src/Security/Voter/AuthAttemptVoter.php line 12

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voter;
  5. use App\Entity\AuthAttempt;
  6. use Doctrine\ORM\EntityManagerInterface;
  7. use Symfony\Component\DependencyInjection\ContainerInterface;
  8. use Symfony\Component\HttpFoundation\RequestStack;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  12. class AuthAttemptVoter extends Voter
  13. {
  14.     protected RequestStack $requestStack;
  16.     protected EntityManagerInterface $entityManager;
  17.     private ContainerInterface $container;
  19.     public function __construct(
  20.         RequestStack $requestStack,
  21.         EntityManagerInterface $entityManager,
  22.         ContainerInterface $container
  23.     ) {
  24.         $this->requestStack = $requestStack;
  25.         $this->entityManager = $entityManager;
  26.         $this->container = $container;
  27.     }
  29.     const VIEW_AUTH_FORM_CAPTCHA = 'view_auth_form_captcha';
  31.     protected function supports($attribute, $subject)
  32.     {
  33.         return in_array($attribute, [self::VIEW_AUTH_FORM_CAPTCHA]);
  34.     }
  36.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  37.     {
  41.         // ... (check conditions and return true to grant permission) ...
  42.         switch ($attribute) {
  43.             case self::VIEW_AUTH_FORM_CAPTCHA:
  44.                 return $this->isCanViewAuthFormCaptcha();
  45.                 break;
  46.         }
  48.         return false;
  49.     }
  51.     public function isCanViewAuthFormCaptcha()
  52.     {
  53.         if (false === $this->container->getParameter('ewz_recaptcha.enabled')) {
  54.             return false;
  55.         }
  57.         $authAttemptsRepo = $this->entityManager->getRepository(AuthAttempt::class);
  58.         $request = $this->requestStack->getCurrentRequest();
  59.         $clientIp = $request->headers->get('X-Real-IP', $request->getClientIp());
  60.         $count = $authAttemptsRepo->getTodayCount($clientIp, $request->attributes->get('_route'));
  61.         return $count > 3;
  62.     }
  63. }