1
|
|
|
<?php |
2
|
|
|
|
3
|
|
|
/* |
4
|
|
|
* This file is part of the GesdinetJWTRefreshTokenBundle package. |
5
|
|
|
* |
6
|
|
|
* (c) Gesdinet <http://www.gesdinet.com/> |
7
|
|
|
* |
8
|
|
|
* For the full copyright and license information, please view the LICENSE |
9
|
|
|
* file that was distributed with this source code. |
10
|
|
|
*/ |
11
|
|
|
|
12
|
|
|
namespace Gesdinet\JWTRefreshTokenBundle\EventListener; |
13
|
|
|
|
14
|
|
|
use Gesdinet\JWTRefreshTokenBundle\Model\RefreshTokenManagerInterface; |
15
|
|
|
use Gesdinet\JWTRefreshTokenBundle\Entity\RefreshToken; |
16
|
|
|
use Lexik\Bundle\JWTAuthenticationBundle\Event\AuthenticationSuccessEvent; |
17
|
|
|
use Symfony\Component\Security\Core\User\UserInterface; |
18
|
|
|
use Symfony\Component\Validator\Validator\ValidatorInterface; |
19
|
|
|
|
20
|
|
|
class AttachRefreshTokenOnSuccessListener |
21
|
|
|
{ |
22
|
|
|
protected $userRefreshTokenManager; |
23
|
|
|
protected $ttl; |
24
|
|
|
protected $validator; |
25
|
|
|
|
26
|
4 |
|
public function __construct(RefreshTokenManagerInterface $refreshTokenManager, $ttl, ValidatorInterface $validator) |
27
|
|
|
{ |
28
|
4 |
|
$this->refreshTokenManager = $refreshTokenManager; |
|
|
|
|
29
|
4 |
|
$this->ttl = $ttl; |
30
|
4 |
|
$this->validator = $validator; |
31
|
4 |
|
} |
32
|
|
|
|
33
|
3 |
|
public function attachRefreshToken(AuthenticationSuccessEvent $event) |
34
|
|
|
{ |
35
|
3 |
|
$data = $event->getData(); |
36
|
3 |
|
$user = $event->getUser(); |
37
|
3 |
|
$request = $event->getRequest(); |
38
|
|
|
|
39
|
3 |
|
if (!$user instanceof UserInterface) { |
40
|
1 |
|
return; |
41
|
|
|
} |
42
|
|
|
|
43
|
2 |
|
$refreshTokenString = null; |
|
|
|
|
44
|
2 |
View Code Duplication |
if ($request->headers->get('content_type') == 'application/json') { |
|
|
|
|
45
|
|
|
$content = $request->getContent(); |
46
|
|
|
$params = !empty($content) ? json_decode($content, true) : array(); |
47
|
|
|
$refreshTokenString = trim($params['refresh_token']); |
48
|
|
|
} else { |
49
|
2 |
|
$refreshTokenString = $request->request->get('refresh_token'); |
50
|
|
|
} |
51
|
|
|
|
52
|
2 |
|
if ($refreshTokenString) { |
53
|
1 |
|
$data['refresh_token'] = $refreshTokenString; |
54
|
1 |
|
} else { |
55
|
1 |
|
$datetime = new \DateTime(); |
56
|
1 |
|
$datetime->modify('+'.$this->ttl.' seconds'); |
57
|
|
|
|
58
|
1 |
|
$refreshToken = $this->refreshTokenManager->create(); |
|
|
|
|
59
|
1 |
|
$refreshToken->setUsername($user->getUsername()); |
60
|
1 |
|
$refreshToken->setRefreshToken(); |
61
|
1 |
|
$refreshToken->setValid($datetime); |
62
|
|
|
|
63
|
|
|
// $valid = false; |
|
|
|
|
64
|
|
|
// while (false === $valid) { |
65
|
|
|
// $valid = true; |
66
|
|
|
// $errors = $this->validator->validate($refreshToken); |
67
|
|
|
// if ($errors->count() > 0) { |
68
|
|
|
// foreach ($errors as $error) { |
69
|
|
|
// if ('refreshToken' === $error->getPropertyPath()) { |
70
|
|
|
// $valid = false; |
71
|
|
|
// $refreshToken->setRefreshToken(); |
72
|
|
|
// } |
73
|
|
|
// } |
74
|
|
|
// } |
75
|
|
|
// } |
76
|
|
|
|
77
|
1 |
|
$this->refreshTokenManager->save($refreshToken); |
|
|
|
|
78
|
1 |
|
$data['refresh_token'] = $refreshToken->getRefreshToken(); |
79
|
|
|
} |
80
|
|
|
|
81
|
2 |
|
$event->setData($data); |
82
|
2 |
|
} |
83
|
|
|
} |
84
|
|
|
|
An attempt at access to an undefined property has been detected. This may either be a typographical error or the property has been renamed but there are still references to its old name.
If you really want to allow access to undefined properties, you can define magic methods to allow access. See the php core documentation on Overloading.