vendor/dachcom-digital/members/src/MembersBundle/EventListener/ForbiddenRouteListener.php line 43

Open in your IDE?
  1. <?php
  3. namespace MembersBundle\EventListener;
  5. use MembersBundle\Event\StaticRouteEvent;
  6. use MembersBundle\Manager\RestrictionManager;
  7. use MembersBundle\Manager\RestrictionManagerInterface;
  8. use MembersBundle\MembersEvents;
  9. use MembersBundle\Restriction\ElementRestriction;
  10. use Pimcore\Bundle\CoreBundle\EventListener\Traits\PimcoreContextAwareTrait;
  11. use Pimcore\Http\RequestHelper;
  12. use Pimcore\Model\DataObject;
  13. use Pimcore\Http\Request\Resolver\PimcoreContextResolver;
  14. use Symfony\Cmf\Bundle\RoutingBundle\Routing\DynamicRouter;
  15. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  16. use Symfony\Component\HttpFoundation\RedirectResponse;
  17. use Symfony\Component\HttpKernel\Event\RequestEvent;
  18. use Symfony\Component\HttpKernel\KernelEvents;
  19. use Symfony\Component\Routing\RouterInterface;
  21. class ForbiddenRouteListener implements EventSubscriberInterface
  22. {
  23.     use PimcoreContextAwareTrait;
  25.     protected RestrictionManagerInterface $restrictionManager;
  26.     protected RouterInterface $router;
  27.     protected RequestHelper $requestHelper;
  29.     public function __construct(RestrictionManagerInterface $restrictionManager, RouterInterface $router, RequestHelper $requestHelper)
  30.     {
  31.         $this->restrictionManager = $restrictionManager;
  32.         $this->router = $router;
  33.         $this->requestHelper = $requestHelper;
  34.     }
  36.     public static function getSubscribedEvents(): array
  37.     {
  38.         return [
  39.             KernelEvents::REQUEST => ['onKernelRequest'] //before head meta listener
  40.         ];
  41.     }
  43.     public function onKernelRequest(RequestEvent $event): void
  44.     {
  45.         $restriction = null;
  47.         if (!$event->isMainRequest()) {
  48.             return;
  49.         }
  51.         if (!$this->requestHelper->isFrontendRequest($event->getRequest())) {
  52.             return;
  53.         }
  55.         if (!$this->matchesPimcoreContext($event->getRequest(), PimcoreContextResolver::CONTEXT_DEFAULT)) {
  56.             return;
  57.         }
  59.         if (str_starts_with($event->getRequest()->attributes->get('_route'), 'document_')) {
  60.             $document = $event->getRequest()->get(DynamicRouter::CONTENT_KEY, null);
  61.             $restriction = $this->restrictionManager->getElementRestrictionStatus($document);
  62.         } elseif ($event->getRequest()->attributes->get('pimcore_request_source') === 'staticroute') {
  63.             $routeEvent = new StaticRouteEvent($event->getRequest(), $event->getRequest()->attributes->get('_route'));
  64.             \Pimcore::getEventDispatcher()->dispatch($routeEvent, MembersEvents::RESTRICTION_CHECK_STATICROUTE);
  66.             $restrictionObject = $routeEvent->getStaticRouteObject();
  67.             if ($restrictionObject instanceof DataObject) {
  68.                 $restriction = $this->restrictionManager->getElementRestrictionStatus($restrictionObject);
  69.             }
  70.         }
  72.         if ($restriction === null) {
  73.             return;
  74.         }
  76.         $event->getRequest()->attributes->set(RestrictionManager::REQUEST_RESTRICTION_STORAGE, $restriction);
  77.         $restrictionRoute = $this->getRouteForRestriction($restriction);
  79.         if ($restrictionRoute !== false) {
  80.             $parameters = $restrictionRoute === 'members_user_security_login' ? ['_target_path' => $event->getRequest()->getPathInfo()] : [];
  81.             $response = new RedirectResponse($this->router->generate($restrictionRoute, $parameters));
  82.             $event->setResponse($response);
  83.         }
  84.     }
  86.     private function getRouteForRestriction(ElementRestriction $elementRestriction): bool|string
  87.     {
  88.         if ($elementRestriction->getSection() === RestrictionManager::RESTRICTION_SECTION_ALLOWED) {
  89.             //section allowed
  90.             return false;
  91.         }
  93.         if ($elementRestriction->getState() === RestrictionManager::RESTRICTION_STATE_NOT_LOGGED_IN && $elementRestriction->getSection() === RestrictionManager::RESTRICTION_SECTION_NOT_ALLOWED) {
  94.             //not allowed
  95.             return 'members_user_security_login';
  96.         }
  98.         if ($elementRestriction->getState() === RestrictionManager::RESTRICTION_STATE_LOGGED_IN && $elementRestriction->getSection() === RestrictionManager::RESTRICTION_SECTION_NOT_ALLOWED) {
  99.             //logged in but not allowed.
  100.             return 'members_user_restriction_refused';
  101.         }
  103.         return false;
  104.     }
  105. }