src/AppBundle/EventListener/InactivityResponseListener.php line 21

Open in your IDE?
  1. <?php
  3. namespace App\AppBundle\EventListener;
  5. use Lexik\Bundle\JWTAuthenticationBundle\Encoder\JWTEncoderInterface;
  6. use Lexik\Bundle\JWTAuthenticationBundle\Exception\JWTDecodeFailureException;
  7. use Symfony\Component\HttpKernel\Event\ResponseEvent;
  9. class InactivityResponseListener
  10. {
  12.     protected $jwtEncoder;
  13.     protected $inactivityTTL;
  15.     public function __construct(JWTEncoderInterface $encoder, $inactivityTTL)
  16.     {
  17.         $this->jwtEncoder = $encoder;
  18.         $this->inactivityTTL = $inactivityTTL;
  19.     }
  21.     public function onKernelResponse(ResponseEvent $event)
  22.     {
  23.         // Get current response from event
  24.         $response = $event->getResponse();
  26.         // If not an error, set Authorization header with the latest auth token
  27.         if ($response !== null) {
  29.             if ($response->getStatusCode() < 400) {
  31.                 $request = $event->getRequest();
  33.                 // Avoid updating the inactivity_exp and returning the 'Authorization' header
  34.                 // if the request explicitly has the 'doNotCountAsActivity' flag set to true
  35.                 if (
  36.                     empty($request->get('doNotCountAsActivity')) ||
  37.                     $request->get('doNotCountAsActivity') != 'true'
  38.                 ) {
  39.                     // Decode original token from request (although this should be done from
  40.                     // the token stored from the original decodification. Couldn't make it work)
  41.                     $authenticationToken = str_replace('Bearer ', '',
  42.                         $request->headers->get('Authorization'));
  43.                     try {
  44.                         $payload = $this->jwtEncoder->decode($authenticationToken);
  46.                         // Update timestamp
  47.                         $payload['inactivity_exp'] = time() + $this->inactivityTTL;
  49.                         // Set authentication header with updated token
  50.                         $response->headers->set('Authorization',
  51.                             $this->jwtEncoder->encode($payload));
  52.                     } catch (JWTDecodeFailureException $e) {
  53.                         // No action
  54.                     }
  55.                 }
  56.             } else {
  58.                 // Remove header on errors (it might have been set by a call to this 
  59.                 // listener before the response code was set to an error one)
  60.                 $response->headers->remove('Authorization');
  61.             }
  62.         }
  63.     }
  65. }