Doctrine 并发请求导致实体数据更新不一致问题解决方案

use Doctrine\ORM\EntityManagerInterface;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\RequestStack;
use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;

class UserActionsController
{
    private $entityManager;
    private $tokenStorage;
    private $requestStack;

    public function __construct(EntityManagerInterface $entityManager, TokenStorageInterface $tokenStorage, RequestStack $requestStack)
    {
        $this->entityManager = $entityManager;
        $this->tokenStorage = $tokenStorage;
        $this->requestStack = $requestStack;
    }

    public function useractions()
    {
        $user = $this->tokenStorage->getToken()->getUser();
        $request = $this->requestStack->getCurrentRequest();

        if ($request->request->has('new_action') && $this->isCsrfTokenValid("mycsrf", $request->request->get('csrf_token'))) {
            $entityManager = $this->entityManager;

            $error = $entityManager->transactional(function ($entityManager) use ($user) {
                // 强制从数据库读取最新的用户信息
                $entityManager->refresh($user);

                $tokens = $user->getTokens();

                if ($tokens < 1) {
                    return "Not enough tokens";
                }

                $user->setTokens($tokens - 1);
                $entityManager->persist($user);

                return null; // No error
            });

            if (empty($error)) {
                $action = new Action();
                $action->setUser($user);
                $entityManager->persist($action);
                $entityManager->flush();
            } else {
                // Handle error, e.g., display a message to the user
                // Log the error
                // Return an error response
                return new JsonResponse(['error' => $error], 400); // Example
            }
        }

        // ... rest of your logic
    }

    private function isCsrfTokenValid(string $id, string $token): bool
    {
        // Your CSRF validation logic here
        // This is a placeholder
        return true; // Replace with your actual implementation
    }
}