--- /dev/null
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\HttpKernel\EventListener;
+
+use Symfony\Component\HttpFoundation\Session\Session;
+use Symfony\Component\HttpFoundation\Session\SessionInterface;
+use Symfony\Component\HttpKernel\Event\FilterResponseEvent;
+use Symfony\Component\HttpKernel\Event\GetResponseEvent;
+use Symfony\Component\HttpKernel\KernelEvents;
+use Symfony\Component\EventDispatcher\EventSubscriberInterface;
+
+/**
+ * Sets the session in the request.
+ *
+ * @author Johannes M. Schmitt <schmittjoh@gmail.com>
+ */
+abstract class AbstractSessionListener implements EventSubscriberInterface
+{
+ public function onKernelRequest(GetResponseEvent $event)
+ {
+ if (!$event->isMasterRequest()) {
+ return;
+ }
+
+ $request = $event->getRequest();
+ $session = $this->getSession();
+ if (null === $session || $request->hasSession()) {
+ return;
+ }
+
+ $request->setSession($session);
+ }
+
+ public function onKernelResponse(FilterResponseEvent $event)
+ {
+ if (!$event->isMasterRequest()) {
+ return;
+ }
+
+ if (!$session = $event->getRequest()->getSession()) {
+ return;
+ }
+
+ if ($session->isStarted() || ($session instanceof Session && $session->hasBeenStarted())) {
+ $event->getResponse()
+ ->setPrivate()
+ ->setMaxAge(0)
+ ->headers->addCacheControlDirective('must-revalidate');
+ }
+ }
+
+ public static function getSubscribedEvents()
+ {
+ return array(
+ KernelEvents::REQUEST => array('onKernelRequest', 128),
+ // low priority to come after regular response listeners, same as SaveSessionListener
+ KernelEvents::RESPONSE => array('onKernelResponse', -1000),
+ );
+ }
+
+ /**
+ * Gets the session object.
+ *
+ * @return SessionInterface|null A SessionInterface instance or null if no session is available
+ */
+ abstract protected function getSession();
+}