src/Subscriber/CheckCredentialListener.php line 30

  1. <?php declare(strict_types=1);
  3. namespace App\Subscriber;
  5. use App\Exception\CompanyNotFoundException;
  6. use App\Service\DataService;
  7. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  8. use Symfony\Component\HttpFoundation\RequestStack;
  9. use Symfony\Component\HttpFoundation\Session\Session;
  10. use Symfony\Component\Security\Core\Event\AuthenticationSuccessEvent;
  12. class CheckCredentialListener implements EventSubscriberInterface
  13. {
  14.     private RequestStack $requestStack;
  15.     private DataService $dataService;
  17.     public function __construct(RequestStack $requestStack, DataService $dataService)
  18.     {
  19.         $this->requestStack = $requestStack;
  20.         $this->dataService = $dataService;
  21.     }
  23.     public static function getSubscribedEvents(): array
  24.     {
  25.         return [
  26.             AuthenticationSuccessEvent::class => ['postCheckCredentials', 256]
  27.         ];
  28.     }
  30.     public function postCheckCredentials(AuthenticationSuccessEvent $event): void
  31.     {
  32.         $request = $this->requestStack->getMainRequest();
  33.         if (str_contains($request?->attributes->get('_route') ?? '', 'admin')
  34.         || str_contains($request?->attributes->get('_route') ?? '', 'Api')) {
  35.             return;
  36.         }
  38.         if (null === $request) {
  39.             throw new CompanyNotFoundException();
  40.         }
  42.         $company = $this->dataService->findCompanyByApiKey($request->get('_password'));
  43.         if (null === $company) {
  44.             throw new CompanyNotFoundException();
  45.         }
  47.         $request->getSession()->set(DataService::COMPANY_ID_SESSION_KEY, $company->getId());
  48.     }
  49. }