app/Plugin/AdminSecurity4/Event.php line 137

Open in your IDE?
  1. <?php
  3. namespace Plugin\AdminSecurity4;
  5. use Doctrine\ORM\EntityManagerInterface;
  6. use Eccube\Common\Constant;
  7. use Eccube\Common\EccubeConfig;
  8. use Eccube\Entity\Member;
  9. use Eccube\Repository\MemberRepository;
  10. use Eccube\Request\Context;
  11. use Eccube\Util\StringUtil;
  12. use Plugin\AdminSecurity4\Entity\Config;
  13. use Plugin\AdminSecurity4\Entity\LoginRecord;
  14. use Plugin\AdminSecurity4\Repository\ConfigRepository;
  15. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  16. use Symfony\Component\HttpFoundation\RequestStack;
  17. use Symfony\Component\HttpKernel\Event\GetResponseEvent;
  18. use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
  19. use Symfony\Component\Security\Core\AuthenticationEvents;
  20. use Symfony\Component\Security\Core\Event\AuthenticationFailureEvent;
  21. use Symfony\Component\Security\Http\Event\InteractiveLoginEvent;
  22. use Symfony\Component\Security\Http\SecurityEvents;
  24. class Event implements EventSubscriberInterface
  25. {
  26.     private $em;
  28.     /**
  29.      * @var RequestStack
  30.      */
  31.     private $requestStack;
  33.     /**
  34.      * @var MemberRepository
  35.      */
  36.     private $memberRepository;
  38.     /**
  39.      * @var EccubeConfig
  40.      */
  41.     private $eccubeConfig;
  43.     /**
  44.      * @var Context
  45.      */
  46.     private $requestContext;
  48.     /**
  49.      * @var ConfigRepository
  50.      */
  51.     private $configRepository;
  53.     public function __construct(
  54.         EntityManagerInterface $em,
  55.         MemberRepository $memberRepository,
  56.         RequestStack $requestStack,
  57.         Context $requestContext,
  58.         Config $eccubeConfig,
  59.         ConfigRepository $configRepository
  60.     ) {
  61.         $this->em = $em;
  62.         $this->requestStack = $requestStack;
  63.         $this->memberRepository = $memberRepository;
  64.         $this->eccubeConfig = $eccubeConfig;
  65.         $this->requestContext = $requestContext;
  66.         $this->configRepository = $configRepository;
  67.     }
  69.     /**
  70.      * @return array
  71.      */
  72.     public static function getSubscribedEvents()
  73.     {
  74.         return [
  75.             SecurityEvents::INTERACTIVE_LOGIN => 'onInteractiveLogin',
  76.             AuthenticationEvents::AUTHENTICATION_FAILURE => 'onAuthenticationFailure',
  77.             'kernel.request' => ['onKernelRequest', 512],
  78.         ];
  79.     }
  81.     /**
  82.      * @param InteractiveLoginEvent $event
  83.      */
  84.     public function onInteractiveLogin(InteractiveLoginEvent $event)
  85.     {
  86.         $request = $event->getRequest();
  87.         $user = $event
  88.             ->getAuthenticationToken()
  89.             ->getUser();
  91.         if ($user instanceof Member) {
  92.             $LoginRecord = new LoginRecord();
  93.             $LoginRecord
  94.                 ->setLoginUser($user)
  95.                 ->setUserName($user->getUsername())
  96.                 ->setSuccessFlg(Constant::ENABLED)
  97.                 ->setClientIp($request->getClientIp())
  98.             ;
  100.             $this->em->persist($LoginRecord);
  101.             $this->em->flush($LoginRecord);
  102.         }
  103.     }
  105.     /**
  106.      * @param AuthenticationFailureEvent $event
  107.      */
  108.     public function onAuthenticationFailure(AuthenticationFailureEvent $event)
  109.     {
  110.         if (!$this->requestContext->isAdmin()) {
  111.             return;
  112.         }
  114.         $request = $this->requestStack->getCurrentRequest();
  116.         $userName = $event->getAuthenticationToken()->getUsername();
  117.         $Member = null;
  118.         if ($userName) {
  119.             $Member = $this->memberRepository->findOneBy(['login_id' => $userName]);
  120.         }
  122.         $LoginRecord = new LoginRecord();
  123.         $LoginRecord
  124.             ->setLoginUser($Member)
  125.             ->setUserName($userName)
  126.             ->setSuccessFlg(Constant::DISABLED)
  127.             ->setClientIp($request->getClientIp())
  128.         ;
  130.         $this->em->persist($LoginRecord);
  131.         $this->em->flush($LoginRecord);
  132.     }
  134.     /**
  135.      * @param GetResponseEvent $event
  136.      */
  137.     public function onKernelRequest(GetResponseEvent $event)
  138.     {
  139.         if (!$event->isMasterRequest()) {
  140.             return;
  141.         }
  143.         $Config = $this->configRepository->get();
  144.         if (!$Config) {
  145.             return;
  146.         }
  147.         /* @var $Config Config */
  148.         $denyHosts = array_filter(explode("\n", StringUtil::convertLineFeed($Config->getAdminDenyHosts())), function ($var) {
  149.             return StringUtil::isNotBlank($var);
  150.         });
  152.         if (empty($denyHosts)) {
  153.             return;
  154.         }
  156.         if ($this->requestContext->isAdmin()) {
  157.             if (array_search($event->getRequest()->getClientIp(), $denyHosts) !== false) {
  158.                 throw new AccessDeniedHttpException();
  159.             }
  160.         }
  161.     }
  162. }