src/EventSubscriber/SwitchUserSubscriber.php line 24

  1. <?php
  3. namespace App\EventSubscriber;
  5. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  6. use Symfony\Component\Routing\RouterInterface;
  7. use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
  8. use Symfony\Component\Security\Http\Event\SwitchUserEvent;
  9. use Symfony\Component\Security\Http\SecurityEvents;
  10. use Symfony\Bundle\SecurityBundle\Security;
  11. use Symfony\Component\HttpFoundation\RedirectResponse;
  12. use Symfony\Component\Security\Core\Role\RoleHierarchyInterface;
  14. class SwitchUserSubscriber implements EventSubscriberInterface
  15. {
  16.     protected $router;
  17.     protected $roleHierarchy;
  19.     public function __construct(RouterInterface $router, RoleHierarchyInterface $roleHierarchy) {
  20.         $this->router = $router;
  21.         $this->roleHierarchy = $roleHierarchy;
  22.     }
  23.     
  24.     public function onSwitchUser(SwitchUserEvent $event): void
  25.     {
  26.         $user = $event->getTargetUser();
  27.         if ($this->hasRole($user, "ROLE_ADMIN")) :
  28.             $response = new RedirectResponse($this->router->generate('admin_default'), 302);
  29.             $response->send();
  30.         endif;
  31.         if ($this->hasRole($user, "ROLE_CUSTOMER")) :
  32.             $response = new RedirectResponse($this->router->generate('customer_default'), 302);
  33.             $event->getRequest()->getSession()->set('username', 'impersonator');
  34.             $response->send();
  35.         endif;
  36.         if ($this->hasRole($user, "ROLE_WRITER")) :
  37.             $response = new RedirectResponse($this->router->generate('writer_default'), 302);
  38.             $event->getRequest()->getSession()->set('username', 'impersonator');
  39.             $response->send();
  40.         endif;
  41.     }
  43.     private function hasRole(\App\Entity\User $user, string $role): bool 
  44.     {
  45.         $reachableRoles = $this->roleHierarchy->getReachableRoleNames($user->getRoles());
  47.         foreach ($reachableRoles as $reachableRole) {
  48.             if ($reachableRole === $role) {
  49.                 return true;
  50.             }
  51.         }
  53.         return false;
  54.     }
  56.     public static function getSubscribedEvents(): array
  57.     {
  58.         return [
  59.             SecurityEvents::SWITCH_USER => 'onSwitchUser',
  60.         ];
  61.     }
  62. }