vendor/ibexa/admin-ui/src/lib/EventListener/CredentialsExpirationWarningListener.php line 55

Open in your IDE?
  1. <?php
  3. /**
  4.  * @copyright Copyright (C) Ibexa AS. All rights reserved.
  5.  * @license For full copyright and license information view LICENSE file distributed with this source code.
  6.  */
  7. declare(strict_types=1);
  9. namespace Ibexa\AdminUi\EventListener;
  11. use DateTime;
  12. use DateTimeInterface;
  13. use Ibexa\AdminUi\Specification\SiteAccess\IsAdmin;
  14. use Ibexa\Contracts\AdminUi\Notification\NotificationHandlerInterface;
  15. use Ibexa\Contracts\Core\Repository\UserService;
  16. use Ibexa\Core\MVC\Symfony\Security\UserInterface;
  17. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  18. use Symfony\Component\HttpFoundation\Request;
  19. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  20. use Symfony\Component\Security\Http\Event\InteractiveLoginEvent;
  21. use Symfony\Component\Security\Http\SecurityEvents;
  22. use Symfony\Contracts\Translation\TranslatorInterface;
  24. final class CredentialsExpirationWarningListener implements EventSubscriberInterface
  25. {
  26.     /** @var \Ibexa\Contracts\AdminUi\Notification\NotificationHandlerInterface */
  27.     private $notificationHandler;
  29.     /** @var \Symfony\Contracts\Translation\TranslatorInterface */
  30.     private $translator;
  32.     /** @var \Symfony\Component\Routing\Generator\UrlGeneratorInterface */
  33.     private $urlGenerator;
  35.     /** @var \Ibexa\Contracts\Core\Repository\UserService */
  36.     private $userService;
  38.     /** @var string[][] */
  39.     private $siteAccessGroups;
  41.     public function __construct(
  42.         NotificationHandlerInterface $notificationHandler,
  43.         TranslatorInterface $translator,
  44.         UrlGeneratorInterface $urlGenerator,
  45.         UserService $userService,
  46.         array $siteAccessGroups
  47.     ) {
  48.         $this->notificationHandler = $notificationHandler;
  49.         $this->translator = $translator;
  50.         $this->urlGenerator = $urlGenerator;
  51.         $this->siteAccessGroups = $siteAccessGroups;
  52.         $this->userService = $userService;
  53.     }
  55.     public function onAuthenticationSuccess(InteractiveLoginEvent $event): void
  56.     {
  57.         if (!$this->isAdminSiteAccess($event->getRequest())) {
  58.             return;
  59.         }
  61.         $user = $event->getAuthenticationToken()->getUser();
  62.         if (!($user instanceof UserInterface)) {
  63.             return;
  64.         }
  66.         $apiUser = $user->getAPIUser();
  68.         $passwordInfo = $this->userService->getPasswordInfo($apiUser);
  69.         if ($passwordInfo->hasExpirationWarningDate()) {
  70.             $expirationWarningDate = $passwordInfo->getExpirationWarningDate();
  71.             if ($expirationWarningDate <= new DateTime()) {
  72.                 $this->generateNotification($passwordInfo->getExpirationDate());
  73.             }
  74.         }
  75.     }
  77.     public static function getSubscribedEvents(): array
  78.     {
  79.         return [
  80.             SecurityEvents::INTERACTIVE_LOGIN => ['onAuthenticationSuccess', 12],
  81.         ];
  82.     }
  84.     private function generateNotification(DateTimeInterface $passwordExpiresAt): void
  85.     {
  86.         $passwordExpiresIn = (new DateTime())->diff($passwordExpiresAt);
  88.         if ($passwordExpiresIn->d > 0) {
  89.             $warning = $this->translator->trans(
  90.                 /** @Desc("Your current password will expire in %days% day(s). You can change it in User settings/My account settings.") */
  91.                 'authentication.credentials_expire_in.warning',
  92.                 [
  93.                     '%days%' => $passwordExpiresIn->d + ($passwordExpiresIn->h >= 12 ? 1 : 0),
  94.                     '%url%' => $this->urlGenerator->generate('ibexa.user_profile.change_password'),
  95.                 ],
  96.                 'messages'
  97.             );
  98.         } else {
  99.             $warning = $this->translator->trans(
  100.                 /** @Desc("Your current password will expire today. You can change it in User settings/My account settings.") */
  101.                 'authentication.credentials_expire_today.warning',
  102.                 [
  103.                     '%url%' => $this->urlGenerator->generate('ibexa.user_profile.change_password'),
  104.                 ],
  105.                 'messages'
  106.             );
  107.         }
  109.         $this->notificationHandler->warning($warning);
  110.     }
  112.     private function isAdminSiteAccess(Request $request): bool
  113.     {
  114.         return (new IsAdmin($this->siteAccessGroups))->isSatisfiedBy($request->attributes->get('siteaccess'));
  115.     }
  116. }
  118. class_alias(CredentialsExpirationWarningListener::class, 'EzSystems\EzPlatformAdminUi\EventListener\CredentialsExpirationWarningListener');