src/EventSubscriber/TokenSubscriber.php line 25

  1. <?php
  2. // src/EventSubscriber/TokenSubscriber.php
  3. namespace App\EventSubscriber;
  5. use App\Controller\TokenAuthenticatedController;
  6. use App\Repository\ConfigRepository;
  7. use Symfony\Component\DependencyInjection\ParameterBag\ParameterBagInterface;
  8. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  9. use Symfony\Component\HttpKernel\Event\ControllerEvent;
  10. use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
  11. use Symfony\Component\HttpKernel\KernelEvents;
  13. class TokenSubscriber implements EventSubscriberInterface
  14. {
  15.     public function __construct
  16.     (
  17.         ParameterBagInterface $params,
  18.         ConfigRepository $configRepository
  19.     )
  20.     {
  21.         $this->params = $params;
  22.         $this->configRepository = $configRepository;
  23.     }
  25.     public function onKernelController(ControllerEvent $event)
  26.     {
  27.         $controller = $event->getController();
  28.         $whitelist = [
  29.             '127.0.0.1',
  30.             '::1'
  31.         ];
  32.         if((!in_array($_SERVER['REMOTE_ADDR'], $whitelist))) {
  33.             if (is_array($controller)) {
  34.                 $controller = $controller[0];
  35.             }
  37.             if ($controller instanceof TokenAuthenticatedController) {
  38.                 $token  = $event->getRequest()->headers->get('X-AUTH-TOKEN');
  39.                 $url    = $_SERVER['HTTP_HOST'];
  41.                 $config = $this->configRepository->findOneBy([
  42.                     'ApiToken'      => $token,
  43.                     'PlatFormUrl'   => $url,
  44.                     'Active'        => true
  45.                 ]);
  47.                 if(is_null($config)) {
  48.                     throw new AccessDeniedHttpException('This action needs valid token!');
  49.                 }
  51. //                if (!in_array($token, $this->tokens)) {
  52. //                    throw new AccessDeniedHttpException('This action needs a valid token!');
  53. //                }
  54.             }
  55.         }
  56.     }
  58.     public static function getSubscribedEvents()
  59.     {
  60.         return [
  61.             KernelEvents::CONTROLLER => 'onKernelController',
  62.         ];
  63.     }
  64. }