vendor/symfony/security-http/EventListener/LoginThrottlingListener.php line 49

Open in your IDE?
  1. <?php
  3. /*
  4.  * This file is part of the Symfony package.
  5.  *
  6.  * (c) Fabien Potencier <fabien@symfony.com>
  7.  *
  8.  * For the full copyright and license information, please view the LICENSE
  9.  * file that was distributed with this source code.
  10.  */
  12. namespace Symfony\Component\Security\Http\EventListener;
  14. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  15. use Symfony\Component\HttpFoundation\RateLimiter\RequestRateLimiterInterface;
  16. use Symfony\Component\HttpFoundation\RequestStack;
  17. use Symfony\Component\Security\Core\Exception\TooManyLoginAttemptsAuthenticationException;
  18. use Symfony\Component\Security\Core\Security;
  19. use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;
  20. use Symfony\Component\Security\Http\Event\CheckPassportEvent;
  21. use Symfony\Component\Security\Http\Event\LoginSuccessEvent;
  23. /**
  24.  * @author Wouter de Jong <wouter@wouterj.nl>
  25.  */
  26. final class LoginThrottlingListener implements EventSubscriberInterface
  27. {
  28.     private RequestStack $requestStack;
  29.     private RequestRateLimiterInterface $limiter;
  31.     public function __construct(RequestStack $requestStack, RequestRateLimiterInterface $limiter)
  32.     {
  33.         $this->requestStack = $requestStack;
  34.         $this->limiter = $limiter;
  35.     }
  37.     public function checkPassport(CheckPassportEvent $event): void
  38.     {
  39.         $passport = $event->getPassport();
  40.         if (!$passport->hasBadge(UserBadge::class)) {
  41.             return;
  42.         }
  44.         $request = $this->requestStack->getMainRequest();
  45.         $request->attributes->set(Security::LAST_USERNAME, $passport->getBadge(UserBadge::class)->getUserIdentifier());
  47.         $limit = $this->limiter->consume($request);
  48.         if (!$limit->isAccepted()) {
  49.             throw new TooManyLoginAttemptsAuthenticationException(ceil(($limit->getRetryAfter()->getTimestamp() - time()) / 60));
  50.         }
  51.     }
  53.     public function onSuccessfulLogin(LoginSuccessEvent $event): void
  54.     {
  55.         $this->limiter->reset($event->getRequest());
  56.     }
  58.     public static function getSubscribedEvents(): array
  59.     {
  60.         return [
  61.             CheckPassportEvent::class => ['checkPassport', 2080],
  62.             LoginSuccessEvent::class => 'onSuccessfulLogin',
  63.         ];
  64.     }
  65. }