src/Security/SessionIdleHandler.php line 43

  1. <?php
  3. namespace App\Security;
  5. use Symfony\Component\HttpKernel\HttpKernelInterface;
  6. use Symfony\Component\HttpKernel\Event\RequestEvent;
  7. use Symfony\Component\HttpFoundation\Session\SessionInterface;
  8. use Symfony\Component\Routing\RouterInterface;
  9. use Symfony\Component\HttpFoundation\RedirectResponse;
  10. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  11. use Symfony\Component\HttpFoundation\RequestStack;
  13. class SessionIdleHandler
  14. {
  16.     protected $session;
  17.     protected TokenStorageInterface $securityToken;
  18.     protected RouterInterface $router;
  19.     protected $maxIdleTime;
  20.     protected RequestStack $requestStack;
  22.     public function __construct($maxIdleTime, RequestStack $requestStack, TokenStorageInterface $securityToken, RouterInterface $router)
  23.     {
  24.         $this->requestStack = $requestStack;
  25.         $this->securityToken = $securityToken;
  26.         $this->router = $router;
  27.         $this->maxIdleTime = $maxIdleTime;
  30.     }
  32.     public function onKernelRequest(RequestEvent  $event): void
  33.     {
  34.         $this->session = $this->requestStack->getSession();
  35.         if (HttpKernelInterface::MASTER_REQUEST != $event->getRequestType()) {
  37.             return;
  38.         }
  40.         if ($this->maxIdleTime > 0) {
  42.             $this->session->start();
  43.             $lapse = time() - $this->session->getMetadataBag()->getLastUsed();
  45.             if ($lapse > $this->maxIdleTime) {
  47.                 $this->securityToken->setToken(null);
  48.                 $this->session->getFlashBag()->set('info', 'You have been logged out due to inactivity.');
  50.                 // logout is defined in security.yaml.  See 'Logging Out' section here:
  51.                 // https://symfony.com/doc/4.1/security.html
  52.                 $event->setResponse(new RedirectResponse($this->router->generate('app_logout')));
  53.             }
  54.         }
  55.     }
  56. }