lib/composer/UserBundle/src/VisualMedia/UserBundle/EventSubscriber/SecuritySubscriber.php line 75

Open in your IDE?
  1. <?php
  2. /**
  3.  * Security Subscriber
  4.  *
  5.  * @author Gideon Oudhuis <g.oudhuis@visualmedia.nl>
  6.  */
  7. namespace VisualMedia\UserBundle\EventSubscriber;
  9. use Symfony\Component\Cache\Adapter\AdapterInterface;
  10. use Symfony\Component\HttpFoundation\RequestStack;
  11. use Symfony\Component\Security\Core\Event\AuthenticationFailureEvent;
  12. use Symfony\Component\Security\Core\AuthenticationEvents;
  13. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  14. use Symfony\Component\Security\Core\Exception\AccessDeniedException;
  15. use Symfony\Component\Security\Http\SecurityEvents;
  16. use Symfony\Component\Security\Http\Event\InteractiveLoginEvent;
  19. /**
  20.  * Security Subscriber
  21.  *
  22.  * Subscriber to monitor the failed login attempts.
  23.  *
  24.  * @deprecated since bugfix/ssi-login-validation, system using cache login block attemps build into
  25.  * BaseLoginFormAuthenticator method onAuthenticationFailure => bruteForceSecurity
  26.  */
  27. class SecuritySubscriber implements EventSubscriberInterface
  28. {
  29.     /**
  30.      * Cache
  31.      * @var AdapterInterface
  32.      */
  33.     protected $cache;
  35.     /**
  36.      * Request Stack
  37.      * @var RequestStack
  38.      */
  39.     protected $requestStack;
  41.     /**
  42.      * Constructor
  43.      *
  44.      * @param AdapterInterface $cache
  45.      * @param RequestStack $requestStack
  46.      */
  47.     public function __construct(AdapterInterface $cache, RequestStack  $requestStack)
  48.     {
  49.         $this->cache = $cache;
  50.         $this->requestStack = $requestStack;
  51.     }
  53.     /**
  54.      * Get Subscribed Events
  55.      *
  56.      * getSubscribedEvents Event withs te subscriber listens to.
  57.      */
  58.     public static function getSubscribedEvents(): array
  59.     {
  60.         return array(
  61.             AuthenticationEvents::AUTHENTICATION_FAILURE => 'onAuthenticationFailure',
  62.             SecurityEvents::INTERACTIVE_LOGIN => 'onSecurityInteractiveLogin',
  63.         );
  64.     }
  66.     /**
  67.      * On Security Interactive login
  68.      *
  69.      * onSecurityInteractiveLogin register if login user has to many login _attemps.
  70.      *
  71.      * @param InteractiveLoginEvent $event
  72.      *
  73.      * @throws \Psr\Cache\InvalidArgumentException
  74.      */
  75.     public function onSecurityInteractiveLogin(InteractiveLoginEvent $event): void
  76.     {
  77.         $request = $this->requestStack->getCurrentRequest();
  79.         $count = 0;
  80.         $route = $request->get('_route');
  81.         $ip = $request->getClientIp();
  83.         $cacheitem = $this->cache->getItem(sprintf('%s_%s_attemps', $route, $ip));
  84.         $cache_count = $cacheitem->get();
  86.         if ($cache_count['count'] ?? null) {
  87.             $count = $cache_count['count'];
  88.         }
  90.         if ($count >= 1){
  91.             throw new AccessDeniedException('Login has been blocked');
  92.         }
  93.     }
  95.     /**
  96.      * On Authentication Failure
  97.      *
  98.      * onAuthenticationFailure event that trigger if a users authentication fails.
  99.      *
  100.      * @param AuthenticationFailureEvent $event
  101.      *
  102.      * @throws \Psr\Cache\InvalidArgumentException
  103.      */
  104.     public function onAuthenticationFailure(AuthenticationFailureEvent $event): void
  105.     {
  106.         $request = $this->requestStack->getCurrentRequest();
  108.         $route = $request->get('_route');
  109.         $ip = $request->getClientIp();
  111.         $cacheitem = $this->cache->getItem(sprintf('%s_%s_attemps', $route, $ip));
  112.         $cacheitem->expiresAfter(300);
  113.         $cache_count = $cacheitem->get();
  114.         $count = $cache_count[$ip];
  116.         if ($count === null) {
  117.             $count = 0;
  118.         }
  119.         $count++;
  121.         $cacheitem->set(array(
  122.             $this->requestStack->getCurrentRequest()->getClientIp() => $count,
  123.         ));
  125.         $this->cache->save($cacheitem);
  126.     }
  127. }