function AccessDeniedSubscriber::on403

Redirects users when access is denied.

Parameters

\Symfony\Component\HttpKernel\Event\ExceptionEvent $event: The event to process.

File

core/modules/user/src/EventSubscriber/AccessDeniedSubscriber.php, line 62

Class

AccessDeniedSubscriber

Redirects users when access is denied.

Namespace

Code

public function on403(ExceptionEvent $event) : void {
  $route_name = RouteMatch::createFromRequest($event->getRequest())
    ->getRouteName();
  $redirect_url = NULL;
  if ($this->account
    ->isAuthenticated()) {
    switch ($route_name) {
      case 'user.login':
        // Redirect an authenticated user to the profile page.
        $redirect_url = Url::fromRoute('entity.user.canonical', [
          'user' => $this->account
            ->id(),
        ], [
          'absolute' => TRUE,
        ]);
        break;

      case 'user.register':
        // Redirect an authenticated user to the profile form.
        $redirect_url = Url::fromRoute('entity.user.edit_form', [
          'user' => $this->account
            ->id(),
        ], [
          'absolute' => TRUE,
        ]);
        break;

    }
  }
  elseif ($route_name === 'user.page') {
    $redirect_url = Url::fromRoute('user.login', [], [
      'absolute' => TRUE,
    ]);
  }
  elseif (in_array($route_name, [
    'user.logout',
    'user.logout.confirm',
  ], TRUE)) {
    $redirect_url = Url::fromRoute('<front>', [], [
      'absolute' => TRUE,
    ]);
  }
  if ($redirect_url) {
    $event->setResponse(new RedirectResponse($redirect_url->toString()));
  }
}