src/App/EventListener/UserRoleListener.php line 24

Open in your IDE?
  1. <?php
  3. namespace App\EventListener;
  5. use App\Controller\User\Me\RoleController;
  6. use Symfony\Component\HttpKernel\Event\RequestEvent;
  7. use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
  8. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  9. use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
  11. class UserRoleListener
  12. {
  13.     private AuthorizationCheckerInterface $authorizationChecker;
  14.     private TokenStorageInterface $tokenStorage;
  16.     public function __construct(
  17.         AuthorizationCheckerInterface $authorizationChecker,
  18.         TokenStorageInterface $tokenStorage
  19.     ) {
  20.         $this->authorizationChecker = $authorizationChecker;
  21.         $this->tokenStorage = $tokenStorage;
  22.     }
  24.     public function __invoke(RequestEvent $event)
  25.     {
  26.         $request = $event->getRequest();
  30.         if ('/api/app/supplier-requests' == $request->server->get('REQUEST_URI')) {
  31.             return;
  32.         }
  33.         if ('/api/user/me/forgot-password' == $request->server->get('REQUEST_URI')) {
  34.             return;
  35.         }
  37.         if (
  38.             null === $this->tokenStorage->getToken() ||
  39.             !$this->tokenStorage->getToken()->isAuthenticated()
  40.         ) {
  41.             return;
  42.         }
  46.         if (RoleController::class === $request->attributes->get('_controller')) {
  47.             return;
  48.         }
  52.         if (!$request->headers->has('x-user-role')) {
  53.             throw new AccessDeniedHttpException();
  54.         }
  56.         $authorizationCheck = $this->authorizationChecker
  57.             ->isGranted($request->headers->get('x-user-role'));
  60.         if (!$authorizationCheck) {
  61.             throw new AccessDeniedHttpException();
  62.         }
  64.         $request->attributes->set('userRole', $request->headers->get('x-user-role'));
  65.     }
  66. }