75 lines
1.9 KiB
PHP
75 lines
1.9 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Logger;
|
|
|
|
use App\Entity\User;
|
|
use Monolog\Attribute\AsMonologProcessor;
|
|
use Monolog\LogRecord;
|
|
use Symfony\Bundle\SecurityBundle\Security;
|
|
use Symfony\Component\Security\Core\Authentication\Token\SwitchUserToken;
|
|
|
|
/**
|
|
* Enriches log records with current user information.
|
|
*
|
|
* Adds username and roles to log entries for audit trails. Handles CLI context
|
|
* (system user), anonymous requests, and user impersonation via SwitchUserToken.
|
|
*/
|
|
#[AsMonologProcessor]
|
|
class UserDataProcessor
|
|
{
|
|
public function __construct(private readonly Security $security)
|
|
{
|
|
}
|
|
|
|
public function __invoke(LogRecord $record): LogRecord
|
|
{
|
|
if (isset($record->extra['user'])) {
|
|
return $record;
|
|
}
|
|
|
|
if ('cli' === PHP_SAPI) {
|
|
$record->extra['user'] = [
|
|
'username' => 'SYSTEM',
|
|
'role' => 'system',
|
|
];
|
|
|
|
return $record;
|
|
}
|
|
|
|
/** @var User $user */
|
|
$user = $this->security->getUser();
|
|
|
|
if (null === $user) {
|
|
$record->extra['user'] = [
|
|
'username' => 'ANONYMOUS',
|
|
'role' => 'public',
|
|
];
|
|
|
|
return $record;
|
|
}
|
|
|
|
// Check for switched or aliased users
|
|
$originalUser = null;
|
|
$token = $this->security->getToken();
|
|
if ($token instanceof SwitchUserToken) {
|
|
// User is currently switched to
|
|
$originalUser = $token->getOriginalToken()->getUser();
|
|
}
|
|
|
|
if (null !== $originalUser) {
|
|
$username = sprintf('%s (via %s)', $user->getUserIdentifier(), $originalUser->getUserIdentifier());
|
|
} else {
|
|
$username = $user->getUserIdentifier();
|
|
}
|
|
|
|
$record->extra['user'] = [
|
|
'username' => $username,
|
|
'roles' => $user->getRoles(),
|
|
];
|
|
|
|
return $record;
|
|
}
|
|
}
|