vendor/gesdinet/jwt-refresh-token-bundle/EventListener/LogoutEventListener.php line 50

Open in your IDE?
  1. <?php
  3. /*
  4.  * This file is part of the GesdinetJWTRefreshTokenBundle package.
  5.  *
  6.  * (c) Gesdinet <http://www.gesdinet.com/>
  7.  *
  8.  * For the full copyright and license information, please view the LICENSE
  9.  * file that was distributed with this source code.
  10.  */
  12. namespace Gesdinet\JWTRefreshTokenBundle\EventListener;
  14. use Gesdinet\JWTRefreshTokenBundle\Model\RefreshTokenManagerInterface;
  15. use Gesdinet\JWTRefreshTokenBundle\Request\Extractor\ExtractorInterface;
  16. use Symfony\Component\HttpFoundation\JsonResponse;
  17. use Symfony\Component\Security\Http\Event\LogoutEvent;
  19. class LogoutEventListener
  20. {
  21.     private RefreshTokenManagerInterface $refreshTokenManager;
  22.     private ExtractorInterface $refreshTokenExtractor;
  23.     private string $tokenParameterName;
  24.     private array $cookieSettings;
  25.     private string $logout_firewall_context;
  27.     public function __construct(
  28.         RefreshTokenManagerInterface $refreshTokenManager,
  29.         ExtractorInterface $refreshTokenExtractor,
  30.         string $tokenParameterName,
  31.         array $cookieSettings,
  32.         string $logout_firewall_context
  33.     ) {
  34.         $this->refreshTokenManager = $refreshTokenManager;
  35.         $this->refreshTokenExtractor = $refreshTokenExtractor;
  36.         $this->tokenParameterName = $tokenParameterName;
  37.         $this->cookieSettings = array_merge([
  38.             'enabled' => false,
  39.             'same_site' => 'lax',
  40.             'path' => '/',
  41.             'domain' => null,
  42.             'http_only' => true,
  43.             'secure' => true,
  44.             'partitioned' => false,
  45.             'remove_token_from_body' => true,
  46.         ], $cookieSettings);
  47.         $this->logout_firewall_context = $logout_firewall_context;
  48.     }
  50.     public function onLogout(LogoutEvent $event): void
  51.     {
  52.         $request = $event->getRequest();
  53.         $current_firewall_context = $request->attributes->get('_firewall_context');
  55.         if ($current_firewall_context !== $this->logout_firewall_context) {
  56.             return;
  57.         }
  59.         $tokenString = $this->refreshTokenExtractor->getRefreshToken($request, $this->tokenParameterName);
  60.         if (null === $tokenString) {
  61.             $event->setResponse(
  62.                 new JsonResponse(
  63.                     [
  64.                         'code' => 400,
  65.                         'message' => 'No refresh_token found.',
  66.                     ],
  67.                     JsonResponse::HTTP_BAD_REQUEST
  68.                 )
  69.             );
  71.             return;
  72.         } else {
  73.             $refreshToken = $this->refreshTokenManager->get($tokenString);
  74.             if (null === $refreshToken) {
  75.                 $event->setResponse(
  76.                     new JsonResponse(
  77.                         [
  78.                             'code' => 200,
  79.                             'message' => 'The supplied refresh_token is already invalid.',
  80.                         ],
  81.                         JsonResponse::HTTP_OK
  82.                     )
  83.                 );
  84.             } else {
  85.                 $this->refreshTokenManager->delete($refreshToken);
  86.                 $event->setResponse(
  87.                     new JsonResponse(
  88.                         [
  89.                             'code' => 200,
  90.                             'message' => 'The supplied refresh_token has been invalidated.',
  91.                         ],
  92.                         JsonResponse::HTTP_OK
  93.                     )
  94.                 );
  95.             }
  96.         }
  98.         if ($this->cookieSettings['enabled']) {
  99.             $response = $event->getResponse();
  100.             $response->headers->clearCookie(
  101.                 $this->tokenParameterName,
  102.                 $this->cookieSettings['path'],
  103.                 $this->cookieSettings['domain'],
  104.                 $this->cookieSettings['secure'],
  105.                 $this->cookieSettings['http_only'],
  106.                 $this->cookieSettings['same_site']
  107.             );
  108.         }
  109.     }
  110. }