src/EventListener/ControlpanelAccessControlListener.php line 82

Open in your IDE?
  1. <?php
  3. namespace App\EventListener;
  5. use App\Application\DTO\ControlPanel\Api\Academy\AcademyAttributes;
  6. use App\Application\DTO\ControlPanel\Api\Academy\CartCourseAttributes;
  7. use App\Application\DTO\ControlPanel\Api\DeliveryNote\DeliveryNoteDownloadsAttributes;
  8. use App\Application\DTO\ControlPanel\Api\MediaDownload\MediaDownloadRequestAttributes;
  9. use App\Application\DTO\ControlPanel\Api\Notification\NotificationAttributes;
  10. use App\Application\DTO\ControlPanel\Api\Payment\AdyenPaymentMethodDeletionAttributes;
  11. use App\Application\DTO\ControlPanel\Api\Payment\PaypalSaveBillingAgreementAttributes;
  12. use App\Application\DTO\ControlPanel\Api\Payment\PaypalUrlBillingAgreementAttributes;
  13. use App\Application\DTO\ControlPanel\Api\Rma\RmaAttributes;
  14. use App\Application\DTO\ControlPanel\Api\Rma\RmaLineAttributes;
  15. use App\Application\DTO\ControlPanel\Api\Rma\RmaLineCommentAttributes;
  16. use App\Application\DTO\ControlPanel\Api\Rma\RmaPickupAddressAttributes;
  17. use App\Application\DTO\ControlPanel\Api\Wishlist\RemoveProductAttributes;
  18. use App\Application\DTO\ControlPanel\Api\Wishlist\WishlistProductsCartAttributes;
  19. use App\Application\DTO\JsonApi\JsonApiDocument;
  20. use App\Application\Service\Factory\JsonApiFactory;
  21. use App\Application\Service\JsonApi\JsonApiResourceNormalizer;
  22. use App\Exception\ControlPanel\JsonApiException;
  23. use Symfony\Component\HttpFoundation\Request;
  24. use Symfony\Component\HttpKernel\Event\RequestEvent;
  25. use Symfony\Component\Serializer\Encoder\JsonEncoder;
  26. use Symfony\Component\Serializer\SerializerInterface;
  28. class ControlpanelAccessControlListener
  29. {
  30.     public const CONTROLPANEL_URI = '/controlpanel/api/';
  31.     public const JSON_API_V2_MIGRATED_ENDPOINTS = [
  32.         'api_controlpanel_rma_lines_create_rma_line',
  33.         'api_controlpanel_rma_lines_update_rma_line',
  34.         'api_controlpanel_rma_create',
  35.         'api_controlpanel_rma_update',
  36.         'api_controlpanel_rma_addresssave_rma_pickup_address',
  37.         'api_controlpanel_rma_line_commentsadd_rma_line_comments',
  38.         'api_controlpanel_rma_line_commentsupdate',
  39.         'controlpanel_media_request',
  40.         'controlpanel_media_app_infrastructure_symfony_controlpanel_api_mediadownloads_requestdownload',
  41.         'api_controlpanel_wishlist_remove_products_from_list',
  42.         'api_controlpanel_wishlist_add_products_to_cart',
  43.         'api_controlpanel_delivery_note_by_id',
  44.         'api_controlpanel_order_delivery-notes',
  45.         'api_controlpanel_order_pods_by_order_and_delivery_note',
  46.         'api_controlpanel_notification_update',
  47.         'api_controlpanel_notification_mark_all_as_read',
  48.         'api_controlpanel_order_download-delivery-notes',
  49.         'api_controlpanel_service_payment_actions',
  50.         'api_controlpanel_academy_coursesget_academy_courses',
  51.         'front_api_cart_add_course_to_cart',
  52.         'front_api_cart_add_course_to_cart_without_name',
  53.     ];
  55.     public const TYPE_TO_CLASS_MAP = [
  56.         RmaAttributes::TYPE => RmaAttributes::class,
  57.         RmaLineAttributes::TYPE => RmaLineAttributes::class,
  58.         RmaPickupAddressAttributes::TYPE => RmaPickupAddressAttributes::class,
  59.         RmaLineCommentAttributes::TYPE => RmaLineCommentAttributes::class,
  60.         MediaDownloadRequestAttributes::TYPE => MediaDownloadRequestAttributes::class,
  61.         NotificationAttributes::TYPE => NotificationAttributes::class,
  62.         RemoveProductAttributes::TYPE => RemoveProductAttributes::class,
  63.         WishlistProductsCartAttributes::TYPE => WishlistProductsCartAttributes::class,
  64.         AdyenPaymentMethodDeletionAttributes::TYPE => AdyenPaymentMethodDeletionAttributes::class,
  65.         PaypalSaveBillingAgreementAttributes::TYPE => PaypalSaveBillingAgreementAttributes::class,
  66.         PaypalUrlBillingAgreementAttributes::TYPE => PaypalUrlBillingAgreementAttributes::class,
  67.         DeliveryNoteDownloadsAttributes::TYPE => DeliveryNoteDownloadsAttributes::class,
  68.         AcademyAttributes::TYPE => AcademyAttributes::class,
  69.         CartCourseAttributes::TYPE => CartCourseAttributes::class,
  70.     ];
  72.     private SerializerInterface $serializer;
  74.     public function __construct(SerializerInterface $serializer)
  75.     {
  76.         $this->serializer = $serializer;
  77.     }
  79.     /**
  80.      * @throws JsonApiException
  81.      */
  82.     public function onKernelRequest(RequestEvent $requestEvent): void
  83.     {
  84.         $request = $requestEvent->getRequest();
  85.         $requestUri = $request->getRequestUri();
  86.         $requestMethod = $request->getMethod();
  87.         $requestName = $request->get('_route');
  88.         $content = $request->getContent();
  90.         if (0 !== strpos($requestUri, self::CONTROLPANEL_URI)) {
  91.             return;
  92.         }
  94.         if ((Request::METHOD_PATCH === $requestMethod || Request::METHOD_POST === $requestMethod) && !empty($content)) {
  95.             if (in_array($requestName, self::JSON_API_V2_MIGRATED_ENDPOINTS, true)) {
  96.                 $jsonApiDocument = $this->serializer->deserialize($request->getContent(), JsonApiDocument::class, JsonEncoder::FORMAT, [JsonApiResourceNormalizer::TYPE_TO_CLASS_MAP => self::TYPE_TO_CLASS_MAP]);
  97.             } else {
  98.                 $jsonApiDocument = JsonApiFactory::createFromJson($request->getContent());
  99.             }
  101.             $request->attributes->set('json_api_document', $jsonApiDocument);
  102.         }
  103.     }
  104. }