src/EventSubscriber/RefreshTokenSubscriber.php line 25

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber;
  5. use App\Entity\Monolith\User;
  6. use Doctrine\ORM\EntityManagerInterface;
  7. use Gesdinet\JWTRefreshTokenBundle\Event\RefreshEvent;
  8. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  9. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  11. class RefreshTokenSubscriber implements EventSubscriberInterface
  12. {
  13.     public function __construct(
  14.         private EntityManagerInterface $entityManager
  15.     ) {
  16.     }
  18.     public static function getSubscribedEvents(): array
  19.     {
  20.         return [
  21.             'gesdinet.refresh_token' => 'onRefreshToken',
  22.         ];
  23.     }
  25.     public function onRefreshToken(RefreshEvent $event): void
  26.     {
  27.         $refreshToken = $event->getRefreshToken();
  29.         if (null !== $refreshToken->getHash()) {
  30.             $user = $this->entityManager->getRepository(User::class)->findOneBy(['email' => $refreshToken->getUsername()]);
  31.             if (sha1($user?->getPassword()) !== $refreshToken->getHash()) {
  32.              throw new AuthenticationException('The password does not match.');
  33.             }
  34.         }
  35.     }
  36. }