src/EventSubscriber/JWTInvalidSubscriber.php line 46

Open in your IDE?
  1. <?php
  2. namespace App\EventSubscriber;
  3. use App\Entity\AuthUser;
  4. use App\Service\App\ToolsService;
  5. use Doctrine\ORM\EntityManagerInterface;
  6. use Lexik\Bundle\JWTAuthenticationBundle\Event\JWTInvalidEvent;
  7. use Lexik\Bundle\JWTAuthenticationBundle\Response\JWTAuthenticationFailureResponse;
  8. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  9. use Symfony\Component\HttpFoundation\RequestStack;
  10. class JWTInvalidSubscriber implements EventSubscriberInterface
  11. {
  12.     /** @var EntityManagerInterface $em */
  13.     private EntityManagerInterface $em;
  14.     /** @var RequestStack $requestStack */
  15.     private RequestStack $requestStack;
  16.     /** @var ToolsService $toolsService */
  17.     private ToolsService $toolsService;
  18.     public static function getSubscribedEvents(): array
  19.     {
  20.         return [
  21.             'lexik_jwt_authentication.on_jwt_invalid' => 'onJWTInvalid'
  22.         ];
  23.     }
  24.     public function __construct(
  25.         RequestStack           $requestStack,
  26.         EntityManagerInterface $em,
  27.         ToolsService           $toolsService
  28.     )
  29.     {
  30.         $this->requestStack $requestStack;
  31.         $this->em $em;
  32.         $this->toolsService $toolsService;
  33.     }
  34.     /**
  35.      * @param JWTInvalidEvent $event
  36.      */
  37.     public function onJWTInvalid(JWTInvalidEvent $event)
  38.     {
  39.         $request $this->requestStack->getCurrentRequest();
  40.         /** @var string $token */
  41.         $token substr($request->headers->get('authorization'), 7);
  42.         $jwtPayload $this->toolsService->getPayloadFromJwtToken($token);
  43.         /** @var AuthUser $user */
  44.         $user $this->em->getRepository(AuthUser::class)->findOneBy(['email' => $jwtPayload->username]);
  45.         if (true === $user->getIsBlocked()) {
  46.             $response = new JWTAuthenticationFailureResponse('Your account is blocked !');
  47.             $event->setResponse($response);
  48.         }
  49.     }
  50. }