vendor/gesdinet/jwt-refresh-token-bundle/EventListener/LogoutEventListener.php line 49

Open in your IDE?
  1. <?php
  3. /*
  4.  * This file is part of the GesdinetJWTRefreshTokenBundle package.
  5.  *
  6.  * (c) Gesdinet <http://www.gesdinet.com/>
  7.  *
  8.  * For the full copyright and license information, please view the LICENSE
  9.  * file that was distributed with this source code.
  10.  */
  12. namespace Gesdinet\JWTRefreshTokenBundle\EventListener;
  14. use Gesdinet\JWTRefreshTokenBundle\Model\RefreshTokenManagerInterface;
  15. use Gesdinet\JWTRefreshTokenBundle\Request\Extractor\ExtractorInterface;
  16. use Symfony\Component\HttpFoundation\JsonResponse;
  17. use Symfony\Component\Security\Http\Event\LogoutEvent;
  19. class LogoutEventListener
  20. {
  21.     private RefreshTokenManagerInterface $refreshTokenManager;
  22.     private ExtractorInterface $refreshTokenExtractor;
  23.     private string $tokenParameterName;
  24.     private array $cookieSettings;
  25.     private string $logout_firewall_context;
  27.     public function __construct(
  28.         RefreshTokenManagerInterface $refreshTokenManager,
  29.         ExtractorInterface $refreshTokenExtractor,
  30.         string $tokenParameterName,
  31.         array $cookieSettings,
  32.         string $logout_firewall_context
  33.     ) {
  34.         $this->refreshTokenManager = $refreshTokenManager;
  35.         $this->refreshTokenExtractor = $refreshTokenExtractor;
  36.         $this->tokenParameterName = $tokenParameterName;
  37.         $this->cookieSettings = array_merge([
  38.             'enabled' => false,
  39.             'same_site' => 'lax',
  40.             'path' => '/',
  41.             'domain' => null,
  42.             'http_only' => true,
  43.             'secure' => true,
  44.             'remove_token_from_body' => true,
  45.         ], $cookieSettings);
  46.         $this->logout_firewall_context = $logout_firewall_context;
  47.     }
  49.     public function onLogout(LogoutEvent $event): void
  50.     {
  51.         $request = $event->getRequest();
  52.         $current_firewall_context = $request->attributes->get('_firewall_context');
  54.         if ($current_firewall_context !== $this->logout_firewall_context) {
  55.             return;
  56.         }
  58.         $tokenString = $this->refreshTokenExtractor->getRefreshToken($request, $this->tokenParameterName);
  59.         if (null === $tokenString) {
  60.             $event->setResponse(
  61.                 new JsonResponse(
  62.                     [
  63.                         'code' => 400,
  64.                         'message' => 'No refresh_token found.',
  65.                     ],
  66.                     JsonResponse::HTTP_BAD_REQUEST
  67.                 )
  68.             );
  70.             return;
  71.         } else {
  72.             $refreshToken = $this->refreshTokenManager->get($tokenString);
  73.             if (null === $refreshToken) {
  74.                 $event->setResponse(
  75.                     new JsonResponse(
  76.                         [
  77.                             'code' => 200,
  78.                             'message' => 'The supplied refresh_token is already invalid.',
  79.                         ],
  80.                         JsonResponse::HTTP_OK
  81.                     )
  82.                 );
  83.             } else {
  84.                 $this->refreshTokenManager->delete($refreshToken);
  85.                 $event->setResponse(
  86.                     new JsonResponse(
  87.                         [
  88.                             'code' => 200,
  89.                             'message' => 'The supplied refresh_token has been invalidated.',
  90.                         ],
  91.                         JsonResponse::HTTP_OK
  92.                     )
  93.                 );
  94.             }
  95.         }
  97.         if ($this->cookieSettings['enabled']) {
  98.             $response = $event->getResponse();
  99.             $response->headers->clearCookie(
  100.                 $this->tokenParameterName,
  101.                 $this->cookieSettings['path'],
  102.                 $this->cookieSettings['domain'],
  103.                 $this->cookieSettings['secure'],
  104.                 $this->cookieSettings['http_only'],
  105.                 $this->cookieSettings['same_site']
  106.             );
  107.         }
  108.     }
  109. }