vendor/hwi/oauth-bundle/Security/Http/Firewall/OAuthListener.php line 29

Open in your IDE?
  1. <?php
  3. /*
  4.  * This file is part of the HWIOAuthBundle package.
  5.  *
  6.  * (c) Hardware Info <opensource@hardware.info>
  7.  *
  8.  * For the full copyright and license information, please view the LICENSE
  9.  * file that was distributed with this source code.
  10.  */
  12. namespace HWI\Bundle\OAuthBundle\Security\Http\Firewall;
  14. use HWI\Bundle\OAuthBundle\OAuth\ResourceOwnerInterface;
  15. use HWI\Bundle\OAuthBundle\OAuth\State\State;
  16. use HWI\Bundle\OAuthBundle\Security\Core\Authentication\Token\OAuthToken;
  17. use HWI\Bundle\OAuthBundle\Security\Http\ResourceOwnerMapInterface;
  18. use Symfony\Component\HttpFoundation\RedirectResponse;
  19. use Symfony\Component\HttpFoundation\Request;
  20. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  21. use Symfony\Component\Security\Http\Firewall\AbstractAuthenticationListener;
  23. /**
  24.  * @author Geoffrey Bachelet <geoffrey.bachelet@gmail.com>
  25.  * @author Alexander <iam.asm89@gmail.com>
  26.  *
  27.  * @internal
  28.  */
  29. class OAuthListener extends AbstractAuthenticationListener
  30. {
  31.     /**
  32.      * @var ResourceOwnerMapInterface
  33.      */
  34.     private $resourceOwnerMap;
  36.     /**
  37.      * @var array
  38.      */
  39.     private $checkPaths;
  41.     public function setResourceOwnerMap(ResourceOwnerMapInterface $resourceOwnerMap)
  42.     {
  43.         $this->resourceOwnerMap = $resourceOwnerMap;
  44.     }
  46.     public function setCheckPaths(array $checkPaths)
  47.     {
  48.         $this->checkPaths = $checkPaths;
  49.     }
  51.     /**
  52.      * {@inheritdoc}
  53.      */
  54.     public function requiresAuthentication(Request $request)
  55.     {
  56.         // Check if the route matches one of the check paths
  57.         foreach ($this->checkPaths as $checkPath) {
  58.             if ($this->httpUtils->checkRequestPath($request, $checkPath)) {
  59.                 return true;
  60.             }
  61.         }
  63.         return false;
  64.     }
  66.     /**
  67.      * {@inheritdoc}
  68.      */
  69.     protected function attemptAuthentication(Request $request)
  70.     {
  71.         /* @var ResourceOwnerInterface $resourceOwner */
  72.         [$resourceOwner, $checkPath] = $this->resourceOwnerMap->getResourceOwnerByRequest($request);
  74.         if (!$resourceOwner) {
  75.             throw new AuthenticationException('No resource owner match the request.');
  76.         }
  78.         if (!$resourceOwner->handles($request)) {
  79.             throw new AuthenticationException('No oauth code in the request.');
  80.         }
  82.         // If resource owner supports only one url authentication, call redirect
  83.         if ($request->query->has('authenticated') && $resourceOwner->getOption('auth_with_one_url')) {
  84.             $request->attributes->set('service', $resourceOwner->getName());
  86.             return new RedirectResponse(sprintf('%s?code=%s&authenticated=true', $this->httpUtils->generateUri($request, 'hwi_oauth_connect_service'), $request->query->get('code')));
  87.         }
  89.         $resourceOwner->isCsrfTokenValid(
  90.             $this->extractCsrfTokenFromState($request->get('state'))
  91.         );
  93.         $accessToken = $resourceOwner->getAccessToken(
  94.             $request,
  95.             $this->httpUtils->createRequest($request, $checkPath)->getUri()
  96.         );
  98.         $token = new OAuthToken($accessToken);
  99.         $token->setResourceOwnerName($resourceOwner->getName());
  101.         return $this->authenticationManager->authenticate($token);
  102.     }
  104.     private function extractCsrfTokenFromState(?string $stateParameter): ?string
  105.     {
  106.         $state = new State($stateParameter);
  108.         return $state->getCsrfToken() ?: $stateParameter;
  109.     }
  110. }