Add event to potentially modify authenticated token before it becomes effective

scheb · scheb · commit 37c6f0c95857 · 2020-06-19T16:36:57.000+02:00
diff --git a/src/Symfony/Component/Security/Http/Authentication/AuthenticatorManager.php b/src/Symfony/Component/Security/Http/Authentication/AuthenticatorManager.php
@@ -27,6 +27,7 @@
 use Symfony\Component\Security\Http\Authenticator\Passport\PassportInterface;
 use Symfony\Component\Security\Http\Authenticator\Passport\SelfValidatingPassport;
 use Symfony\Component\Security\Http\Event\CheckPassportEvent;
+use Symfony\Component\Security\Http\Event\InspectAuthenticatedTokenEvent;
 use Symfony\Component\Security\Http\Event\InteractiveLoginEvent;
 use Symfony\Component\Security\Http\Event\LoginFailureEvent;
 use Symfony\Component\Security\Http\Event\LoginSuccessEvent;
@@ -167,6 +168,10 @@ private function executeAuthenticator(AuthenticatorInterface $authenticator, Req
 
             // create the authenticated token
             $authenticatedToken = $authenticator->createAuthenticatedToken($passport, $this->firewallName);
+
+            // announce the authenticated token
+            $authenticatedToken = $this->eventDispatcher->dispatch(new InspectAuthenticatedTokenEvent($authenticatedToken))->getAuthenticatedToken();
+
             if (true === $this->eraseCredentials) {
                 $authenticatedToken->eraseCredentials();
             }
diff --git a/src/Symfony/Component/Security/Http/Event/InspectAuthenticatedTokenEvent.php b/src/Symfony/Component/Security/Http/Event/InspectAuthenticatedTokenEvent.php
@@ -0,0 +1,26 @@
+<?php
+
+namespace Symfony\Component\Security\Http\Event;
+
+use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
+use Symfony\Contracts\EventDispatcher\Event;
+
+class InspectAuthenticatedTokenEvent extends Event
+{
+    private $authenticatedToken;
+
+    public function __construct(TokenInterface $token)
+    {
+        $this->authenticatedToken = $token;
+    }
+
+    public function getAuthenticatedToken(): TokenInterface
+    {
+        return $this->authenticatedToken;
+    }
+
+    public function setAuthenticatedToken(TokenInterface $authenticatedToken): void
+    {
+        $this->authenticatedToken = $authenticatedToken;
+    }
+}
