src/EventSubscriber/XClientIdEventSubscribe.php line 23

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber;
  5. use App\Controller\TokenAuthenticatedController;
  6. use Psr\Log\LoggerInterface;
  7. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  8. use Symfony\Component\HttpKernel\Event\RequestEvent;
  9. use Symfony\Component\HttpFoundation\Request;
  10. use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
  11. use Symfony\Component\HttpKernel\KernelEvents;
  13. class XClientIdEventSubscribe implements EventSubscriberInterface
  14. {
  16.     private $logger;
  18.     public function __construct(LoggerInterface $logger)
  19.     {
  20.         $this->logger = $logger;
  21.     }
  23.     public function onKernelRequest(RequestEvent $event)
  24.     {
  25.         $request = $event->getRequest();
  26.         $method = strtoupper($request->getMethod());
  27.         if(in_array($method, array("GET", "HEAD", "OPTIONS", "TRACE", "CONNECT"))) {
  28.             return;
  29.         }
  30.         if('/login' == $request->getPathInfo() && 'POST' == $request->getMethod()) {
  31.             return;
  32.         }
  33.         $clientId = $request->headers->get('x-clientid');
  34.         if(empty($clientId)) {
  35.             $this->logger->warning('X-ClientId not defined: '.$request->getMethod().' '.$request->getPathInfo());
  36.             throw new AccessDeniedHttpException('Modification forbidden (x-cli...)');
  37.         }
  38.     }
  40.     public static function getSubscribedEvents()
  41.     {
  42.         return [
  43.             KernelEvents::REQUEST => 'onKernelRequest'
  44.         ];
  45.     }
  46. }