src/EventListener/KeycloakLogoutListener.php line 38

Open in your IDE?
  1. <?php
  3. namespace App\EventListener;
  5. use App\Security\Dto\TokensBag;
  6. use App\Model\User;
  7. use App\Service\KeycloakApiService;
  8. use Psr\Log\LoggerInterface;
  9. use Symfony\Component\DependencyInjection\ParameterBag\ParameterBagInterface;
  10. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  11. use Symfony\Component\HttpFoundation\RedirectResponse;
  12. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  13. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  14. use Symfony\Component\Security\Http\Event\LogoutEvent;
  16. class KeycloakLogoutListener implements EventSubscriberInterface
  17. {
  18.     private ParameterBagInterface $param;
  19.     private LoggerInterface $logger;
  20.     private KeycloakApiService $keycloakApiService;
  21.     private TokenStorageInterface $tokenStorage;
  22.     private UrlGeneratorInterface $urlGenerator;
  23.     private string|bool $vistoryRedirect;
  24.     private string $mcotPortailRedirect;
  26.     public function __construct(
  27.         UrlGeneratorInterface $urlGenerator,
  28.         TokenStorageInterface $tokenStorage,
  29.         KeycloakApiService $keycloakApiService,
  30.         LoggerInterface $logger,
  31.     ) {
  32.         $this->urlGenerator = $urlGenerator;
  33.         $this->tokenStorage = $tokenStorage;
  34.         $this->keycloakApiService = $keycloakApiService;
  35.         $this->logger = $logger;
  36.     }
  38.     public function logoutFromOidcProvider(LogoutEvent $event): void
  39.     {
  40.             $token = $this->tokenStorage->getToken();
  42.             $user = $token->getUser();
  43.             if (!$user instanceof User) {
  44.                 return;
  45.             }
  47.             $tokens = $token->getAttribute(TokensBag::class);
  48.             if (null === $tokens) {
  49.                 throw new \LogicException(sprintf('%s token attribute is empty', TokensBag::class));
  50.             }
  51.             $this->logger->info("***** Keycloak logout *****");
  52.             $this->keycloakApiService->logout($tokens->getRefreshToken());
  53.             $redirect = $this->urlGenerator->generate('login');
  54.             $event->setResponse(new RedirectResponse($redirect));
  55.     }
  57.     public static function getSubscribedEvents(): array
  58.     {
  59.         return [LogoutEvent::class => 'logoutFromOidcProvider'];
  60.     }
  61. }