src/EventSubscriber/ForceChangePasswordSubscriber.php line 38

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber;
  5. use App\Entity\Consultant;
  6. use App\Entity\User;
  7. use App\Service\Entity\ConsultantService;
  8. use Symfony\Component\Console\Logger\ConsoleLogger;
  9. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  10. use Symfony\Component\HttpKernel\KernelEvents;
  11. use Symfony\Component\HttpKernel\Event\RequestEvent;
  12. use Symfony\Component\HttpFoundation\RedirectResponse;
  13. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  14. use Symfony\Component\Security\Core\Security;
  16. class ForceChangePasswordSubscriber implements EventSubscriberInterface
  17. {
  18.     private $security;
  19.     private $urlGenerator;
  20.     private $consultantService;
  22.     public function __construct(Security $security, UrlGeneratorInterface $urlGenerator, ConsultantService $consultantService)
  23.     {
  24.         $this->security = $security;
  25.         $this->urlGenerator = $urlGenerator;
  26.         $this->consultantService = $consultantService;
  27.     }
  29.     public static function getSubscribedEvents(): array
  30.     {
  31.         return [
  32.             KernelEvents::REQUEST => [
  33.                 ['forcePasswordChange', 0]
  34.             ],
  35.         ];
  36.     }
  38.     public function forcePasswordChange(RequestEvent $event): void
  39.     {
  40.         // only deal with the main request, disregard subrequests
  41.         if (!$event->isMainRequest()) {
  42.             return;
  43.         }
  45.         $user = $this->security->getUser();
  46.         // if you do not have a valid user, it means it's not an authenticated request, so it's not our concern
  47.         if (!$user instanceof User) {
  48.             return;
  49.         }
  51.         if (!$user instanceof Consultant || !$this->consultantService->consultantNeedToResetPassword($user)) {
  52.             return;
  53.         }
  55.         // if we get here, it means we need to redirect them to the password change view.
  56.         $redirectTo = $this->urlGenerator->generate('changepassword');
  57.         if ($event->getRequest()->getRequestUri() != $redirectTo) {
  58.             $event->setResponse(new RedirectResponse($redirectTo));
  59.         }
  60.     }
  61. }