/home/sharedstore/public_html/prestashop.sharedstore.ma/src/Adapter/Security
Edit: /home/sharedstore/public_html/prestashop.sharedstore.ma/src/Adapter/Security/Admin.php (4134B)
* @copyright Since 2007 PrestaShop SA and Contributors
* @license https://opensource.org/licenses/OSL-3.0 Open Software License (OSL 3.0)
*/
namespace PrestaShop\PrestaShop\Adapter\Security;
use PrestaShop\PrestaShop\Adapter\LegacyContext;
use PrestaShopBundle\Controller\Api\OAuth2\AccessTokenController;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpKernel\Event\RequestEvent;
use Symfony\Component\HttpKernel\HttpKernelInterface;
use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken;
use Symfony\Component\Security\Core\Security;
use Symfony\Component\Security\Core\User\UserProviderInterface;
/**
* Admin Middleware security.
*/
class Admin
{
/**
* @var LegacyContext
*/
private $context;
/**
* @var \Context
*/
private $legacyContext;
/**
* @var TokenStorageInterface
*/
private $securityTokenStorage;
/**
* @var UserProviderInterface
*/
private $userProvider;
/**
* @var Security
*/
private $security;
public function __construct(
LegacyContext $context,
TokenStorageInterface $securityTokenStorage,
UserProviderInterface $userProvider,
Security $security
) {
$this->context = $context;
$this->legacyContext = $context->getContext();
$this->securityTokenStorage = $securityTokenStorage;
$this->userProvider = $userProvider;
$this->security = $security;
}
/**
* Check if employee is logged in
* If not logged in, redirect to admin home page.
*
* @param RequestEvent $event
*
* @return bool or redirect
*/
public function onKernelRequest(RequestEvent $event)
{
if (
$this->security->getUser() !== null
|| $event->getRequest()->get('_controller') === AccessTokenController::class
) {
return true;
}
//if employee loggdin in legacy context, authenticate him into sf2 security context
if (isset($this->legacyContext->employee) && $this->legacyContext->employee->isLoggedBack()) {
$user = $this->userProvider->loadUserByUsername($this->legacyContext->employee->email);
$token = new UsernamePasswordToken($user, null, 'admin', $user->getRoles());
$this->securityTokenStorage->setToken($token);
return true;
}
// in case of exception handler sub request, avoid infinite redirection
if ($event->getRequestType() === HttpKernelInterface::SUB_REQUEST
&& $event->getRequest()->attributes->has('exception')
) {
return true;
}
//employee not logged in
$event->stopPropagation();
//if http request - add 403 error
$request = Request::createFromGlobals();
if ($request->isXmlHttpRequest()) {
header('HTTP/1.1 403 Forbidden');
exit();
}
//redirect to admin home page
header('Location: ' . $this->context->getAdminLink('', false));
exit();
}
}