src/AdminBundle/EventListener/AuthenticationFailureListener.php line 26

Open in your IDE?
  1. <?php
  3. namespace App\AdminBundle\EventListener;
  5. use App\AdminBundle\Service\UserManager;
  6. use Lexik\Bundle\JWTAuthenticationBundle\Event\AuthenticationFailureEvent;
  7. use Symfony\Component\HttpFoundation\RequestStack;
  9. class AuthenticationFailureListener
  10. {
  12.     //private $requestStack;
  13.     //private $userManager;
  14.     //private $templating;
  16.     public function __construct(/*RequestStack $requestStack, UserManager $userManager, $templating*/)
  17.     {
  18.         //$this->requestStack = $requestStack;
  19.         //$this->userManager = $userManager;
  20.         //$this->templating = $templating;
  21.     }
  23.     /**
  24.      * @param AuthenticationFailureEvent $event
  25.      */
  26.     public function onAuthenticationFailureResponse(AuthenticationFailureEvent $event)
  27.     {
  28.         // Check failed login attemps
  29.         //$username = $this->requestStack->getCurrentRequest()->get("_username");
  30.         //if ($username !== '') {
  31.         //    $user = $this->userManager->findUserByEmail($username);
  32.         //    if ($user) {
  33.         //        $failedAttemps = $user->getFailedLoginAttemps() + 1;
  34.         //        $user->setFailedLoginAttemps($failedAttemps);
  35.         //        $this->userManager->updateUser($user);
  36.         //        if ($failedAttemps == 3) {
  37.         //            $parameters = array(
  38.         //                'firstName' => $user->getFirstName(),
  39.         //                'email' => $user->getEmail()
  40.         //            );
  41.         //            $html = $this->templating->render(
  42.         //                'Emails/failed_login_attemps.html.twig', $parameters
  43.         //            );
  44.         //
  45.         //            DEV NOTE: if re-enabling replace with AWS SES call
  46.         //            $message = new Swift_Message();
  47.         //            $message
  48.         //                ->setFrom('info@iwplatform.com', 'Integrated Wealth Platform')
  49.         //                ->addTo($user->getEmail(), $user->getFirstName())
  50.         //                ->setSubject('Incorrect Login Attempts')
  51.         //                ->setReplyTo('support@iwplatform.com')
  52.         //                ->setBccAddress('info@iwplatform.com')
  53.         //                ->setBody($html, 'text/html')
  54.         //            ;
  55.         //
  56.         //            // Send the email
  57.         //            ...
  58.         //        }
  59.         //    }
  60.         //}
  63.         // Delay the response as to make it take 1 second
  64.         // This is to even the response time no matter which route it took (user not found, wrong password, etc.), so it can't be used to pick information about username existance
  65.         $soFarExecutionTime = microtime(true) - $_SERVER["REQUEST_TIME_FLOAT"];
  66.         usleep(abs(1 - $soFarExecutionTime) * 1000000);
  67.     }
  69. }