src/EventSubscriber/BetaAccessSubscriber.php line 39

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber;
  5. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  6. use Symfony\Component\HttpFoundation\RedirectResponse;
  7. use Symfony\Component\HttpKernel\Event\RequestEvent;
  8. use Symfony\Component\HttpKernel\KernelEvents;
  9. use Symfony\Component\Routing\RouterInterface;
  10. use Symfony\Component\Security\Core\Security;
  12. class BetaAccessSubscriber implements EventSubscriberInterface
  13. {
  14.     private const ALLOWED_ROUTES = [
  15.         'beta_request',
  16.         'beta_access_request',
  17.         'confirm_email',
  18.         'beta_direct_access',
  19.         'app_login',
  20.         'app_logout',
  21.         '_wdt',
  22.         '_profiler',
  23.     ];
  25.     public function __construct(
  26.         private Security $security,
  27.         private RouterInterface $router,
  28.         private \App\Service\BetaCookie $betaCookie,
  29.         private array $betaHosts
  30.     ) {}
  32.     public static function getSubscribedEvents(): array
  33.     {
  34.         return [
  35.             KernelEvents::REQUEST => ['onKernelRequest', 10],
  36.         ];
  37.     }
  39.     public function onKernelRequest(RequestEvent $event): void
  40.     {
  41.         if (!$event->isMainRequest()) {
  42.             return;
  43.         }
  45.         $request = $event->getRequest();
  47.         if (!in_array($request->getHost(), $this->betaHosts, true)) {
  48.             return;
  49.         }
  51.         $route = $request->attributes->get('_route');
  53.         if (in_array($route, self::ALLOWED_ROUTES, true)) {
  54.             return;
  55.         }
  57.         if ($this->security->getUser() !== null) {
  58.             return;
  59.         }
  61.         // Cookie signé : l'ancienne valeur « true », forgeable, n'est plus acceptée.
  62.         if ($this->betaCookie->isValid($request)) {
  63.             return;
  64.         }
  66.         $event->setResponse(
  67.             new RedirectResponse($this->router->generate('beta_request'))
  68.         );
  69.     }
  70. }