vendor/shopware/core/Framework/Api/EventListener/Authentication/UserCredentialsChangedSubscriber.php line 43

Open in your IDE?
  1. <?php declare(strict_types=1);
  3. namespace Shopware\Core\Framework\Api\EventListener\Authentication;
  5. use Doctrine\DBAL\Connection;
  6. use Shopware\Core\Defaults;
  7. use Shopware\Core\Framework\Api\OAuth\RefreshTokenRepository;
  8. use Shopware\Core\Framework\DataAbstractionLayer\Event\EntityDeletedEvent;
  9. use Shopware\Core\Framework\DataAbstractionLayer\Event\EntityWrittenEvent;
  10. use Shopware\Core\Framework\Uuid\Uuid;
  11. use Shopware\Core\System\User\UserEvents;
  12. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  14. class UserCredentialsChangedSubscriber implements EventSubscriberInterface
  15. {
  16.     /**
  17.      * @var RefreshTokenRepository
  18.      */
  19.     private $refreshTokenRepository;
  21.     /**
  22.      * @var Connection
  23.      */
  24.     private $connection;
  26.     /**
  27.      * @internal
  28.      */
  29.     public function __construct(RefreshTokenRepository $refreshTokenRepository, Connection $connection)
  30.     {
  31.         $this->refreshTokenRepository = $refreshTokenRepository;
  32.         $this->connection = $connection;
  33.     }
  35.     public static function getSubscribedEvents(): array
  36.     {
  37.         return [
  38.             UserEvents::USER_WRITTEN_EVENT => 'onUserWritten',
  39.             UserEvents::USER_DELETED_EVENT => 'onUserDeleted',
  40.         ];
  41.     }
  43.     public function onUserWritten(EntityWrittenEvent $event): void
  44.     {
  45.         $payloads = $event->getPayloads();
  47.         foreach ($payloads as $payload) {
  48.             if ($this->userCredentialsChanged($payload)) {
  49.                 $this->refreshTokenRepository->revokeRefreshTokensForUser($payload['id']);
  50.                 $this->updateLastUpdatedPasswordTimestamp($payload['id']);
  51.             }
  52.         }
  53.     }
  55.     public function onUserDeleted(EntityDeletedEvent $event): void
  56.     {
  57.         $ids = $event->getIds();
  59.         foreach ($ids as $id) {
  60.             $this->refreshTokenRepository->revokeRefreshTokensForUser($id);
  61.         }
  62.     }
  64.     private function userCredentialsChanged(array $payload): bool
  65.     {
  66.         return isset($payload['password']);
  67.     }
  69.     private function updateLastUpdatedPasswordTimestamp(string $userId): void
  70.     {
  71.         $this->connection->update('user', [
  72.             'last_updated_password_at' => (new \DateTime())->format(Defaults::STORAGE_DATE_TIME_FORMAT),
  73.         ], [
  74.             'id' => Uuid::fromHexToBytes($userId),
  75.         ]);
  76.     }
  77. }