custom/plugins/VioB2BLogin/src/Core/Framework/Subscriber/RoutePrivilegeCheckSubscriber.php line 83

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace VioB2BLogin\Core\Framework\Subscriber;
  7. use Shopware\Core\Framework\Routing\KernelListenerPriorities;
  8. use Shopware\Core\PlatformRequest;
  9. use Shopware\Core\SalesChannelRequest;
  10. use Shopware\Core\System\SalesChannel\SalesChannelContext;
  11. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  12. use Symfony\Component\HttpFoundation\RedirectResponse;
  13. use Symfony\Component\HttpFoundation\Request;
  14. use Symfony\Component\HttpKernel\Event\ControllerEvent;
  15. use Symfony\Component\HttpKernel\Event\ExceptionEvent;
  16. use Symfony\Component\HttpKernel\KernelEvents;
  17. use Symfony\Component\Routing\RouterInterface;
  18. use Symfony\Contracts\Translation\TranslatorInterface;
  19. use VioB2BLogin\Core\Exception\NotAllowedException;
  20. use VioB2BLogin\Core\Services\PrivilegeService;
  21. use VioB2BLogin\Entity\Privilege\AbstractPrivilegeProvider;
  22. use VioB2BLogin\Entity\Privilege\RoutePrivilegeMappingProviderInterface;
  24. class RoutePrivilegeCheckSubscriber implements EventSubscriberInterface
  25. {
  26.     /** @var iterable<AbstractPrivilegeProvider> */
  27.     private iterable $privilegeProviders;
  28.     private PrivilegeService $privilegeService;
  29.     private RouterInterface $router;
  30.     private TranslatorInterface $translator;
  32.     public function __construct(
  33.         iterable $priviligeProviders,
  34.         PrivilegeService $privilegeService,
  35.         RouterInterface $router,
  36.         TranslatorInterface $translator
  37.     )
  38.     {
  39.         $this->privilegeProviders = $priviligeProviders;
  40.         $this->privilegeService = $privilegeService;
  41.         $this->router = $router;
  42.         $this->translator = $translator;
  43.     }
  45.     /**
  46.      * @inheritDoc
  47.      */
  48.     public static function getSubscribedEvents(): array
  49.     {
  50.         return [
  51.             KernelEvents::CONTROLLER => [ 'onKernelController' , KernelListenerPriorities::KERNEL_CONTROLLER_EVENT_CONTEXT_RESOLVE_POST],
  52.             KernelEvents::EXCEPTION => 'onKernelException'
  54.         ];
  55.     }
  57.     public function onKernelController(ControllerEvent $event): void
  58.     {
  59.         $context = $event->getRequest()->attributes->get( PlatformRequest::ATTRIBUTE_SALES_CHANNEL_CONTEXT_OBJECT );
  60.         if( !$context instanceof SalesChannelContext ) {
  61.             return;
  62.         }
  63.         foreach ($this->privilegeProviders as $privilegeProvider) {
  64.             if ($privilegeProvider instanceof RoutePrivilegeMappingProviderInterface) {
  65.                 $mapping = $privilegeProvider->getRoutePrivilegeMapping();
  66.                 $route = $event->getRequest()->attributes->get('_route');
  67.                 if (array_key_exists($route, $mapping) ) {
  68.                     $privileges = $mapping[$route];
  69.                     foreach ($privileges as $privilegeNamespace => $privilegeNames) {
  70.                         foreach ($privilegeNames as $privilegeName) {
  71.                             if( ! $this->privilegeService->checkPrivilege($context, $privilegeNamespace, $privilegeName) )
  72.                             {
  73.                                 throw new NotAllowedException();
  74.                             }
  75.                         }
  76.                     }
  78.                 }
  79.             }
  80.         }
  81.     }
  83.     public function onKernelException(ExceptionEvent $event): void
  84.     {
  85.         if (!$event->getRequest()->attributes->has(SalesChannelRequest::ATTRIBUTE_IS_SALES_CHANNEL_REQUEST)) {
  86.             return;
  87.         }
  89.         $exception = $event->getThrowable();
  90.         if (!$exception instanceof NotAllowedException ) {
  91.             return;
  92.         }
  94.         $this->addFlashMessage($exception, $event->getRequest());
  96.         $request = $event->getRequest();
  98.         $parameters = [
  99.             'redirectTo' => $request->attributes->get('_route'),
  100.             'redirectParameters' => json_encode($request->attributes->get('_route_params')),
  101.         ];
  103.         $redirectResponse = new RedirectResponse($this->router->generate('frontend.account.profile.page', $parameters));
  105.         $event->setResponse($redirectResponse);
  106.     }
  108.     private function addFlashMessage(NotAllowedException $exception, Request $request): void
  109.     {
  111.         if ($request->hasSession() === false) {
  112.             return;
  113.         }
  115.         $session = $request->getSession();
  117.         if (!method_exists($session, 'getFlashBag')) {
  118.             return;
  119.         }
  121.         $session->getFlashBag()->add('danger', $this->translator->trans('error.'.$exception->getErrorCode()) );
  122.     }
  123. }