App\Security\Session\LogoutHelper

Complexity

Total Complexity

4

Size/Duplication

Total Lines	18
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	logout()	0	12	3
A	__construct()	0	1	1

<?php

namespace App\Security\Session;

use App\Entity\User;
use Doctrine\DBAL\Connection;

/**
 * This class helps to logout a user completly by
 * (a) removing all active sessions and
 * (b) removing all remember me tokens
 *
 * Caveat: The user is not logged out from applications. This method only prevents the user
 * from logging in again after a session is expired.
 */
class LogoutHelper {

    public function __construct(private readonly Connection $connection, private readonly ActiveSessionsResolver $activeSessionsResolver) {

    }

    public function logout(User $user): void {
        // Delete active sessions
        $activeSessions = $this->activeSessionsResolver->getSessionsForUser($user);

        foreach($activeSessions as $activeSession) {
            if($activeSession->isCurrentSession === false) {
                $this->connection->delete('sessions', ['sess_id' => $activeSession->sessionId]);
            }
        }

        // Delete rememberme tokens
        $this->connection->delete('rememberme_token', ['username' => $user->getUserIdentifier()]);
    }
}