src/ApplicationBundle/Listener/SessionListener.php line 887

Open in your IDE?
  1. <?php
  3. namespace ApplicationBundle\Listener;
  5. use ApplicationBundle\Interfaces\LoginInterface;
  6. use ApplicationBundle\Interfaces\SessionCheckInterface;
  7. use ApplicationBundle\Interfaces\SystemInterface;
  8. use ApplicationBundle\Modules\Authentication\Constants\UserConstants;
  9. use ApplicationBundle\Modules\System\MiscActions;
  10. use ApplicationBundle\Modules\System\System;
  11. use Symfony\Component\HttpFoundation\Cookie;
  12. use Symfony\Component\HttpFoundation\RedirectResponse;
  13. use Symfony\Component\HttpKernel\Event\FilterControllerEvent;
  14. use Symfony\Component\HttpKernel\Event\FilterResponseEvent;
  15. use Symfony\Component\HttpKernel\Event\ExceptionEvent;
  16. use Symfony\Component\HttpFoundation\JsonResponse;
  18. class SessionListener
  19. {
  20.     public $secretKey = "";
  21.     private $em;
  22.     private $em_goc;
  23.     private $dm;
  24.     private $router;
  25.     private $session;
  26.     private $resolver;
  27.     private $applicationConnector;
  28.     private $kernelRootDir;
  29.     private $container;
  30.     protected $urlEncryptor;
  32.     public function __construct($kernelRootDir, $container, $resolver, $applicationConnector, $router, $session, $db_credentials, $db_credentials_company_group, $secret, \Nzo\UrlEncryptorBundle\UrlEncryptor\UrlEncryptor $urlEncryptor)
  33.     {
  34.         $this->secretKey = $secret;
  35.         $this->em = $db_credentials;
  36.         $this->em_goc = $db_credentials_company_group;
  37. //        $this->dm=$odm_credentials;
  38.         $this->router = $router;
  39.         $this->resolver = $resolver;
  40.         $this->container = $container;
  41.         $this->applicationConnector = $applicationConnector;
  42.         $this->kernelRootDir = $kernelRootDir;
  43.         $this->session = $session;
  44.         $this->urlEncryptor = $urlEncryptor;
  45.     }
  47.     public function onKernelController(FilterControllerEvent $event)
  48.     {
  49.         $controller = $event->getController();
  51.         /*
  52.          * $controller passed can be either a class or a Closure.
  53.          * This is not usual in Symfony but it may happen.
  54.          * If it is a class, it comes in array format
  55.          */
  56.         if (!is_array($controller)) {
  57.             return;
  58.         }
  60.         $hbeeErrorCode = UserConstants::ERROR_USER_EXISTS_ALREADY;
  61.         $request = $event->getRequest();
  62.         $devAdminMode = '_UNCHANGED_';
  63.         if ($request->request->has('devAdminOn') || $request->query->has('devAdminOn')) {
  64.             $devAdminMode = $request->request->has('devAdminOn') ? $request->request->get('devAdminOn') : $request->query->get('devAdminOn');
  66.         }
  67. //        if ($request->request->has('devAdminOff')|| $request->query->has('devAdminOff')) {
  68. //            $devAdminMode=0;
  69. //
  70. //        }
  72.         $permissionOverride = 0;
  73.         if ($request->query->has('OVP'))
  74.             $permissionOverride = 1;
  77.         $authTokenInHeader = $event->getRequest()->headers->get('auth-token');
  78.         if ($authTokenInHeader) {
  79.             $request->request->set('hbeeSessionToken', $authTokenInHeader);
  81.         }
  82.         if ($request->query->has('tvp')) {
  83.             $tvp = json_decode($this->urlEncryptor->decrypt($request->query->get('tvp')), true);
  84.             $request->request->set('TVP', json_encode($tvp));
  86.             if (isset($tvp['timeout'])) {
  87.                 $currentDateTime = new \DateTime();
  88.                 $currTs = $currentDateTime->format('U');
  89.                 if ($tvp['timeout'] > $currTs || $tvp['timeout'] == 0) {
  91.                     if (isset($tvp['token']))
  92.                         $request->request->set('hbeeSessionToken', $tvp['token']);
  93.                 } else {
  94.                     $url = $this->router->generate('permission_denied_page');
  95.                     $event->setController(function () use ($url) {
  96.                         return new RedirectResponse($url);
  97.                     });
  98.                 }
  99.             }
  102.         }
  105.         //check if mobile
  106.         $session = $this->session;
  107.         if (empty($session->get('appValiditySeconds'))) {  //how many sevonds is valid
  108.             $session->set('appValiditySeconds', '_UNSET_');
  109.         }
  111.         if (empty($session->get('devAdminMode'))) {  //how many sevonds is valid
  112.             $session->set('devAdminMode', 0);
  113.         }
  114.         if ($devAdminMode != '_UNCHANGED_')
  115.             $session->set('devAdminMode', $devAdminMode);
  116.         $to_set_session_data = [];
  118.         $CurrentRoute = $event->getRequest()->attributes->get('_route');
  119.         if ($CurrentRoute == 'switch_app' || $CurrentRoute == 'app_switch_app_api') {
  121.             if ($request->query->has('hbeeSessionToken')) {
  123.                 $em_goc = $this->em_goc;
  126.                 $to_set_session_data = MiscActions::GetSessionDataFromToken($em_goc, $request->query->get('hbeeSessionToken'))['sessionData'];
  127.                 if ($to_set_session_data != null) {
  128.                     foreach ($to_set_session_data as $k => $d) {
  130.                         //check if mobile
  131.                         $session->set($k, $d);
  132.                     }
  134.                 } else {
  135.                     $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  136.                 }
  138.             } else {
  141.                 $url = $this->router->generate('user_login');
  142.                 if ($CurrentRoute == 'app_switch_app_api')
  143.                     $url .= ("?csToken=" . $request->query->get('csToken', '') . "&spd=" . $request->query->get('spd', '') . "&remoteVerify=1");
  144.                 else
  145.                     $url .= ("?csToken=" . $request->query->get('csToken', '') . "&spd=" . $request->query->get('spd', '') . "&remoteVerify=" . $request->query->get('remoteVerify', 0));
  148.                 $session->clear();
  149.                 $session->set('CLEARLOGIN', 1);
  151.                 $event->setController(function () use ($url) {
  152.                     return new RedirectResponse($url);
  153.                 });
  154.             }
  155.         }
  157. //        if ($CurrentRoute == 'select_second_layer_api' ) {
  158. //
  159. //            if ($request->query->has('hbeeSessionToken')) {
  160. //
  161. //                $em_goc = $this->em_goc;
  162. //
  163. //
  164. //                $to_set_session_data = MiscActions::GetSessionDataFromToken($em_goc, $request->query->get('hbeeSessionToken'))['sessionData'];
  165. //                if ($to_set_session_data != null) {
  166. //                    foreach ($to_set_session_data as $k => $d) {
  167. //
  168. //                        //check if mobile
  169. //                        $session->set($k, $d);
  170. //                    }
  171. //
  172. //                } else {
  173. //                    $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  174. //                }
  175. //
  176. //            } else {
  177. //
  178. //
  179. //            }
  180. //        }
  183.         if (!$session->has(UserConstants::USER_ID)) {
  184.             if ($request->request->has('token')) {
  186.                 $em_goc = $this->em_goc;
  189.                 $to_set_session_data = MiscActions::GetSessionDataFromToken($em_goc, $request->request->get('token'))['sessionData'];
  190.                 if ($to_set_session_data != null) {
  191.                     foreach ($to_set_session_data as $k => $d) {
  193.                         //check if mobile
  194.                         $session->set($k, $d);
  195.                     }
  197.                 } else {
  198.                     $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  199.                 }
  201.             } else if ($request->request->has('hbeeSessionToken')) {
  203.                 $em_goc = $this->em_goc;
  206.                 $to_set_session_data = MiscActions::GetSessionDataFromToken($em_goc, $request->request->get('hbeeSessionToken'))['sessionData'];
  207.                 if ($to_set_session_data != null) {
  208.                     foreach ($to_set_session_data as $k => $d) {
  210.                         //check if mobile
  211.                         $session->set($k, $d);
  212.                     }
  214.                 } else {
  215.                     $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  216.                 }
  218.             } else if ($request->query->has('hbeeSessionToken')) {
  220.                 $em_goc = $this->em_goc;
  223.                 $to_set_session_data = MiscActions::GetSessionDataFromToken($em_goc, $request->query->get('hbeeSessionToken'))['sessionData'];
  224.                 if ($to_set_session_data != null) {
  225.                     foreach ($to_set_session_data as $k => $d) {
  227.                         //check if mobile
  228.                         $session->set($k, $d);
  229.                     }
  231.                 } else {
  232.                     $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  233.                 }
  235.             } else if ($request->request->has('sessionData')) {
  236.                 $to_set_session_data = $request->request->get('sessionData');
  237.                 foreach ($to_set_session_data as $k => $d) {
  239.                     //check if mobile
  240.                     $session->set($k, $d);
  241.                 }
  243.             } else if ($request->request->has('sessionDataString')) {
  244.                 $to_set_session_data = json_decode($request->request->get('sessionDataString'), true);
  245.                 if ($to_set_session_data != null) {
  246.                     foreach ($to_set_session_data as $k => $d) {
  248.                         //check if mobile
  249.                         $session->set($k, $d);
  250.                     }
  252.                 }
  254.             }
  255.             if ($request->query->has('iFrameData')) {
  256.                 $session->set(UserConstants::USER_ID, $request->query->get('uId'));
  257.                 $session->set(UserConstants::USER_NAME, $request->query->get('uName'));
  258.                 $session->set(UserConstants::USER_LOGIN_ID, $request->query->get('loginId'));
  260.                 $session->set(UserConstants::APPLICATION_SECRET, $request->query->get('sKey'));
  261.                 $session->set(UserConstants::USER_GOC_ID, $request->query->get('gocId'));
  262.                 $session->set(UserConstants::USER_DB_NAME, $request->query->get('gocDb'));
  263.                 $session->set(UserConstants::USER_DB_USER, $request->query->get('gocUsr'));
  264.                 $session->set(UserConstants::USER_DB_PASS, $request->query->get('gocPass'));
  265.                 $session->set(UserConstants::USER_DB_HOST, $request->query->get('gocDh'));
  266.                 $session->set(UserConstants::USER_TYPE, $request->query->get('uType'));
  267.                 $session->set(UserConstants::USER_CURRENT_POSITION, $request->query->get('currPos'));
  268.                 $session->set(UserConstants::USER_COMPANY_ID, $request->query->get('cmpId'));
  269.                 $session->set(UserConstants::USER_APP_ID, $request->query->get('uAId'));
  270.                 $session->set(UserConstants::USER_IMAGE, "");
  271.                 $session->set('productNameDisplayType', 0);
  274.                 $cmpImg = $request->query->get('cmpIm');
  275.                 $cmpName = $request->query->get('cmpN');
  276.                 $app_cid = $request->query->get('uAId') . "_" . $request->query->get('cmpId');
  277.                 $cid = $request->query->get('cmpId');
  278.                 $session->set('userCompanyDarkVibrantList', json_encode(array(
  279.                     $cid => ""
  280.                 )));
  282.                 $cmpNameListStr = json_encode(array(
  283.                     $cid => $cmpName
  284.                 ));
  285.                 $cmpImageListStr = json_encode(array(
  286.                     $cid => $cmpImg
  287.                 ));
  290.                 $session->set(UserConstants::USER_COMPANY_NAME_LIST, $cmpNameListStr);
  291.                 $session->set(UserConstants::USER_COMPANY_IMAGE_LIST, $cmpImageListStr);
  293.                 $session->set(UserConstants::USER_PROHIBIT_LIST, "[]");
  294.                 $session->set(UserConstants::ALL_MODULE_ACCESS_FLAG, 1);
  296.             }
  297.         }
  298. //        $path=$this->kernelRootDir. '/gifnoc/invdata.json';
  299. //        file_put_contents($path, json_encode(array(
  300. //            'sessionDataString'=>$request->request->get('sessionDataString'),
  301. //            'productCode'=>$request->request->get('productCode'),
  302. //            'userId'=>$session->get(UserConstants::USER_ID),
  303. //            'sessionData'=>json_decode($request->request->get('sessionDataString'),true),
  304. //            'to_set_session_data'=>$to_set_session_data,
  305. ////            'invData'=>$data_searched,
  306. //
  307. //        )));//overwrite
  310.         if (!$session->has('isMobile')) {
  311. //        if
  313.             $useragent = $event->getRequest()->headers->get('User-Agent');
  314.             if (!$useragent) {
  315.                 return false;
  316.             }
  318.             $isMobile = (
  319.                 preg_match('/(android|bb\d+|meego).+mobile|avantgo|bada\/|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od)|iris|kindle|lge |maemo|midp|mmp|mobile.+firefox|netfront|opera m(ob|in)i|palm( os)?|phone|p(ixi|re)\/|plucker|pocket|psp|series(4|6)0|symbian|treo|up\.(browser|link)|vodafone|wap|windows ce|xda|xiino/i', $useragent) ||
  320.                 preg_match('/1207|6310|6590|3gso|4thp|50[1-6]i|770s|802s|a wa|abac|ac(er|oo|s\-)|ai(ko|rn)|al(av|ca|co)|amoi|an(ex|ny|yw)|aptu|ar(ch|go)|as(te|us)|attw|au(di|\-m|r |s )|avan|be(ck|ll|nq)|bi(lb|rd)|bl(ac|az)|br(e|v)w|bumb|bw\-(n|u)|c55\/|capi|ccwa|cdm\-|cell|chtm|cldc|cmd\-|co(mp|nd)|craw|da(it|ll|ng)|dbte|dc\-s|devi|dica|dmob|do(c|p)o|ds(12|\-d)|el(49|ai)|em(l2|ul)|er(ic|k0)|esl8|ez([4-7]0|os|wa|ze)|fetc|fly(\-|_)|g1 u|g560|gene|gf\-5|g\-mo|go(\.w|od)|gr(ad|un)|haie|hcit|hd\-(m|p|t)|hei\-|hi(pt|ta)|hp( i|ip)|hs\-c|ht(c(\-| |_|a|g|p|s|t)|tp)|hu(aw|tc)|i\-(20|go|ma)|i230|iac( |\-|\/)|ibro|idea|ig01|ikom|im1k|inno|ipaq|iris|ja(t|v)a|jbro|jemu|jigs|kddi|keji|kgt( |\/)|klon|kpt |kwc\-|kyo(c|k)|le(no|xi)|lg( g|\/(k|l|u)|50|54|\-[a-w])|libw|lynx|m1\-w|m3ga|m50\/|ma(te|ui|xo)|mc(01|21|ca)|m\-cr|me(rc|ri)|mi(o8|oa|ts)|mmef|mo(01|02|bi|de|do|t(\-| |o|v)|zz)|mt(50|p1|v )|mwbp|mywa|n10[0-2]|n20[2-3]|n30(0|2)|n50(0|2|5)|n7(0(0|1)|10)|ne((c|m)\-|on|tf|wf|wg|wt)|nok(6|i)|nzph|o2im|op(ti|wv)|oran|owg1|p800|pan(a|d|t)|pdxg|pg(13|\-([1-8]|c))|phil|pire|pl(ay|uc)|pn\-2|po(ck|rt|se)|prox|psio|pt\-g|qa\-a|qc(07|12|21|32|60|\-[2-7]|i\-)|qtek|r380|r600|raks|rim9|ro(ve|zo)|s55\/|sa(ge|ma|mm|ms|ny|va)|sc(01|h\-|oo|p\-)|sdk\/|se(c(\-|0|1)|47|mc|nd|ri)|sgh\-|shar|sie(\-|m)|sk\-0|sl(45|id)|sm(al|ar|b3|it|t5)|so(ft|ny)|sp(01|h\-|v\-|v )|sy(01|mb)|t2(18|50)|t6(00|10|18)|ta(gt|lk)|tcl\-|tdg\-|tel(i|m)|tim\-|t\-mo|to(pl|sh)|ts(70|m\-|m3|m5)|tx\-9|up(\.b|g1|si)|utst|v400|v750|veri|vi(rg|te)|vk(40|5[0-3]|\-v)|vm40|voda|vulc|vx(52|53|60|61|70|80|81|83|85|98)|w3c(\-| )|webc|whit|wi(g |nc|nw)|wmlb|wonu|x700|yas\-|your|zeto|zte\-/i', substr($useragent, 0, 4))
  321.             );
  323.             $session->set('isMobile', $isMobile);
  324.         }
  327.         if ($controller[0] instanceof SessionCheckInterface) {
  330.             if (!empty($session->get(UserConstants::USER_ID))) {
  333.                 if ($session->get(UserConstants::APPLICATION_SECRET) == $this->secretKey) {
  335.                     //if session check variable is more than 1 hour from now, update app validity but if already disabled then check on every call
  336.                     $lastCheckDateTime = null;
  337.                     $appValid = 1;
  338.                     $currentDateTime = new \DateTime();
  340.                     $currentTime = strtotime($currentDateTime->format('Y-m-d h:i:s'));
  341.                     $appIsValidTillTime = $currentTime;
  342.                     $appIsValidTillDateTime = $currentDateTime;
  344. //                    $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  346.                     if (!empty($session->get('lastCheckAppValidityTime'))) {
  347.                         $lastCheckDateTime = strtotime($session->get('lastCheckAppValidityTime'));
  348.                     } else {
  349.                         $lastCheckDateTime = strtotime('2022-01-01 00:00:00');
  350.                     }
  351.                     if (!empty($session->get('appIsValidTillTime'))) {
  352.                         $appIsValidTillTime = strtotime($session->get('appIsValidTillTime'));
  353.                         $appIsValidTillDateTime = new \DateTime($session->get('appIsValidTillTime'));
  354.                     } else {
  355. //                        $appIsValidTillTime=$currentDateTime;
  356. //                        $session->set('appIsValidTillTime', $appIsValidTillTime->format('Y-m-d h:i:s'));
  357.                     }
  358.                     if (!empty($session->get('appValid'))) {
  359.                         $appValid = $session->get('appValid');
  360.                     }
  362.                     $secondsTillLastCheck = abs($currentTime - $lastCheckDateTime);
  363. //                    $session->set('secondsTillLastCheck',$secondsTillLastCheck);
  364. //                    $session->set('lastCheckAppValiditySecond', abs($currentTime - $lastCheckDateTime));
  365.                     if ($secondsTillLastCheck > 7200 || $appValid == 0) {
  366.                         $appValiditySeconds = $session->get('appValiditySeconds');
  368.                         $appDataJson = System::getAppDataByCurl();
  369. //                        $session->set('appDataJson',$appDataJson);
  370.                         $appData = json_decode($appDataJson, true);
  372. //                        $appIsValidTillTime=$currentDateTime;
  373.                         if ($appData == null)
  374.                             $appData = [];
  375.                         if (isset($appData[$session->get(UserConstants::USER_APP_ID)])) {
  376.                             $session->set('appDataCurl', $appData[$session->get(UserConstants::USER_APP_ID)]);
  377.                             if ($appData[$session->get(UserConstants::USER_APP_ID)]['expired'] == 1) {
  378.                                 $appValid = 0;
  379.                                 $appValiditySeconds = 0;
  380.                             } else {
  381.                                 $appIsValidTillTime = strtotime($appData[$session->get(UserConstants::USER_APP_ID)]['suspensionDate']);
  382.                                 $appIsValidTillDateTime = new \DateTime($appData[$session->get(UserConstants::USER_APP_ID)]['suspensionDate']);
  383.                                 $appValiditySeconds = $appIsValidTillTime - $currentTime;
  384.                                 if ($appValiditySeconds < 0)
  385.                                     $appValid = 0;
  386.                                 else
  387.                                     $appValid = 1;
  388.                             }
  389.                         } else {
  391.                         }
  393.                         $session->set('appValiditySeconds', $appValiditySeconds);
  394.                         $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  396.                         $session->set('lastCheckAppValidityTime', $currentDateTime->format('Y-m-d h:i:s'));
  397.                         $session->set('appValid', $appValid);
  398.                     }
  400.                     $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  401.                     if ($appValid != 1) {
  402.                         $url = $this->router->generate('user_logout');
  404.                         if (strripos($request->server->get('REQUEST_URI'), 'select_data') === false) {
  405.                             if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  406.                                 $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  407.                             }
  408.                         } else {
  409.                             $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  410.                         }
  411. //                        if ($request->server->has("REQUEST_URI")) {
  412. //                            if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  413. ////                            return $this->redirect($request->request->get('HTTP_REFERER'));
  414. //                                $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  415. //                            }
  416. //                        }
  417. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  420.                         $event->setController(function () use ($url) {
  421.                             return new RedirectResponse($url);
  422.                         });
  424.                     }
  427.                     $gocId = $session->get(UserConstants::USER_GOC_ID);
  428.                     if ($gocId != 0 && $gocId != "") {
  430.                         $gocDbName = $session->get(UserConstants::USER_DB_NAME);
  431.                         $gocDbUser = $session->get(UserConstants::USER_DB_USER);
  432.                         $gocDbPass = $session->get(UserConstants::USER_DB_PASS);
  433.                         $gocDbHost = $session->get(UserConstants::USER_DB_HOST);
  436. //                        $connector = $this->container->get('application_connector');
  437.                         $connector = $this->applicationConnector;
  438.                         $connector->resetConnection(
  439.                             'default',
  440.                             $gocDbName,
  441.                             $gocDbUser,
  442.                             $gocDbPass,
  443.                             $gocDbHost,
  444.                             $reset = false);
  445.                     }
  447.                     // User already have logged in. lets check its type
  448.                     if (
  449.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_SYSTEM ||
  450.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_GENERAL ||
  451.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_SUPPLIER ||
  452.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_ENTITY_USER_GENERAL_USER ||
  453.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_ENTITY_USER_GROUP_OWNER ||
  454.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_CLIENT ||
  455.                         $session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_APPLICANT
  457.                     ) {
  458.                         if (!empty($session->get('TRIGGER_RESET_PASSWORD')) || $session->get('IS_EMAIL_VERIFIED', 0) == 0) {
  459.                             if (!empty($session->get('TRIGGER_RESET_PASSWORD'))) {
  460.                                 if ($session->get('TRIGGER_RESET_PASSWORD') == 1 && !$authTokenInHeader) {
  463.                                     $red = $this->router->generate('reset_password_new_password');
  464.                                     if (!$request->request->has('remoteVerify')) {
  465.                                         $session->set('TRIGGER_RESET_PASSWORD', 0);
  466.                                         $event->setController(function () use ($red) {
  467.                                             return new RedirectResponse($red);
  468.                                         });
  469.                                     }
  472.                                 }
  474.                             }
  476.                             if ($session->get('IS_EMAIL_VERIFIED') == 0 && !$authTokenInHeader) {
  479.                                 $red = $this->router->generate('verify_email');
  480.                                 if (!$request->request->has('remoteVerify')) {
  482.                                     $event->setController(function () use ($red) {
  483.                                         return new RedirectResponse($red);
  484.                                     });
  485.                                 }
  488.                             }
  489.                         } else if (!empty($session->get('LAST_REQUEST_URI_BEFORE_LOGIN'))) {
  490.                             if (strripos($session->get('LAST_REQUEST_URI_BEFORE_LOGIN'), 'select_data') === false) {
  491.                                 if ($session->get('LAST_REQUEST_URI_BEFORE_LOGIN') != '' && $session->get('LAST_REQUEST_URI_BEFORE_LOGIN') != null) {
  492.                                     $red = $session->get('LAST_REQUEST_URI_BEFORE_LOGIN');
  494.                                     $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  495.                                     if (!$request->request->has('remoteVerify')) {
  496.                                         $event->setController(function () use ($red) {
  497.                                             return new RedirectResponse($red);
  498.                                         });
  499.                                     }
  502.                                 }
  503.                             } else {
  504.                                 $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  505.                             }
  506.                         }
  509.                     } else {
  510.                         $message = "Session Not Found";
  511.                         if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  513.                         } else {
  514.                             if ($request->server->has("REQUEST_URI")) {
  516.                                 if (strripos($request->server->get('REQUEST_URI'), 'select_data') === false) {
  517.                                     if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  518.                                         $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  519.                                     }
  520.                                 } else {
  521.                                     $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  522.                                 }
  524.                             }
  525.                         }
  526.                         if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  527.                             $session->set('jsonStrForListenerData', json_encode(array(
  528.                                 'uid' => 0,
  529.                                 'session' => [],
  530.                                 'success' => false,
  531.                                 'sessionExists' => false,
  532.                                 'hbeeErrorCode' => $hbeeErrorCode,
  533.                                 'errorStr' => $message,
  534.                                 'session_data' => [],
  535. //                                'session2' => $_SESSION,
  536.                             )));
  537.                             $url = $this->router->generate('return_json_for_listener');
  538. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  539.                             $event->getRequest()->attributes->set('_controller', 'ApplicationBundle:PublicPages:ReturnJsonForListener');
  540.                             $event->setController($this->resolver->getController($request));
  543. //                        $event->setController(function () use ($url) {
  544. //                            return new RedirectResponse($url);
  545. //                        });
  546.                         } else {
  547.                             $url = $this->router->generate('user_logout');
  548.                             $event->setController(function () use ($url) {
  549.                                 return new RedirectResponse($url);
  550.                             });
  552.                         }
  553.                     }
  555.                 } else {
  556.                     $message = "Session Not Found";
  557.                     if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  559.                     } else {
  560.                         if ($request->server->has("REQUEST_URI")) {
  562.                             if (strripos($request->server->get('REQUEST_URI'), 'select_data') === false) {
  563.                                 if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  564.                                     $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  565.                                 }
  566.                             } else {
  567.                                 $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  568.                             }
  569. //                            if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  570. ////                            return $this->redirect($request->request->get('HTTP_REFERER'));
  571. //                                $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  572. //                            }
  573.                         }
  574.                     }
  575.                     if ($request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  576.                         $session->set('jsonStrForListenerData', json_encode(array(
  577.                             'uid' => 0,
  578.                             'session' => [],
  579.                             'success' => false,
  580.                             'sessionExists' => false,
  581.                             'hbeeErrorCode' => $hbeeErrorCode,
  582.                             'errorStr' => $message,
  583.                             'session_data' => [],
  584. //                            'session2' => $_SESSION,
  585.                         )));
  586.                         $url = $this->router->generate('return_json_for_listener');
  587. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  588.                         $event->getRequest()->attributes->set('_controller', 'ApplicationBundle:PublicPages:ReturnJsonForListener');
  589.                         $event->setController($this->resolver->getController($request));
  592. //                        $event->setController(function () use ($url) {
  593. //                            return new RedirectResponse($url);
  594. //                        });
  595.                     } else {
  596.                         $url = $this->router->generate('user_logout');
  597.                         $event->setController(function () use ($url) {
  598.                             return new RedirectResponse($url);
  599.                         });
  600.                     }
  601.                 }
  602.             } else {
  605.                 // User can't see this page until do a login. let him/her login first.
  608.                 $message = "Session Not Found";
  609.                 $hbeeErrorCode = UserConstants::ERROR_TOKEN_EXPIRED;
  611.                 if ($authTokenInHeader || $request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  613.                 } else {
  614.                     if ($request->server->has("REQUEST_URI")) {
  615.                         if (strripos($request->server->get('REQUEST_URI'), 'select_data') === false) {
  616.                             if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  617.                                 $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  618.                             }
  619.                         } else {
  620.                             $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', '');
  621.                         }
  622. //                        if ($request->server->get('REQUEST_URI') != '/' && $request->server->get('REQUEST_URI') != '') {
  623. ////                            return $this->redirect($request->request->get('HTTP_REFERER'));
  624. //                            $session->set('LAST_REQUEST_URI_BEFORE_LOGIN', $request->server->get('REQUEST_URI'));
  625. //                        }
  626.                     }
  627.                 }
  628.                 $session->set('jsonStrForListenerData', json_encode([]));
  630.                 if ($authTokenInHeader || $request->request->has('remoteVerify') || $request->request->has('returnJson') || $request->query->has('returnJson')) {
  631.                     $session->set('jsonStrForListenerData', json_encode(array(
  632.                         'uid' => 0,
  633.                         'session' => [],
  634.                         'success' => false,
  635.                         'sessionExists' => false,
  636.                         'hbeeErrorCode' => $hbeeErrorCode,
  637.                         'errorStr' => $message,
  638.                         'session_data' => [],
  639. //                        'session2' => $_SESSION,
  640.                     )));
  641.                     $url = $this->router->generate('return_json_for_listener');
  642. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  644.                     $event->getRequest()->attributes->set('_controller', 'ApplicationBundle:PublicPages:ReturnJsonForListener');
  645.                     $event->setController($this->resolver->getController($request));
  648. //                    $event->setController(function () use ($url) {
  649. //                        return new RedirectResponse($url);
  650. //                    });
  651. //                    return new JsonResponse();
  652.                 } else {
  654.                     $url = $this->router->generate('user_login');
  655. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  658.                     $event->setController(function () use ($url) {
  659.                         return new RedirectResponse($url);
  660.                     });
  661.                 }
  664.             }
  666.             $em = $this->em;
  667. //            if ($CurrentRoute != "update_database_schema")
  668. //                MiscActions::decryptTrans($em, '_ALL_', 0);
  670. //            Here we got a general user who have all the right things. Let see if he/she have permission to tre current route.
  671. //            $ROUTE_LIST=json_decode($session->get(UserConstants::USER_ROUTE_LIST), true);
  672.             $PROHIBIT_LIST = json_decode($session->get(UserConstants::USER_PROHIBIT_LIST), true);
  673.             $CurrentRoute = $event->getRequest()->attributes->get('_route');
  674.             $PL_unfiltered = json_decode($session->get(UserConstants::USER_POSITION_LIST), true);
  675.             if ($PL_unfiltered == null)
  676.                 $PL_unfiltered = [];
  677.             $PL = [];
  679.             foreach ($PL_unfiltered as $PLU) {
  680.                 if ($PLU != '' && $PLU != " " && $PLU != 0 && $PLU != null)
  681.                     $PL[] = $PLU;
  682.             }
  684.             if (!empty($PL) && $session->get(UserConstants::USER_CURRENT_POSITION) == 0) {
  685.                 $url = $this->router->generate('user_login_position');
  686.                 $event->setController(function () use ($url) {
  687.                     return new RedirectResponse($url);
  688.                 });
  689.             }
  690.             if ($CurrentRoute == "user_login_position") {
  691.                 if (!empty($session->get(UserConstants::USER_ID))) {
  692.                     // This is an system user. send him to system dashboard
  693.                     if ($session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_SYSTEM) {
  694.                         // This is an system user. send him to system dashboard
  695.                         $url = $this->router->generate('system_admin_dashboard');
  696.                         $event->setController(function () use ($url) {
  697.                             return new RedirectResponse($url);
  698.                         });
  699.                     } else {
  700.                         if (!empty($session->get(UserConstants::USER_CURRENT_POSITION)) && $session->get(UserConstants::USER_CURRENT_POSITION) != 0) {
  701.                             // user position got set up. send him to the normal dashboard.
  704.                             $PL = json_decode($session->get(UserConstants::USER_POSITION_LIST), true);
  705.                             if ($PL == null) $PL = [];
  707.                             if (count($PL) <= 1) {
  709.                                 $url = $this->router->generate('dashboard');
  710.                                 $event->setController(function () use ($url) {
  711.                                     return new RedirectResponse($url);
  712.                                 });
  713.                             }
  714.                         }
  715.                     }
  716.                 } else {
  718.                     // User can't see this page until do a login. let him/her login first.
  719.                     $url = $this->router->generate('user_login');
  720.                     $event->setController(function () use ($url) {
  721.                         return new RedirectResponse($url);
  722.                     });
  723.                 }
  724.             }
  726.             if ($permissionOverride == 0 && $CurrentRoute != "dashboard" && $CurrentRoute != $session->get(UserConstants::USER_DEFAULT_ROUTE)) {
  727.                 if ($PROHIBIT_LIST != null or $PROHIBIT_LIST != []) {
  728.                     if (in_array($CurrentRoute, $PROHIBIT_LIST)) {
  729.                         // User is not authorized. send him to dashboard
  730. //                    $controller->addFlash(
  731. //                        'error',
  732. //                        'Sorry Couldnot insert Data.'
  733. //                    );
  734.                         $url = $this->router->generate('permission_denied_page');
  735.                         $event->setController(function () use ($url) {
  736.                             return new RedirectResponse($url);
  737.                         });
  738.                     }
  739.                 }
  740.             }
  741.         }
  743.         if ($controller[0] instanceof LoginInterface) {
  745.             $session = $this->session;
  747.             // Three situation here
  748.             //  1. Have no session
  749.             //  2. Have session but no position
  750.             //  3. Have session and position
  752.             $route = $event->getRequest()->attributes->get('_route');
  754.             $systemType = '_ERP';//default
  756.             $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  758.             if ($route == "user_login") {
  759.                 if ($request->request->get('remoteVerify', $request->query->get('remoteVerify', 0)) == 1) {
  760.                     $session->clear();
  761.                 } else if (!empty($session->get(UserConstants::USER_ID))) {
  762.                     // User already have logged in. lets check its type
  765.                     if ($systemType == '_ERP_') {
  766.                         if ($session->get(UserConstants::USER_TYPE) == UserConstants::USER_TYPE_SYSTEM) {
  767.                             // This is an system user. send him to system dashboard
  768.                             $url = $this->router->generate('system_admin_dashboard');
  769.                             $event->setController(function () use ($url) {
  770.                                 return new RedirectResponse($url);
  771.                             });
  772.                         } else {
  773.                             // This user is a normal user. Check if its login position got set.
  774.                             if (!empty($session->get(UserConstants::USER_CURRENT_POSITION))) {
  775.                                 // user position got set up. send him to the normal dashboard.
  776.                                 $url = $this->router->generate('dashboard');
  777.                                 if ($request->request->has('remoteVerify')) {
  778.                                     $session->set('remoteVerified', 1);
  780.                                     $url = $this->router->generate('get_session_data_for_app');
  781.                                     $event->setController(function () use ($url) {
  782.                                         return new RedirectResponse($url);
  783.                                     });
  786.                                 }
  787.                                 $event->setController(function () use ($url) {
  788.                                     return new RedirectResponse($url);
  789.                                 });
  791.                             } else {
  792.                                 // user position have not set up. send it to the position page
  793.                                 $url = $this->router->generate('user_login_position');
  794.                                 $event->setController(function () use ($url) {
  795.                                     return new RedirectResponse($url);
  796.                                 });
  798.                             }
  799.                         }
  801.                         //do nothing its default to dashboard index
  802.                     } else if ($systemType == '_BUDDYBEE_') {
  803. //                        $event->getRequest()->attributes->set('_controller', 'ApplicationBundle:BuddybeePublic:ConsultancyHomePage');
  804. //                        $event->setController($this->resolver->getController($request));
  805.                     }
  808.                 } else {
  809.                     if ($systemType == '_ERP_') {
  812.                         //do nothing its default to dashboard index
  813.                     } else if ($systemType == '_BUDDYBEE_' && $request->isMethod('GET')) {
  814.                         if ($request->request->has('oAuthData') || $request->query->has('oAuthData') || $request->query->has('code')) {
  816.                         } else {
  817.                             $event->getRequest()->attributes->set('_controller', 'ApplicationBundle\Modules\Authentication\Controller\UserLoginController::applicantLoginAction');
  818.                             $event->setController($this->resolver->getController($request));
  819.                         }
  820.                     }
  821. //                    if ($systemType == '_BUDDYBEE_' && $request->isMethod('POST')) {
  822. //
  823. //                            $event->getRequest()->attributes->set('_controller', 'ApplicationBundle:UserLogin:applicantLogin');
  824. //                        $event->setController($this->resolver->getController($request));
  825. //                    }
  827.                 }
  828.             }
  831.         }
  833.         // Checking if its a system url request.
  834.         if ($controller[0] instanceof SystemInterface) {
  835.             // System controller.
  836.             $session = $this->session;
  837.             if (!empty($session->get(UserConstants::USER_ID))) {
  838.                 if ($session->get(UserConstants::USER_TYPE) != UserConstants::USER_TYPE_SYSTEM) {
  839.                     // Kick the idiot out from here. If possible, keep a track
  841.                     $url = $this->router->generate('user_logout');
  842.                     $event->setController(function () use ($url) {
  843.                         return new RedirectResponse($url);
  844.                     });
  845.                 } else {
  846.                     $lastCheckDateTime = null;
  847.                     $appValid = 1;
  848.                     $currentDateTime = new \DateTime();
  850.                     $currentTime = strtotime($currentDateTime->format('Y-m-d h:i:s'));
  851.                     $appIsValidTillTime = $currentTime;
  852.                     $appIsValidTillDateTime = $currentDateTime;
  854. //                    $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  856.                     if (!empty($session->get('lastCheckAppValidityTime'))) {
  857.                         $lastCheckDateTime = strtotime($session->get('lastCheckAppValidityTime'));
  858.                     } else {
  859.                         $lastCheckDateTime = strtotime('2022-01-01 00:00:00');
  860.                     }
  861.                     if (!empty($session->get('appIsValidTillTime'))) {
  862.                         $appIsValidTillTime = strtotime($session->get('appIsValidTillTime'));
  863.                         $appIsValidTillDateTime = new \DateTime($session->get('appIsValidTillTime'));
  864.                     } else {
  865. //                        $appIsValidTillTime=$currentDateTime;
  866. //                        $session->set('appIsValidTillTime', $appIsValidTillTime->format('Y-m-d h:i:s'));
  867.                     }
  868.                     if (!empty($session->get('appValid'))) {
  869.                         $appValid = $session->get('appValid');
  870.                     }
  872.                     $secondsTillLastCheck = abs($currentTime - $lastCheckDateTime);
  873. //                    $session->set('lastCheckAppValiditySecond', abs($currentTime - $lastCheckDateTime));
  874.                     if ($secondsTillLastCheck > 7200 || $appValid == 0) {
  875.                         $appValiditySeconds = $session->get('appValiditySeconds');
  877.                         $appDataJson = System::getAppDataByCurl();
  878.                         $appData = json_decode($appDataJson, true);
  879. //                        $appIsValidTillTime=$currentDateTime;
  880.                         if ($appData == null)
  881.                             $appData = [];
  882.                         if (isset($appData[$session->get(UserConstants::USER_APP_ID)])) {
  883.                             $session->set('appDataCurl', $appData[$session->get(UserConstants::USER_APP_ID)]);
  884.                             if ($appData[$session->get(UserConstants::USER_APP_ID)]['expired'] == 1) {
  885.                                 $appValid = 0;
  886.                                 $appValiditySeconds = 0;
  887.                             } else {
  888.                                 $appIsValidTillTime = strtotime($appData[$session->get(UserConstants::USER_APP_ID)]['suspensionDate']);
  889.                                 $appIsValidTillDateTime = new \DateTime($appData[$session->get(UserConstants::USER_APP_ID)]['suspensionDate']);
  890.                                 $appValiditySeconds = $appIsValidTillTime - $currentTime;
  891.                                 if ($appValiditySeconds < 0)
  892.                                     $appValid = 0;
  893.                                 else
  894.                                     $appValid = 1;
  895.                             }
  896.                         }
  898.                         $session->set('appValiditySeconds', $appValiditySeconds);
  899.                         $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  901.                         $session->set('lastCheckAppValidityTime', $currentDateTime->format('Y-m-d h:i:s'));
  902.                         $session->set('appValid', $appValid);
  903.                     }
  905.                     $session->set('appIsValidTillTime', $appIsValidTillDateTime->format('Y-m-d h:i:s'));
  906.                     if ($appValid != 1) {
  907.                         $url = $this->router->generate('user_logout');
  908. //                $request->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', 1));
  911.                         $event->setController(function () use ($url) {
  912.                             return new RedirectResponse($url);
  913.                         });
  914.                     }
  917.                     $gocId = $session->get(UserConstants::USER_GOC_ID);
  918.                     if ($gocId != 0 && $gocId != "") {
  920.                         $gocDbName = $session->get(UserConstants::USER_DB_NAME);
  921.                         $gocDbUser = $session->get(UserConstants::USER_DB_USER);
  922.                         $gocDbPass = $session->get(UserConstants::USER_DB_PASS);
  923.                         $gocDbHost = $session->get(UserConstants::USER_DB_HOST);
  926. //                        $connector = $this->container->get('application_connector');
  927.                         $connector = $this->applicationConnector;
  928.                         $connector->resetConnection(
  929.                             'default',
  930.                             $gocDbName,
  931.                             $gocDbUser,
  932.                             $gocDbPass,
  933.                             $gocDbHost,
  934.                             $reset = true);
  935.                     }
  936.                 }
  937.             } else {
  938.                 // Seriously !! How did this person get this url. Track the pc if possible.
  940.                 $url = $this->router->generate('user_login');
  941.                 $event->setController(function () use ($url) {
  942.                     return new RedirectResponse($url);
  943.                 });
  944.             }
  945.         }
  948.         //dashboard for diff aspects
  949.         if ($event->getRequest()->attributes->get('_route') == 'dashboard') {
  951.             $systemType = '_ERP';//default
  953.             $systemType = $this->container->hasParameter('system_type') ? $this->container->getParameter('system_type') : '_ERP_';
  955.             if ($systemType == '_ERP_') {
  957.                 //do nothing its default to dashboard index
  958.             } else if ($systemType == '_BUDDYBEE_') {
  959.                 $event->getRequest()->attributes->set('_controller', 'ApplicationBundle\Modules\Buddybee\Controller\BuddybeePublicController:ConsultancyHomePageAction');
  960.                 $event->setController($this->resolver->getController($request));
  961.             } else if ($systemType == '_CENTRAL_') {
  962.                 $event->getRequest()->attributes->set('_controller', 'ApplicationBundle\Modules\HoneybeeWeb\Controller\HoneybeeWebPublicController:CentralHomePageAction');
  963.                 $event->setController($this->resolver->getController($request));
  964.             }
  967. //            $event->setController(function() use ($url) {
  968. //                return new RedirectResponse($url);
  969. //            });
  970. //            $event->setController((\ApplicationBundle\Controller\BuddybeePublicController())->ConsultancyHomePageAction() );
  971.         }
  974.     }
  976.     public function onKernelResponse(FilterResponseEvent $event)
  977.     {
  979.         $session = $this->session;
  980.         $request = $event->getRequest();
  981.         $response = $event->getResponse();
  982.         //temp debug
  984.         $em = $this->em;
  985.         $currRoute = $request->attributes->get('_route');
  986. //        if ($currRoute != "update_database_schema")
  987. //            MiscActions::encryptTrans($em, '_ALL_', 0);
  989.         if ($currRoute=='zkteco_handshake' ||
  990.             $currRoute=='zkteco_get_request' ||
  991.             $currRoute=='zkteco_device_cmd'
  992.         ) {
  993.             $response->headers->remove('Date');
  994.             $response->headers->remove('date');
  995.             $response->setStatusCode(200);
  997. // Remove headers Symfony adds automatically
  998.             $response->headers->remove('Cache-Control');
  999.             $response->headers->remove('Last-Modified');
  1000.             $response->headers->remove('Expires');
  1001.         } else {
  1003.             if (
  1004.                 ($request->request->has('returnJson') || $request->request->has('remoteVerify')) &&
  1005.                 $request->request->has('token') &&
  1006.                 !in_array($currRoute, [
  1007.                     'select_data_ajax',
  1008.                     'select_data_api',
  1009.                     'select_data_ajax_public',
  1010.                 ])
  1012.             ) {
  1013.                 $currDate = new \DateTime();
  1014.                 $to_write = '';
  1015.                 $to_write .= "\nToken--" . $request->request->get('token', 'NONE') . '  : ' . $currDate->format('F d Y H:i:s');
  1016.                 $to_write .= "\nResponse:\n
  1017.             ";
  1018.                 if (is_string($response->getContent()))
  1019.                     $to_write .= $response->getContent();
  1020.                 else
  1021.                     $to_write .= json_encode($response->getContent());
  1023. //            System::log_it($this->container->getParameter('kernel.root_dir'), $to_write, $currRoute, 1);
  1024.             }
  1027.             if ($session->has('remoteVerified')) {
  1028.                 $lifetime = 86400; // 1 day
  1030. //            $response->headers->setCookie(Cookie::create('PHPSESSID', $event->getRequest()->cookies->get('PHPSESSID'),time()+$lifetime));
  1031.                 $response->headers->set('Access-Control-Allow-Origin', $event->getRequest()->headers->get('origin'));
  1032.                 $response->headers->set('Access-Control-Allow-Credentials', 'true');
  1034. //            $response->headers->setCookie(Cookie::create('PIKAMASTER', $event->getRequest()->cookies->get('PHPSESSID'),time()+$lifetime));
  1036.             } else {
  1039.                 // create a hash and set it as a response header
  1040. //        $hash = sha1($response->getContent().$token);
  1041. //            $response->headers->set('Access-Control-Allow-Origin', '*');
  1042. //            $response->headers->set('Access-Control-Allow-Credentials', 'true');
  1043.                 $response->headers->set('Access-Control-Allow-Origin', $event->getRequest()->headers->get('origin'));
  1044.                 $response->headers->set('Access-Control-Allow-Credentials', 'true');
  1045. //            $response->headers->setCookie(Cookie::create('honeybeeCAuthId', $session->get(UserConstants::USER_ID)));
  1046. //            $response->headers->setCookie(Cookie::create('honeybeeCAuthId2', $event->getRequest()->cookies->get('PHPSESSID')));
  1048.             }
  1049. //        if($session->has(UserConstants::USER_ID)) {
  1050. //            if ($session->get(UserConstants::USER_ID) == '' || $session->get(UserConstants::USER_ID) == '') {
  1051. //                $response->headers->setCookie(Cookie::create('USRCKIE', ''));
  1052. //                $response->headers->setCookie(Cookie::create('REMEMBERME', ''));
  1053. //                $response->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', ''));
  1054. //            }
  1055. //        }
  1056. //        else
  1057. //        {
  1058. //            $response->headers->setCookie(Cookie::create('USRCKIE', ''));
  1059. //            $response->headers->setCookie(Cookie::create('REMEMBERME', ''));
  1060. //            $response->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', ''));
  1061. //        }
  1063.             if ($session->has('CLEARLOGIN')) {
  1064.                 if ($session->get('CLEARLOGIN') == 1) {
  1067.                     if (version_compare(PHP_VERSION, '7.0.0', '>=')) {
  1068.                         $response->headers->setCookie(Cookie::create('USRCKIE', ''));
  1069.                         $response->headers->setCookie(Cookie::create('REMEMBERME', ''));
  1070.                         $response->headers->setCookie(Cookie::create('CLEARLOGINCOOKIE', ''));
  1071.                     } else {
  1072.                         $response->headers->setCookie(new Cookie('USRCKIE', ''));
  1073.                         $response->headers->setCookie(new Cookie('REMEMBERME', ''));
  1074.                         $response->headers->setCookie(new Cookie('CLEARLOGINCOOKIE', ''));
  1076.                     }
  1077.                 }
  1078.                 $session->set('CLEARLOGIN', 0);
  1079.             } else {
  1081.             }
  1082.             if ($session->has('REMEMBERME')) {
  1083.                 if ($session->get('REMEMBERME') == 1) {
  1085.                     $lifetime = 86400; // 1 day
  1086.                     if (version_compare(PHP_VERSION, '7.0.0', '>=')) {
  1087.                         $response->headers->setCookie(Cookie::create('USRCKIE', json_encode(array(
  1088.                                 'uid' => $session->get(UserConstants::USER_ID),
  1089.                                 'ut' => $session->get(UserConstants::USER_TYPE),
  1090.                                 'companyId' => $session->get(UserConstants::USER_COMPANY_ID),
  1091.                                 'gocId' => $session->get(UserConstants::USER_GOC_ID),
  1092.                             )
  1093.                         ), time() + $lifetime
  1094.                         )
  1095.                         );
  1098.                         $response->headers->setCookie(Cookie::create('REMEMBERMEACTIVATED', 'PIKA'));
  1099.                     } else {
  1100.                         $response->headers->setCookie(new Cookie('USRCKIE', json_encode(array(
  1101.                                     'uid' => $session->get(UserConstants::USER_ID),
  1102.                                     'ut' => $session->get(UserConstants::USER_TYPE),
  1103.                                     'companyId' => $session->get(UserConstants::USER_COMPANY_ID),
  1104.                                     'gocId' => $session->get(UserConstants::USER_GOC_ID),
  1105.                                 )
  1106.                             ), time() + $lifetime
  1107.                             )
  1108.                         );
  1111.                         $response->headers->setCookie(new Cookie('REMEMBERMEACTIVATED', 'PIKA'));
  1113.                     }
  1115.                 } else {
  1116.                     if (version_compare(PHP_VERSION, '7.0.0', '>=')) {
  1118.                         $response->headers->setCookie(Cookie::create('USRCKIE', json_encode(array(
  1119.                                     'uid' => $session->get(UserConstants::USER_ID),
  1120.                                     'ut' => $session->get(UserConstants::USER_TYPE),
  1121.                                     'companyId' => $session->get(UserConstants::USER_COMPANY_ID),
  1122.                                     'gocId' => $session->get(UserConstants::USER_GOC_ID),
  1123.                                 )
  1124.                             )
  1125.                         )
  1126.                         );
  1127.                         $response->headers->setCookie(Cookie::create('REMEMBERMEACTIVATED', 'MASTER'));
  1128.                     } else {
  1130.                         $response->headers->setCookie(new Cookie('USRCKIE', json_encode(array(
  1131.                                         'uid' => $session->get(UserConstants::USER_ID),
  1132.                                         'ut' => $session->get(UserConstants::USER_TYPE),
  1133.                                         'companyId' => $session->get(UserConstants::USER_COMPANY_ID),
  1134.                                         'gocId' => $session->get(UserConstants::USER_GOC_ID),
  1135.                                     )
  1136.                                 )
  1137.                             )
  1138.                         );
  1139.                         $response->headers->setCookie(new Cookie('REMEMBERMEACTIVATED', 'MASTER'));
  1140.                     }
  1143.                 }
  1144.             } else {
  1146.                 if (version_compare(PHP_VERSION, '7.0.0', '>='))
  1147.                     $response->headers->setCookie(Cookie::create('REMEMBERMEACTIVATED', 'CHU'));
  1148.                 else
  1149.                     $response->headers->setCookie(new Cookie('REMEMBERMEACTIVATED', 'CHU'));
  1151.             }
  1152.         }
  1155.     }
  1157.     public function onKernelException(ExceptionEvent $event)
  1158.     {
  1159.         $exception = $event->getThrowable();
  1160.         $session = $this->session;
  1161.         $request = $event->getRequest();
  1162.         $response = $event->getResponse();
  1163.         //temp debug
  1165.         $em = $this->em;
  1166.         $currRoute = $request->attributes->get('_route');
  1167. //        if ($currRoute != "update_database_schema")
  1168. //            MiscActions::encryptTrans($em, '_ALL_', 0);
  1171.         if (
  1172.             (
  1173.                 $request->query->has('returnJson') ||
  1174.                 $request->request->has('returnJson') ||
  1175.                 $request->query->has('remoteVerify') ||
  1176.                 $request->request->has('remoteVerify') ||
  1177.                 $event->getRequest()->headers->get('auth-token'))
  1179.         ) {
  1180.             $response = new JsonResponse([
  1181.                 'success' => false,
  1182.                 'error' => 'server_error',
  1183.                 'message' => $exception->getMessage(),
  1184.             ], 500);
  1186.             $event->setResponse($response);
  1188.             $event->stopPropagation();
  1189.             if ($origin = $event->getRequest()->headers->get('Origin')) {
  1190.                 $response->headers->set('Access-Control-Allow-Origin', $origin);
  1191.                 $response->headers->set('Access-Control-Allow-Credentials', 'true');
  1192.             }
  1193.         }
  1194.     }
  1195. }