src/Security/SessionIdleHandler.php line 38

Open in your IDE?
  1. <?php
  2. namespace App\Security;
  4. use http\Env\Request;
  5. use Symfony\Component\HttpKernel\HttpKernelInterface;
  6. use Symfony\Component\HttpKernel\Event\RequestEvent;
  7. use Symfony\Component\HttpFoundation\Session\SessionInterface;
  8. use Symfony\Component\Routing\RouterInterface;
  9. use Symfony\Component\HttpFoundation\RedirectResponse;
  10. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  12. class SessionIdleHandler
  13. {
  15.     protected $session;
  16.     protected $securityToken;
  17.     protected $router;
  18.     protected $maxIdleTime;
  20.     public function __construct($maxIdleTime, SessionInterface $session, TokenStorageInterface $securityToken, RouterInterface $router)
  21.     {
  22.         $this->session = $session;
  23.         $this->securityToken = $securityToken;
  24.         $this->router = $router;
  25.         $this->maxIdleTime = $maxIdleTime;
  26.     }
  28.     public function onKernelRequest(RequestEvent $event)
  29.     {
  30.         if (HttpKernelInterface::MASTER_REQUEST != $event->getRequestType()) {
  32.             return;
  33.         }
  35.         if ($this->maxIdleTime > 0) {
  37.             $this->session->start();
  38.             $lapse = time() - $this->session->getMetadataBag()->getLastUsed();
  40.             if ($lapse > $this->maxIdleTime) {
  42.                 $this->securityToken->setToken(null);
  43.                 $this->session->getFlashBag()->set('info', 'You have been logged out due to inactivity.');
  44.                 // Change the route if you are not using FOSUserBundle.
  45.                 $event->setResponse(new RedirectResponse($this->router->generate('app_login')));
  46.             }
  47.         }
  48.     }
  50. }