vendor/roothirsch/core-bundle/EventSubscriber/UserReadSubscriber.php line 47

Open in your IDE?
  1. <?php
  2. namespace Roothirsch\CoreBundle\EventSubscriber;
  4. use ApiPlatform\Core\EventListener\EventPriorities;
  5. use ApiPlatform\Core\Exception\ItemNotFoundException;
  6. use Roothirsch\CoreBundle\Entity\User;
  7. use Roothirsch\CoreBundle\Security\UserManager;
  8. use Roothirsch\CoreBundle\Repository\UserRepository;
  9. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  10. use Symfony\Component\HttpKernel\KernelEvents;
  11. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  13. final class UserReadSubscriber implements EventSubscriberInterface
  14. {
  15. /**
  16. * @var UserRepository
  17. */
  18. private $userRepository;
  20. /**
  21. * @var UserManager
  22. */
  23. private $userManager;
  25. /**
  26. * @var TokenStorageInterface
  27. */
  28. private $tokenStorage;
  30. public function __construct(
  31. UserRepository $userRepository,
  32. UserManager $userManager,
  33. TokenStorageInterface $tokenStorage
  34. ) {
  35. $this->userRepository = $userRepository;
  36. $this->userManager = $userManager;
  37. $this->tokenStorage = $tokenStorage;
  38. }
  40. public static function getSubscribedEvents()
  41. {
  42. return [
  43. KernelEvents::REQUEST => ['load', EventPriorities::PRE_READ],
  44. ];
  45. }
  47. public function load(\Symfony\Component\HttpKernel\Event\RequestEvent $event)
  48. {
  49. if (strpos($event->getRequest()->getPathInfo(), '/api/users') !== 0) {
  50. return;
  51. }
  53. if ($event->getRequest()->attributes->get('_api_item_operation_name') === 'reset-password') {
  54. $this->loadUserFromEmail($event);
  55. }
  57. if ($event->getRequest()->get('id') === 'current'
  58. || $event->getRequest()->get('id') === 'me'
  59. || $event->getRequest()->attributes->get('_route') === 'api_users_current_item') {
  60. $this->loadUserFromSession($event);
  61. } elseif (strlen($event->getRequest()->get('id')) > 10) {
  62. $this->loadUserFromToken($event);
  63. }
  64. }
  66. /**
  67. * @param \Roothirsch\CoreBundle\EventSubscriber\Api\GetResponseEvent $event
  68. */
  69. private function loadUserFromEmail(\Symfony\Component\HttpKernel\Event\RequestEvent $event)
  70. {
  71. $payload = json_decode($event->getRequest()->getContent(), true);
  72. $user = $this->userRepository->findOneBy(
  73. [
  74. 'email' => $payload['email'],
  75. ]
  76. );
  77. $event->getRequest()->attributes->set('locale', $payload['language']);
  79. if (!$user instanceof User) {
  80. throw new ItemNotFoundException('Not found');
  81. }
  83. $event->getRequest()->attributes->set('id', $user->getId());
  84. }
  86. /**
  87. * @param \Roothirsch\CoreBundle\EventSubscriber\Api\GetResponseEvent $event
  88. */
  89. private function loadUserFromSession(\Symfony\Component\HttpKernel\Event\RequestEvent $event)
  90. {
  91. $user = $this->tokenStorage->getToken()->getUser();
  93. if (!$user instanceof User) {
  94. return;
  95. }
  97. $event->getRequest()->attributes->set('id', $user->getId());
  98. }
  100. /**
  101. * @param \Roothirsch\CoreBundle\EventSubscriber\Api\GetResponseEvent $event
  102. */
  103. private function loadUserFromToken(\Symfony\Component\HttpKernel\Event\RequestEvent $event)
  104. {
  105. $user = $this->userRepository->findOneBy(
  106. [
  107. 'registrationToken' => $event->getRequest()->get('id'),
  108. 'active' => false,
  109. ]
  110. );
  112. if (!$user instanceof User) {
  113. $user = $this->userRepository->findOneBy(
  114. [
  115. 'securityToken' => $event->getRequest()->get('id'),
  116. 'active' => true,
  117. ]
  118. );
  119. }
  121. if (!$user instanceof User) {
  122. throw new ItemNotFoundException('Not found');
  123. }
  125. if ($user->getUpdated() < (time() - 60 * 60 * 24)) {
  126. $user->setRegistrationToken('');
  127. $this->userManager->persist($user);
  129. throw new ItemNotFoundException('token invalid');
  130. }
  132. if (!$user instanceof User) {
  133. return;
  134. }
  136. $event->getRequest()->attributes->set('token', $event->getRequest()->get('id'));
  137. $event->getRequest()->attributes->set('id', $user->getId());
  138. }
  139. }