src/Listener/ApiAccessSubscriber.php line 27

Open in your IDE?
  1. <?php
  3. namespace App\Listener;
  5. use App\Controller\ApiAccessController;
  6. use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
  7. use Symfony\Component\HttpKernel\Event\FilterControllerEvent;
  8. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  9. use Symfony\Component\HttpKernel\KernelEvents;
  10. use Symfony\Component\Security\Core\Exception\AccessDeniedException;
  12. /**
  13.  * Verifie l'origine de la requete
  14.  */
  15. class ApiAccessSubscriber implements EventSubscriberInterface
  16. {
  17.     private $authorizationChecker;
  19.     private $env;
  21.     public function __construct($authorizationChecker, $env)
  22.     {
  23.         $this->authorizationChecker = $authorizationChecker;
  24.         $this->env                  = $env;
  25.     }
  27.     public function onKernelController(FilterControllerEvent $event)
  28.     {
  29.         $controller = $event->getController();
  31.         if (!is_array($controller)) {
  32.             return;
  33.         }
  35.         if ($controller[0] instanceof ApiAccessController) {
  36.             if (false == $this->authorizationChecker->isGranted('IS_AUTHENTICATED_FULLY')) {
  37.                 $headers = $event->getRequest()->headers;
  38.                 $hosts   = 'localhost:8000 apitest.pretemoitonchat.com apistaging.pretemoitonchat.com staging.pretemoitonchat.com pmtc.pretemoitonchat.com pretemoitonchat.com apipmtc.pretemoitonchat.com api.pretemoitonchat.com';
  39.                 $origins = 'http://localhost:8000 http://localhost:8080 https://pmtc.pretemoitonchat.com https://staging.pretemoitonchat.com https://pretemoitonchat.com';
  40.                 if ($host = $headers->get('host')) {
  41.                     if (!strstr($hosts, $host)) {
  42.                         throw new AccessDeniedException();
  43.                     } else {
  44.                         if ($origin = $headers->get('origin')) {
  45.                             if (!strstr($origins, $origin)) {
  46.                                 throw new AccessDeniedException();
  47.                             }
  48.                             else {
  49.                               return;
  50.                             }
  51.                         } else {
  52.                             if ($this->env == 'dev') {
  53.                               return;
  54.                             }
  55.                             throw new AccessDeniedException();
  56.                         }
  57.                     }
  58.                 }
  59.             }
  60.         }
  61.     }
  63.     public static function getSubscribedEvents()
  64.     {
  65.         return array(
  66.             KernelEvents::CONTROLLER => 'onKernelController',
  67.         );
  68.     }
  69. }