vendor/hwi/oauth-bundle/Security/Http/Firewall/OAuthListener.php line 29

Open in your IDE?
  1. <?php
  3. /*
  4.  * This file is part of the HWIOAuthBundle package.
  5.  *
  6.  * (c) Hardware Info <opensource@hardware.info>
  7.  *
  8.  * For the full copyright and license information, please view the LICENSE
  9.  * file that was distributed with this source code.
  10.  */
  12. namespace HWI\Bundle\OAuthBundle\Security\Http\Firewall;
  14. use HWI\Bundle\OAuthBundle\OAuth\ResourceOwnerInterface;
  15. use HWI\Bundle\OAuthBundle\OAuth\State\State;
  16. use HWI\Bundle\OAuthBundle\Security\Core\Authentication\Token\OAuthToken;
  17. use HWI\Bundle\OAuthBundle\Security\Http\ResourceOwnerMapInterface;
  18. use Symfony\Component\HttpFoundation\RedirectResponse;
  19. use Symfony\Component\HttpFoundation\Request;
  20. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  21. use Symfony\Component\Security\Http\Firewall\AbstractAuthenticationListener;
  23. /**
  24.  * OAuthListener.
  25.  *
  26.  * @author Geoffrey Bachelet <geoffrey.bachelet@gmail.com>
  27.  * @author Alexander <iam.asm89@gmail.com>
  28.  */
  29. class OAuthListener extends AbstractAuthenticationListener
  30. {
  31.     /**
  32.      * @var ResourceOwnerMapInterface
  33.      */
  34.     private $resourceOwnerMap;
  36.     /**
  37.      * @var array
  38.      */
  39.     private $checkPaths;
  41.     /**
  42.      * @param ResourceOwnerMapInterface $resourceOwnerMap
  43.      */
  44.     public function setResourceOwnerMap(ResourceOwnerMapInterface $resourceOwnerMap)
  45.     {
  46.         $this->resourceOwnerMap = $resourceOwnerMap;
  47.     }
  49.     /**
  50.      * @param array $checkPaths
  51.      */
  52.     public function setCheckPaths(array $checkPaths)
  53.     {
  54.         $this->checkPaths = $checkPaths;
  55.     }
  57.     /**
  58.      * {@inheritdoc}
  59.      */
  60.     public function requiresAuthentication(Request $request)
  61.     {
  62.         // Check if the route matches one of the check paths
  63.         foreach ($this->checkPaths as $checkPath) {
  64.             if ($this->httpUtils->checkRequestPath($request, $checkPath)) {
  65.                 return true;
  66.             }
  67.         }
  69.         return false;
  70.     }
  72.     /**
  73.      * {@inheritdoc}
  74.      */
  75.     protected function attemptAuthentication(Request $request)
  76.     {
  77.         /* @var ResourceOwnerInterface $resourceOwner */
  78.         list($resourceOwner, $checkPath) = $this->resourceOwnerMap->getResourceOwnerByRequest($request);
  80.         if (!$resourceOwner) {
  81.             throw new AuthenticationException('No resource owner match the request.');
  82.         }
  84.         if (!$resourceOwner->handles($request)) {
  85.             throw new AuthenticationException('No oauth code in the request.');
  86.         }
  88.         // If resource owner supports only one url authentication, call redirect
  89.         if ($request->query->has('authenticated') && $resourceOwner->getOption('auth_with_one_url')) {
  90.             $request->attributes->set('service', $resourceOwner->getName());
  92.             return new RedirectResponse(sprintf('%s?code=%s&authenticated=true', $this->httpUtils->generateUri($request, 'hwi_oauth_connect_service'), $request->query->get('code')));
  93.         }
  95.         $resourceOwner->isCsrfTokenValid(
  96.             $this->extractCsrfTokenFromState($request->get('state'))
  97.         );
  99.         $accessToken = $resourceOwner->getAccessToken(
  100.             $request,
  101.             $this->httpUtils->createRequest($request, $checkPath)->getUri()
  102.         );
  104.         $token = new OAuthToken($accessToken);
  105.         $token->setResourceOwnerName($resourceOwner->getName());
  107.         return $this->authenticationManager->authenticate($token);
  108.     }
  110.     private function extractCsrfTokenFromState(?string $stateParameter): ?string
  111.     {
  112.         $state = new State($stateParameter);
  114.         return $state->getCsrfToken() ?: $stateParameter;
  115.     }
  116. }