vendor/hwi/oauth-bundle/Security/Http/Firewall/OAuthListener.php line 28

Open in your IDE?
  1. <?php
  3. /*
  4.  * This file is part of the HWIOAuthBundle package.
  5.  *
  6.  * (c) Hardware.Info <[email protected]>
  7.  *
  8.  * For the full copyright and license information, please view the LICENSE
  9.  * file that was distributed with this source code.
  10.  */
  12. namespace HWI\Bundle\OAuthBundle\Security\Http\Firewall;
  14. use HWI\Bundle\OAuthBundle\OAuth\ResourceOwnerInterface;
  15. use HWI\Bundle\OAuthBundle\Security\Core\Authentication\Token\OAuthToken;
  16. use HWI\Bundle\OAuthBundle\Security\Http\ResourceOwnerMapInterface;
  17. use Symfony\Component\HttpFoundation\RedirectResponse;
  18. use Symfony\Component\HttpFoundation\Request;
  19. use Symfony\Component\Security\Core\Exception\AuthenticationException;
  20. use Symfony\Component\Security\Http\Firewall\AbstractAuthenticationListener;
  22. /**
  23.  * OAuthListener.
  24.  *
  25.  * @author Geoffrey Bachelet <[email protected]>
  26.  * @author Alexander <[email protected]>
  27.  */
  28. class OAuthListener extends AbstractAuthenticationListener
  29. {
  30.     /**
  31.      * @var ResourceOwnerMapInterface
  32.      */
  33.     private $resourceOwnerMap;
  35.     /**
  36.      * @var array
  37.      */
  38.     private $checkPaths;
  40.     /**
  41.      * @param ResourceOwnerMapInterface $resourceOwnerMap
  42.      */
  43.     public function setResourceOwnerMap(ResourceOwnerMapInterface $resourceOwnerMap)
  44.     {
  45.         $this->resourceOwnerMap = $resourceOwnerMap;
  46.     }
  48.     /**
  49.      * @param array $checkPaths
  50.      */
  51.     public function setCheckPaths(array $checkPaths)
  52.     {
  53.         $this->checkPaths = $checkPaths;
  54.     }
  56.     /**
  57.      * {@inheritdoc}
  58.      */
  59.     public function requiresAuthentication(Request $request)
  60.     {
  61.         // Check if the route matches one of the check paths
  62.         foreach ($this->checkPaths as $checkPath) {
  63.             if ($this->httpUtils->checkRequestPath($request, $checkPath)) {
  64.                 return true;
  65.             }
  66.         }
  68.         return false;
  69.     }
  71.     /**
  72.      * {@inheritdoc}
  73.      */
  74.     protected function attemptAuthentication(Request $request)
  75.     {
  76.         /* @var ResourceOwnerInterface $resourceOwner */
  77.         list($resourceOwner, $checkPath) = $this->resourceOwnerMap->getResourceOwnerByRequest($request);
  79.         if (!$resourceOwner) {
  80.             throw new AuthenticationException('No resource owner match the request.');
  81.         }
  83.         if (!$resourceOwner->handles($request)) {
  84.             throw new AuthenticationException('No oauth code in the request.');
  85.         }
  87.         // If resource owner supports only one url authentication, call redirect
  88.         if ($request->query->has('authenticated') && $resourceOwner->getOption('auth_with_one_url')) {
  89.             $request->attributes->set('service', $resourceOwner->getName());
  91.             return new RedirectResponse(sprintf('%s?code=%s&authenticated=true', $this->httpUtils->generateUri($request, 'hwi_oauth_connect_service'), $request->query->get('code')));
  92.         }
  94.         $resourceOwner->isCsrfTokenValid($request->get('state'));
  96.         $accessToken = $resourceOwner->getAccessToken(
  97.             $request,
  98.             $this->httpUtils->createRequest($request, $checkPath)->getUri()
  99.         );
  101.         $token = new OAuthToken($accessToken);
  102.         $token->setResourceOwnerName($resourceOwner->getName());
  104.         return $this->authenticationManager->authenticate($token);
  105.     }
  106. }