src/Listener/JWT/AuthenticationFailureListener.php line 20

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Listener\JWT;
  7. use App\Exception\Auth\AuthenticationFailedException;
  8. use App\Exception\User\UserAccountLoginNotAllowedException;
  9. use App\Exception\User\UserAccountNotFoundException;
  10. use App\Exception\User\UserPasswordInvalid;
  11. use App\Tool\Encryption\JWTDecoder;
  12. use Lexik\Bundle\JWTAuthenticationBundle\Event\AuthenticationFailureEvent;
  13. use Lexik\Bundle\JWTAuthenticationBundle\Exception\MissingTokenException;
  14. use Symfony\Component\Security\Core\Exception\BadCredentialsException;
  16. class AuthenticationFailureListener
  17. {
  18.     private array $customExceptions = [UserAccountLoginNotAllowedException::class, UserAccountNotFoundException::class];
  20.     public function onAuthenticationFailure(AuthenticationFailureEvent $event): void
  21.     {
  22.         $additionalInfo = [];
  23.         $exception = $event->getException();
  24.         if (!$exception instanceof MissingTokenException) {
  25.             $jwtToken = $event->getRequest()->headers->get('authorization');
  26.             if (!empty($jwtToken)){
  27.                 $decodedJwtToken = JWTDecoder::decode($jwtToken);
  28.                 if(is_array($decodedJwtToken)) {
  29.                     $additionalInfo = [
  30.                         'userId' => array_key_exists('id', $decodedJwtToken) ? $decodedJwtToken['id'] : '',
  31.                         'username' => array_key_exists('username', $decodedJwtToken) ? $decodedJwtToken['username'] : ''
  32.                     ];
  33.                 }
  34.             }
  35.         }
  37.         $nestedException = $exception ? $exception->getPrevious() : $exception;
  39.         if ($nestedException instanceof BadCredentialsException) {
  40.             throw new UserPasswordInvalid();
  41.         }
  43.         if ($this->isCustomException($nestedException)){
  44.             throw $nestedException;
  45.         }
  47.         throw new AuthenticationFailedException($additionalInfo);
  48.     }
  50.     private function isCustomException(?\Exception $exception): bool
  51.     {
  52.         return $exception && in_array(get_class($exception), $this->customExceptions, true);
  53.     }
  54. }