feat: improved handling of roles determination from bpn api response

src/Security/UserChecker.php

@@ -9,6 +9,13 @@ use Symfony\Component\Security\Core\User\UserInterface;
 
 class UserChecker implements UserCheckerInterface
 {
+    private const APPLICATION_ROLES = [
+        'ROLE_ADMIN',
+        'ROLE_MANAGER',
+        'ROLE_HOUSE_MANAGER',
+        'ROLE_TEAMER',
+    ];
+
     public function checkPreAuth(UserInterface $user): void
     {
         if (!$user instanceof User) {
@@ -18,6 +25,10 @@ class UserChecker implements UserCheckerInterface
         if (true === $user->isDisabled()) {
             throw new CustomUserMessageAccountStatusException('Dein Account wurde gesperrt: '.$user->getDisabledReason());
         }
+
+        if ([] === array_intersect($user->getRoles(), self::APPLICATION_ROLES)) {
+            throw new CustomUserMessageAccountStatusException('Keine gültige Rolle zugewiesen.');
+        }
     }
 
     public function checkPostAuth(UserInterface $user): void