vendor/shopware/core/Framework/Api/EventListener/Authentication/UserCredentialsChangedSubscriber.php line 48

  1. <?php declare(strict_types=1);
  3. namespace Shopware\Core\Framework\Api\EventListener\Authentication;
  5. use Doctrine\DBAL\Connection;
  6. use Shopware\Core\Defaults;
  7. use Shopware\Core\Framework\Api\OAuth\RefreshTokenRepository;
  8. use Shopware\Core\Framework\DataAbstractionLayer\Event\EntityDeletedEvent;
  9. use Shopware\Core\Framework\DataAbstractionLayer\Event\EntityWrittenEvent;
  10. use Shopware\Core\Framework\Log\Package;
  11. use Shopware\Core\Framework\Uuid\Uuid;
  12. use Shopware\Core\System\User\UserEvents;
  13. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  15. /**
  16.  * @internal
  17.  */
  18. #[Package('core')]
  19. class UserCredentialsChangedSubscriber implements EventSubscriberInterface
  20. {
  21.     /**
  22.      * @internal
  23.      */
  24.     public function __construct(private readonly RefreshTokenRepository $refreshTokenRepository, private readonly Connection $connection)
  25.     {
  26.     }
  28.     public static function getSubscribedEvents(): array
  29.     {
  30.         return [
  31.             UserEvents::USER_WRITTEN_EVENT => 'onUserWritten',
  32.             UserEvents::USER_DELETED_EVENT => 'onUserDeleted',
  33.         ];
  34.     }
  36.     public function onUserWritten(EntityWrittenEvent $event): void
  37.     {
  38.         $payloads = $event->getPayloads();
  40.         foreach ($payloads as $payload) {
  41.             if ($this->userCredentialsChanged($payload)) {
  42.                 $this->refreshTokenRepository->revokeRefreshTokensForUser($payload['id']);
  43.                 $this->updateLastUpdatedPasswordTimestamp($payload['id']);
  44.             }
  45.         }
  46.     }
  48.     public function onUserDeleted(EntityDeletedEvent $event): void
  49.     {
  50.         $ids = $event->getIds();
  52.         foreach ($ids as $id) {
  53.             $this->refreshTokenRepository->revokeRefreshTokensForUser($id);
  54.         }
  55.     }
  57.     /**
  58.      * @param array<string, mixed> $payload
  59.      */
  60.     private function userCredentialsChanged(array $payload): bool
  61.     {
  62.         return isset($payload['password']);
  63.     }
  65.     private function updateLastUpdatedPasswordTimestamp(string $userId): void
  66.     {
  67.         $this->connection->update('user', [
  68.             'last_updated_password_at' => (new \DateTime())->format(Defaults::STORAGE_DATE_TIME_FORMAT),
  69.         ], [
  70.             'id' => Uuid::fromHexToBytes($userId),
  71.         ]);
  72.     }
  73. }