src/Security/SessionIdleHandler.php line 30

  1. <?php
  3. namespace App\Security;
  5. use Symfony\Component\HttpFoundation\Session\Session;
  6. use Symfony\Component\Routing\RouterInterface;
  7. use Symfony\Component\HttpFoundation\RequestStack;
  8. use Symfony\Component\HttpKernel\Event\RequestEvent;
  9. use Symfony\Component\HttpKernel\HttpKernelInterface;
  10. use Symfony\Component\HttpFoundation\RedirectResponse;
  11. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  13. class SessionIdleHandler
  14. {
  16.     private TokenStorageInterface $securityToken;
  18.     private RouterInterface $router;
  20.     private int $maxIdleTime;
  23.     public function __construct(int $maxIdleTime, TokenStorageInterface $securityToken, RouterInterface $router)
  24.     {
  25.         $this->securityToken = $securityToken;
  26.         $this->router        = $router;
  27.         $this->maxIdleTime   = $maxIdleTime;
  28.     }
  30.     public function onKernelRequest(RequestEvent $event)
  31.     {
  32.         if (HttpKernelInterface::MASTER_REQUEST != $event->getRequestType()) {
  33.             return;
  34.         }
  36.         $session = $event->getRequest()->getSession();
  37.         #$session = new Session();
  39.         if($session->get('sessiontimeout'))
  40.         {
  41.             if($session->get('sessiontimeout') > 0)
  42.             {
  43.                 $this->maxIdleTime = $session->get('sessiontimeout') * 60;
  44.             }
  45.         }
  47.         if ($this->maxIdleTime > 0)
  48.         {
  49.             $session->start();
  50.             $lapse = time() - $session->getMetadataBag()->getLastUsed();
  52.             if ($lapse > $this->maxIdleTime) {
  54.                 $this->securityToken->setToken(null);
  55.                 $event->setResponse(new RedirectResponse($this->router->generate('app_logout'))); // or whatever route you need
  56.             }
  57.         }
  58.     }
  60. }