142 lines
3.4 KiB
PHP
142 lines
3.4 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace KTXC\Security\Event;
|
|
|
|
use KTXF\Event\Event;
|
|
|
|
/**
|
|
* Security-specific event for authentication and access control events
|
|
*/
|
|
final class SecurityEvent extends Event implements SecurityRequestEventInterface
|
|
{
|
|
// Event names
|
|
public const AUTH_LOGOUT = 'security.auth.logout';
|
|
public const TOKEN_REFRESH = 'security.token.refresh';
|
|
public const TOKEN_REVOKED = 'security.token.revoked';
|
|
|
|
public const ACCESS_GRANTED = 'security.access.granted';
|
|
|
|
|
|
// Severity levels
|
|
public const SEVERITY_DEBUG = 0;
|
|
public const SEVERITY_INFO = 1;
|
|
public const SEVERITY_WARNING = 2;
|
|
public const SEVERITY_ERROR = 3;
|
|
public const SEVERITY_CRITICAL = 4;
|
|
|
|
private readonly int $severity;
|
|
|
|
public function __construct(
|
|
string $name,
|
|
array $data = [],
|
|
?string $tenantId = null,
|
|
?string $identityId = null,
|
|
private readonly ?string $ipAddress = null,
|
|
private readonly ?string $deviceFingerprint = null,
|
|
private readonly ?string $userAgent = null,
|
|
private readonly ?string $requestPath = null,
|
|
private readonly ?string $requestMethod = null,
|
|
private readonly ?string $userId = null,
|
|
private readonly ?string $reason = null,
|
|
?int $severity = null,
|
|
) {
|
|
parent::__construct($name, $data, $tenantId, $identityId);
|
|
|
|
$this->severity = $severity ?? self::getSeverityForEvent($name);
|
|
}
|
|
|
|
/**
|
|
* Create a security event with common parameters
|
|
*/
|
|
public static function create(
|
|
string $name,
|
|
?string $ipAddress = null,
|
|
?string $deviceFingerprint = null,
|
|
array $data = [],
|
|
?string $tenantId = null,
|
|
?string $identityId = null,
|
|
?string $userAgent = null,
|
|
?string $requestPath = null,
|
|
?string $requestMethod = null,
|
|
?string $userId = null,
|
|
?string $reason = null,
|
|
?int $severity = null,
|
|
): self {
|
|
return new self(
|
|
$name,
|
|
$data,
|
|
$tenantId,
|
|
$identityId,
|
|
$ipAddress,
|
|
$deviceFingerprint,
|
|
$userAgent,
|
|
$requestPath,
|
|
$requestMethod,
|
|
$userId,
|
|
$reason,
|
|
$severity,
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Get default severity for event types
|
|
*/
|
|
private static function getSeverityForEvent(string $eventName): int
|
|
{
|
|
return match ($eventName) {
|
|
self::ACCESS_GRANTED,
|
|
self::TOKEN_REFRESH => self::SEVERITY_INFO,
|
|
|
|
self::AUTH_LOGOUT,
|
|
self::TOKEN_REVOKED => self::SEVERITY_WARNING,
|
|
|
|
default => self::SEVERITY_INFO,
|
|
};
|
|
}
|
|
|
|
// Getters and setters
|
|
|
|
public function getIpAddress(): ?string
|
|
{
|
|
return $this->ipAddress;
|
|
}
|
|
|
|
public function getDeviceFingerprint(): ?string
|
|
{
|
|
return $this->deviceFingerprint;
|
|
}
|
|
|
|
public function getUserAgent(): ?string
|
|
{
|
|
return $this->userAgent;
|
|
}
|
|
|
|
public function getRequestPath(): ?string
|
|
{
|
|
return $this->requestPath;
|
|
}
|
|
|
|
public function getRequestMethod(): ?string
|
|
{
|
|
return $this->requestMethod;
|
|
}
|
|
|
|
public function getUserId(): ?string
|
|
{
|
|
return $this->userId;
|
|
}
|
|
|
|
public function getReason(): ?string
|
|
{
|
|
return $this->reason;
|
|
}
|
|
|
|
public function getSeverity(): int
|
|
{
|
|
return $this->severity;
|
|
}
|
|
|
|
}
|