src/Handler/SessionIdleHandler.php line 57

  1. use Symfony\Component\HttpKernel\Event\RequestEvent;
  2. use Symfony\Component\HttpKernel\HttpKernelInterface;
  3. use Symfony\Component\Routing\RouterInterface;
  4. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  5. use Symfony\Component\Security\Core\Authorization\AuthorizationChecker;
  7. final class SessionIdleHandler
  8. {
  9.     public function __construct(
  10.         private TokenStorageInterface $tokenStorage,
  11.         private RouterInterface $router,
  12.         private AuthorizationChecker $authorizationChecker,
  13.         private int $maxIdleTime = 0
  14.     ) {
  15.     }
  17.     public function onKernelRequest(RequestEvent $event): void
  18.     {
  19.         if (HttpKernelInterface::MAIN_REQUEST != $event->getRequestType()) {
  20.             return;
  21.         }
  23.         if ($this->maxIdleTime > 0) {
  24.             $session = $event->getRequest()->getSession();
  26.             $session->start();
  27.             $lapse = time() - $session->getMetadataBag()->getLastUsed();
  28.             if ($lapse > $this->maxIdleTime && $this->authorizationChecker->isGranted('ROLE_USER')) {
  29.                 $this->tokenStorage->setToken();
  30.                 $event->setResponse(
  31.                     new RedirectResponse(
  32.                         $this->router->generate(
  33.                             'security_login',
  34.                             ['session_idle' => true]
  35.                         )
  36.                     )
  37.                 );
  38.             }
  39.         }
  40.     }
  41. }