vendor/elements/document-http-auth-bundle/src/Elements/Bundle/DocumentHttpAuthBundle/EventSubscriber/DocumentHttpAuth.php line 50

Open in your IDE?
  1. <?php
  3. namespace Elements\Bundle\DocumentHttpAuthBundle\EventSubscriber;
  5. use Pimcore\Bundle\CoreBundle\EventListener\Traits\PimcoreContextAwareTrait;
  6. use Pimcore\Http\Request\Resolver\DocumentResolver;
  7. use Pimcore\Http\Request\Resolver\PimcoreContextResolver;
  8. use Pimcore\Http\RequestHelper;
  9. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  10. use Symfony\Component\HttpKernel\Event\RequestEvent;
  11. use Symfony\Component\HttpKernel\KernelEvents;
  12. use Symfony\Component\Security\Http\EntryPoint\BasicAuthenticationEntryPoint;
  14. class DocumentHttpAuth implements EventSubscriberInterface
  15. {
  16.     use PimcoreContextAwareTrait;
  18.     /**
  19.      * @var DocumentResolver
  20.      */
  21.     protected $documentResolver;
  23.     /**
  24.      * @var RequestHelper
  25.      */
  26.     protected $requestHelper;
  28.     /**
  29.      * @param DocumentResolver $documentResolver
  30.      */
  31.     public function __construct(DocumentResolver $documentResolver, RequestHelper $requestHelper)
  32.     {
  33.         $this->documentResolver = $documentResolver;
  34.         $this->requestHelper = $requestHelper;
  35.     }
  37.     /**
  38.      * @inheritDoc
  39.      */
  40.     public static function getSubscribedEvents()
  41.     {
  42.         return [
  43.             KernelEvents::REQUEST => ['onKernelRequest', 17]
  44.         ];
  45.     }
  47.     /**
  48.      * @param RequestEvent $event
  49.      */
  50.     public function onKernelRequest(RequestEvent $event)
  51.     {
  52.         if($event->isMasterRequest() && $this->matchesPimcoreContext($event->getRequest(), PimcoreContextResolver::CONTEXT_DEFAULT)) {
  53.             $document = $this->documentResolver->getDocument($event->getRequest());
  54.             if ($document && !$this->requestHelper->isFrontendRequestByAdmin($event->getRequest())) {
  55.                 $username = $document->getProperty('auth_username');
  56.                 $password = $document->getProperty('auth_password');
  58.                 if ($username && $password) {
  59.                     $request = $event->getRequest();
  60.                     if ($authUsername = $request->headers->get('PHP_AUTH_USER')) {
  61.                         if ($authUsername === $username && $password === $request->headers->get('PHP_AUTH_PW')) {
  62.                             return;
  63.                         }
  64.                     }
  66.                     $entryPoint = new BasicAuthenticationEntryPoint('doc-auth');
  67.                     $event->setResponse($entryPoint->start($request));
  68.                 }
  69.             }
  70.         }
  71.     }
  72. }