src/EventSubscriber/IdleActivitySubscriber.php line 21

Open in your IDE?
  1. <?php
  2. namespace App\EventSubscriber;
  4. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  5. use Symfony\Component\HttpKernel\Event\RequestEvent;
  6. use Symfony\Component\HttpKernel\KernelEvents;
  7. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  8. use Symfony\Component\HttpFoundation\RedirectResponse;
  9. use Symfony\Component\Routing\RouterInterface;
  10. use Symfony\Component\HttpFoundation\JsonResponse;
  12. class IdleActivitySubscriber implements EventSubscriberInterface
  13. {
  14.     private int $maxIdle;
  15.     public function __construct(private TokenStorageInterface $tokens, private RouterInterface $router, int $minutes=20)
  16.     { $this->maxIdle = $minutes*60; }
  18.     public static function getSubscribedEvents(): array
  19.     { return [KernelEvents::REQUEST => ['onKernelRequest', 7]]; }
  21.     public function onKernelRequest(RequestEvent $event): void
  22.     {
  23.         if(!$event->isMainRequest()) return;
  24.         $req = $event->getRequest();
  25.         $session = $req->getSession();
  26.         if(!$session || !$this->tokens->getToken()) return;
  27.         $path = $req->getPathInfo();
  28.         if (preg_match('#^/login$#',$path)) return;
  29.         $last = $session->get('last_activity');
  30.         $now = time();
  31.         if($last && ($now - $last) > $this->maxIdle) {
  32.             $session->invalidate();
  33.             if(str_starts_with($path, '/api')) {
  34.                 $event->setResponse(new JsonResponse(['error'=>'session_expired'], 401));
  35.             } else {
  36.                 $event->setResponse(new RedirectResponse($this->router->generate('app_login')));
  37.             }
  38.             return;
  39.         }
  40.         $session->set('last_activity', $now);
  41.     }
  42. }