src/EventListener/JWTCreatedListener.php line 26

Open in your IDE?
  1. <?php
  3. namespace App\EventListener;
  5. use App\Entity\User;
  6. use Lexik\Bundle\JWTAuthenticationBundle\Event\AuthenticationSuccessEvent;
  7. use Scheb\TwoFactorBundle\Security\TwoFactor\Provider\Google\GoogleAuthenticator;
  8. use Symfony\Component\HttpFoundation\RequestStack;
  10. readonly class JWTCreatedListener
  11. {
  12.     /**
  13.      * @param RequestStack $requestStack
  14.      * @param GoogleAuthenticator $googleAuthenticator
  15.      */
  16.     public function __construct(
  17.         private RequestStack $requestStack,
  18.         private GoogleAuthenticator $googleAuthenticator
  19.     )
  20.     {
  21.     }
  23.     /**
  24.      * @param AuthenticationSuccessEvent $event
  25.      */
  26.     public function onAuthenticationSuccessResponse(AuthenticationSuccessEvent $event): void
  27.     {
  28.         $data = $event->getData();
  29.         $user = $event->getUser();
  31.         if (!$user instanceof User) {
  32.             return;
  33.         }
  35.         $data['roles'] = $user->getRoles();
  37.         try {
  38.             if($user->getIsEnabled2FA()) {
  40.                 $payload = json_decode(
  41.                     $this->requestStack->getMainRequest()?->getContent(),
  42.                     true,
  43.                     512,
  44.                     JSON_THROW_ON_ERROR
  45.                 );
  47.                 if (isset($payload['code'])) {
  48.                     if (!$this->googleAuthenticator->checkCode($user, $payload['code'])) {
  49.                         unset(
  50.                             $data['token']
  51.                         );
  52.                         $data['code'] = $payload['code'];
  53.                         $data['error'] = sprintf('This code %s is not correct !',$payload['code']);
  54.                         $event->getResponse()->setStatusCode($event->getResponse()::HTTP_UNAUTHORIZED);
  55.                         $event->stopPropagation();
  56.                     }
  57.                 }
  58.                 else {
  59.                     unset(
  60.                         $data['token']
  61.                     );
  62.                     $event->getResponse()->setStatusCode($event->getResponse()::HTTP_MULTIPLE_CHOICES);
  63.                     $event->stopPropagation();
  64.                 }
  65.             }
  68.         } catch (\Exception $e){
  70.         }
  71.         $event->setData($data);
  72.     }
  73. }