Add custom UserChecker

config/packages/security.yaml

@@ -105,6 +105,7 @@ security:
             security: false
         default:
             pattern: ^/
+            user_checker: App\Security\UserChecker
             form_login:
                 enable_csrf: true
                 require_previous_session: false

src/Security/UserChecker.php

@@ -0,0 +1,33 @@
+<?php
+
+namespace App\Security;
+
+use App\Entity\User;
+use Symfony\Component\Security\Core\Exception\CustomUserMessageAccountStatusException;
+use Symfony\Component\Security\Core\User\UserCheckerInterface;
+use Symfony\Component\Security\Core\User\UserInterface;
+
+class UserChecker implements UserCheckerInterface
+{
+    public function checkPreAuth(UserInterface $user): void
+    {
+        if (!$user instanceof User) {
+            return;
+        }
+
+        if ($user->isDeleted()) {
+            throw new CustomUserMessageAccountStatusException('Your user account is deleted.');
+        }
+    }
+
+    public function checkPostAuth(UserInterface $user): void
+    {
+        if (!$user instanceof User) {
+            return;
+        }
+
+        if (!$user->isEnabled()) {
+            throw new CustomUserMessageAccountStatusException('Your user account is disabled.');
+        }
+    }
+}

tests/Security/UserCheckerTest.php

@@ -0,0 +1,33 @@
+<?php
+
+namespace App\Tests\Security;
+
+use App\Entity\User;
+use App\Security\UserChecker;
+use PHPUnit\Framework\TestCase;
+use Symfony\Component\Security\Core\Exception\CustomUserMessageAccountStatusException;
+
+class UserCheckerTest extends TestCase
+{
+    public function testCheckPreAuth(): void
+    {
+        $user = new User();
+        $user->setDeleted(true);
+
+        $checker = new UserChecker();
+        $this->expectException(CustomUserMessageAccountStatusException::class);
+        $this->expectExceptionMessage('Your user account is deleted.');
+        $checker->checkPreAuth($user);
+    }
+
+    public function testCheckPostAuth(): void
+    {
+        $user = new User();
+        $user->setEnabled(false);
+
+        $checker = new UserChecker();
+        $this->expectException(CustomUserMessageAccountStatusException::class);
+        $this->expectExceptionMessage('Your user account is disabled.');
+        $checker->checkPostAuth($user);
+    }
+}