src/EventListener/Authenticator.php line 37

Open in your IDE?
  1. <?php
  3. namespace App\EventListener;
  5. use App\AbstractClass\Controller\AbstractController;
  6. use App\Component\Authenticator\Authenticator as UserAuthenticator;
  7. use App\Component\Authenticator\Firewall;
  8. use App\Component\Response\Response;
  9. use Exception;
  10. use Symfony\Component\HttpKernel\Event\ControllerEvent;
  12. class Authenticator extends AbstractController
  13. {
  14.     /**
  15.      * @var UserAuthenticator
  16.      */
  17.     private $authenticator;
  19.     /**
  20.      * @var Response
  21.      */
  22.     private $response;
  24.     function __construct(UserAuthenticator $authenticator, Response $response)
  25.     {
  26.         $this->authenticator = $authenticator;
  27.         $this->response = $response;
  28.     }
  30.     /**
  31.      * Authentication checker before controller execution.
  32.      *
  33.      * @param ControllerEvent $event
  34.      *
  35.      * @throws Exception
  36.      */
  37.     public function onKernelController(ControllerEvent $event)
  38.     {
  39.         if(!$event->isMasterRequest()) {
  40.             return;
  41.         }
  43.         $controller = $event->getRequest()->get('_controller');
  45.         if($controller === 'error_controller') {
  46.             return;
  47.         }
  49.         $controllerParts = explode(strpos($controller, '::') !== false ? '::' : ':', $controller, 2);
  50.         $controllerClass = $controllerParts[0];
  51.         $controllerAction = $controllerParts[1];
  53.         $firewall = new Firewall($controllerClass);
  54.         $protectedActions = $firewall->getProtectedActions();
  56.         if ($firewall->needsAuthorization() && !$this->authenticator->isAuthenticated()) {
  57.             $event->setController(function() {
  58.                 return $this->response->unauthorized();
  59.             });
  61.             return;
  62.         }
  64.         if (count($protectedActions) && in_array($controllerAction, $protectedActions) && !$this->authenticator->hasPermission()) {
  65.             $event->setController(function() {
  66.                 return $this->response->noPermissions();
  67.             });
  68.         }
  69.     }
  70. }