src/EventSubscriber/MfaSubscriber.php line 28

Open in your IDE?
  1. <?php
  2. namespace App\EventSubscriber;
  4. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  5. use Symfony\Component\HttpKernel\Event\RequestEvent;
  6. use Symfony\Component\HttpFoundation\RedirectResponse;
  7. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  8. use Symfony\Component\Security\Core\Security;
  10. class MfaSubscriber implements EventSubscriberInterface
  11. {
  12.     private Security $security;
  13.     private UrlGeneratorInterface $urlGenerator;
  15.     public function __construct(Security $security, UrlGeneratorInterface $urlGenerator)
  16.     {
  17.         $this->security = $security;
  18.         $this->urlGenerator = $urlGenerator;
  19.     }
  21.     public static function getSubscribedEvents(): array
  22.     {
  23.         return [
  24.             'kernel.request' => ['onKernelRequest', -10], // prioridad más baja
  25.         ];
  26.     }
  28.     public function onKernelRequest(RequestEvent $event): void
  29.     {
  30.         if (!$event->isMainRequest()) {
  31.             return;
  32.         }
  34.         $request = $event->getRequest();
  35.         $currentRoute = $request->attributes->get('_route');
  37.         // Evitar bucle infinito redirigiendo sobre la misma ruta
  38.         if ($currentRoute === 'enable_mfa' || $currentRoute === 'app_login' || $currentRoute === 'save_qr_code' || $currentRoute === 'generate_qr_code') {
  39.             return;
  40.         }
  41.     
  42.         $user = $this->security->getUser();
  43.         if (!$user) {
  44.             return;
  45.         }
  47.         $mandatoryMfa = false;
  48.         if (
  49.             ($user->getPartner() && $user->getPartner()->isMandatoryMfa()) ||
  50.             ($user->getCustomer() && $user->getCustomer()->isMandatoryMfa()) ||
  51.             ($user->getWholesaler() && $user->getWholesaler()->isMandatoryMfa())
  52.         ) {
  53.             $mandatoryMfa = true;
  54.         }
  56.         if (($user->isMandatoryMfa() || $mandatoryMfa) && !$user->isGoogleAuthenticatorEnabled()) {
  57.             $event->setResponse(new RedirectResponse(
  58.                 $this->urlGenerator->generate('enable_mfa')
  59.             ));
  60.         }
  61.     }
  62. }