src/App/Security/Firewall/OAuthListener.php line 22

Open in your IDE?
  1. <?php
  3. namespace App\Security\Firewall;
  5. use App\Security\Authentication\Token\OAuthToken;
  6. use Symfony\Component\HttpFoundation\Request;
  7. use Symfony\Component\HttpKernel\Event\RequestEvent;
  8. use Symfony\Component\Security\Core\Authentication\AuthenticationManagerInterface;
  9. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  11. class OAuthListener
  12. {
  13.     protected TokenStorageInterface $tokenStorage;
  14.     protected AuthenticationManagerInterface $authenticationManager;
  16.     public function __construct(TokenStorageInterface $tokenStorage, AuthenticationManagerInterface $authenticationManager)
  17.     {
  18.         $this->tokenStorage = $tokenStorage;
  19.         $this->authenticationManager = $authenticationManager;
  20.     }
  22.     public function __invoke(RequestEvent $event): void
  23.     {
  24.         if (!$this->supports($event->getRequest())) {
  25.             return;
  26.         }
  28.         $token = new OAuthToken();
  29.         $token->setToken($this->getCredentials($event->getRequest()));
  30.         $authToken = $this->authenticationManager->authenticate($token);
  31.         $this->tokenStorage->setToken($authToken);
  32.     }
  34.     public function getCredentials(Request $request): ?string
  35.     {
  36.         $authorizationHeader = $request->headers->get('Authorization');
  37.         $headerToken = substr($authorizationHeader, 7); // remove 'Bearer '
  39.         // @todo access_token is used for backwards compatibility, remove in the future if possible.
  40.         return $headerToken ?? $request->request->get('access_token');
  41.     }
  43.     public function supports(Request $request): bool
  44.     {
  45.         // @todo access_token is used for backwards compatibility, remove in the future if possible.
  46.         return str_starts_with($request->headers->get('Authorization'), 'Bearer ') || $request->get('access_token');
  47.     }
  48. }