src/EventSubscriber/BetaAccessSubscriber.php line 38

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber;
  5. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  6. use Symfony\Component\HttpFoundation\RedirectResponse;
  7. use Symfony\Component\HttpKernel\Event\RequestEvent;
  8. use Symfony\Component\HttpKernel\KernelEvents;
  9. use Symfony\Component\Routing\RouterInterface;
  10. use Symfony\Component\Security\Core\Security;
  12. class BetaAccessSubscriber implements EventSubscriberInterface
  13. {
  14.     private const ALLOWED_ROUTES = [
  15.         'beta_request',
  16.         'beta_access_request',
  17.         'confirm_email',
  18.         'app_login',
  19.         'app_logout',
  20.         '_wdt',
  21.         '_profiler',
  22.     ];
  24.     public function __construct(
  25.         private Security $security,
  26.         private RouterInterface $router,
  27.         private \App\Service\BetaCookie $betaCookie,
  28.         private array $betaHosts
  29.     ) {}
  31.     public static function getSubscribedEvents(): array
  32.     {
  33.         return [
  34.             KernelEvents::REQUEST => ['onKernelRequest', 10],
  35.         ];
  36.     }
  38.     public function onKernelRequest(RequestEvent $event): void
  39.     {
  40.         if (!$event->isMainRequest()) {
  41.             return;
  42.         }
  44.         $request = $event->getRequest();
  46.         if (!in_array($request->getHost(), $this->betaHosts, true)) {
  47.             return;
  48.         }
  50.         $route = $request->attributes->get('_route');
  52.         if (in_array($route, self::ALLOWED_ROUTES, true)) {
  53.             return;
  54.         }
  56.         if ($this->security->getUser() !== null) {
  57.             return;
  58.         }
  60.         // Cookie signé : l'ancienne valeur « true », forgeable, n'est plus acceptée.
  61.         if ($this->betaCookie->isValid($request)) {
  62.             return;
  63.         }
  65.         $event->setResponse(
  66.             new RedirectResponse($this->router->generate('beta_request'))
  67.         );
  68.     }
  69. }