.             $lapse = time() - $this->session->getMetadataBag()->getLastUsed();
  46.             
  47.             if ($lapse > $this->maxIdleTime) {
  48.                 
  49.                 $this->securityToken->setToken(null);
  50.                 $this->session->getFlashBag()->set('info', 'You have been logged out due to inactivity.');
  51.                 
  52.                 // logout is defined in security.yaml.  See 'Logging Out' section here:
  53.                 // https://symfony.com/doc/4.1/security.html
  54.                 $event->setResponse(new RedirectResponse($this->router->generate('app_logout')));
  55.             }
  56.         }
  57.     }
  58. }