vendor/scheb/2fa-trusted-device/Security/Http/EventListener/TrustedDeviceListener.php line 29

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace Scheb\TwoFactorBundle\Security\Http\EventListener;
  7. use Scheb\TwoFactorBundle\Security\Authentication\Token\TwoFactorTokenInterface;
  8. use Scheb\TwoFactorBundle\Security\Http\Authenticator\Passport\Badge\TrustedDeviceBadge;
  9. use Scheb\TwoFactorBundle\Security\Http\Authenticator\Passport\TwoFactorPassport;
  10. use Scheb\TwoFactorBundle\Security\TwoFactor\Trusted\TrustedDeviceManagerInterface;
  11. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  12. use Symfony\Component\Security\Http\Event\LoginSuccessEvent;
  14. /**
  15.  * @final
  16.  */
  17. class TrustedDeviceListener implements EventSubscriberInterface
  18. {
  19.     /**
  20.      * @var TrustedDeviceManagerInterface
  21.      */
  22.     private $trustedDeviceManager;
  24.     public function __construct(TrustedDeviceManagerInterface $trustedDeviceManager)
  25.     {
  26.         $this->trustedDeviceManager = $trustedDeviceManager;
  27.     }
  29.     public function onSuccessfulLogin(LoginSuccessEvent $loginSuccessEvent): void
  30.     {
  31.         if ($loginSuccessEvent->getAuthenticatedToken() instanceof TwoFactorTokenInterface) {
  32.             // Two-factor authentication still not complete
  33.             return;
  34.         }
  36.         $passport = $loginSuccessEvent->getPassport();
  37.         if (!($passport instanceof TwoFactorPassport)) {
  38.             return;
  39.         }
  41.         if (!$passport->hasBadge(TrustedDeviceBadge::class)) {
  42.             return;
  43.         }
  45.         $user = $loginSuccessEvent->getAuthenticatedToken()->getUser();
  46.         $firewallName = $passport->getFirewallName();
  48.         if ($this->trustedDeviceManager->canSetTrustedDevice($user, $loginSuccessEvent->getRequest(), $firewallName)) {
  49.             $this->trustedDeviceManager->addTrustedDevice($user, $firewallName);
  50.         }
  51.     }
  53.     public static function getSubscribedEvents(): array
  54.     {
  55.         return [
  56.             LoginSuccessEvent::class => 'onSuccessfulLogin',
  57.         ];
  58.     }
  59. }