vendor/shopware/core/Framework/Api/EventListener/Authentication/ApiAuthenticationListener.php line 104

Open in your IDE?
  1. <?php declare(strict_types=1);
  3. namespace Shopware\Core\Framework\Api\EventListener\Authentication;
  5. use League\OAuth2\Server\AuthorizationServer;
  6. use League\OAuth2\Server\Grant\ClientCredentialsGrant;
  7. use League\OAuth2\Server\Grant\PasswordGrant;
  8. use League\OAuth2\Server\Grant\RefreshTokenGrant;
  9. use League\OAuth2\Server\Repositories\RefreshTokenRepositoryInterface;
  10. use League\OAuth2\Server\Repositories\UserRepositoryInterface;
  11. use League\OAuth2\Server\ResourceServer;
  12. use Shopware\Core\Framework\Routing\ApiContextRouteScopeDependant;
  13. use Shopware\Core\Framework\Routing\KernelListenerPriorities;
  14. use Shopware\Core\Framework\Routing\RouteScopeCheckTrait;
  15. use Shopware\Core\Framework\Routing\RouteScopeRegistry;
  16. use Symfony\Bridge\PsrHttpMessage\Factory\PsrHttpFactory;
  17. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  18. use Symfony\Component\HttpKernel\Event\ControllerEvent;
  19. use Symfony\Component\HttpKernel\Event\RequestEvent;
  20. use Symfony\Component\HttpKernel\KernelEvents;
  22. class ApiAuthenticationListener implements EventSubscriberInterface
  23. {
  24.     use RouteScopeCheckTrait;
  26.     /**
  27.      * @var ResourceServer
  28.      */
  29.     private $resourceServer;
  31.     /**
  32.      * @var AuthorizationServer
  33.      */
  34.     private $authorizationServer;
  36.     /**
  37.      * @var UserRepositoryInterface
  38.      */
  39.     private $userRepository;
  41.     /**
  42.      * @var RefreshTokenRepositoryInterface
  43.      */
  44.     private $refreshTokenRepository;
  46.     /**
  47.      * @var PsrHttpFactory
  48.      */
  49.     private $psrHttpFactory;
  51.     /**
  52.      * @var RouteScopeRegistry
  53.      */
  54.     private $routeScopeRegistry;
  56.     public function __construct(
  57.         ResourceServer $resourceServer,
  58.         AuthorizationServer $authorizationServer,
  59.         UserRepositoryInterface $userRepository,
  60.         RefreshTokenRepositoryInterface $refreshTokenRepository,
  61.         PsrHttpFactory $psrHttpFactory,
  62.         RouteScopeRegistry $routeScopeRegistry
  63.     ) {
  64.         $this->resourceServer = $resourceServer;
  65.         $this->authorizationServer = $authorizationServer;
  66.         $this->userRepository = $userRepository;
  67.         $this->refreshTokenRepository = $refreshTokenRepository;
  68.         $this->psrHttpFactory = $psrHttpFactory;
  69.         $this->routeScopeRegistry = $routeScopeRegistry;
  70.     }
  72.     public static function getSubscribedEvents(): array
  73.     {
  74.         return [
  75.             KernelEvents::REQUEST => [
  76.                 ['setupOAuth', 128],
  77.             ],
  78.             KernelEvents::CONTROLLER => [
  79.                 ['validateRequest', KernelListenerPriorities::KERNEL_CONTROLLER_EVENT_PRIORITY_AUTH_VALIDATE],
  80.             ],
  81.         ];
  82.     }
  84.     public function setupOAuth(RequestEvent $event): void
  85.     {
  86.         if (!$event->isMasterRequest()) {
  87.             return;
  88.         }
  90.         $tenMinuteInterval = new \DateInterval('PT10M');
  91.         $oneWeekInterval = new \DateInterval('P1W');
  93.         $passwordGrant = new PasswordGrant($this->userRepository, $this->refreshTokenRepository);
  94.         $passwordGrant->setRefreshTokenTTL($oneWeekInterval);
  96.         $refreshTokenGrant = new RefreshTokenGrant($this->refreshTokenRepository);
  97.         $refreshTokenGrant->setRefreshTokenTTL($oneWeekInterval);
  99.         $this->authorizationServer->enableGrantType($passwordGrant, $tenMinuteInterval);
  100.         $this->authorizationServer->enableGrantType($refreshTokenGrant, $tenMinuteInterval);
  101.         $this->authorizationServer->enableGrantType(new ClientCredentialsGrant(), $tenMinuteInterval);
  102.     }
  104.     public function validateRequest(ControllerEvent $event): void
  105.     {
  106.         $request = $event->getRequest();
  108.         if (!$request->attributes->get('auth_required', true)) {
  109.             return;
  110.         }
  112.         if (!$this->isRequestScoped($request, ApiContextRouteScopeDependant::class)) {
  113.             return;
  114.         }
  116.         $psr7Request = $this->psrHttpFactory->createRequest($event->getRequest());
  117.         $psr7Request = $this->resourceServer->validateAuthenticatedRequest($psr7Request);
  119.         $request->attributes->add($psr7Request->getAttributes());
  120.     }
  122.     protected function getScopeRegistry(): RouteScopeRegistry
  123.     {
  124.         return $this->routeScopeRegistry;
  125.     }
  126. }