vendor/hwi/oauth-bundle/src/Controller/RedirectToServiceController.php line 57

  1. <?php
  3. /*
  4.  * This file is part of the HWIOAuthBundle package.
  5.  *
  6.  * (c) Hardware Info <opensource@hardware.info>
  7.  *
  8.  * For the full copyright and license information, please view the LICENSE
  9.  * file that was distributed with this source code.
  10.  */
  12. namespace HWI\Bundle\OAuthBundle\Controller;
  14. use HWI\Bundle\OAuthBundle\Security\Http\ResourceOwnerMapLocator;
  15. use HWI\Bundle\OAuthBundle\Security\OAuthUtils;
  16. use HWI\Bundle\OAuthBundle\Util\DomainWhitelist;
  17. use RuntimeException;
  18. use Symfony\Component\HttpFoundation\Exception\SessionNotFoundException;
  19. use Symfony\Component\HttpFoundation\RedirectResponse;
  20. use Symfony\Component\HttpFoundation\Request;
  21. use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
  22. use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
  24. /**
  25.  * @author Alexander <iam.asm89@gmail.com>
  26.  *
  27.  * @internal
  28.  */
  29. final class RedirectToServiceController
  30. {
  31.     private OAuthUtils $oauthUtils;
  32.     private DomainWhitelist $domainWhitelist;
  33.     private ResourceOwnerMapLocator $resourceOwnerMapLocator;
  34.     private ?string $targetPathParameter = null;
  35.     private bool $failedUseReferer;
  36.     private bool $useReferer;
  38.     public function __construct(
  39.         OAuthUtils $oauthUtils,
  40.         DomainWhitelist $domainWhitelist,
  41.         ResourceOwnerMapLocator $resourceOwnerMapLocator,
  42.         ?string $targetPathParameter,
  43.         bool $failedUseReferer,
  44.         bool $useReferer
  45.     ) {
  46.         $this->oauthUtils = $oauthUtils;
  47.         $this->domainWhitelist = $domainWhitelist;
  48.         $this->resourceOwnerMapLocator = $resourceOwnerMapLocator;
  49.         $this->targetPathParameter = $targetPathParameter;
  50.         $this->failedUseReferer = $failedUseReferer;
  51.         $this->useReferer = $useReferer;
  52.     }
  54.     /**
  55.      * @throws NotFoundHttpException
  56.      */
  57.     public function redirectToServiceAction(Request $request, string $service): RedirectResponse
  58.     {
  59.         try {
  60.             $authorizationUrl = $this->oauthUtils->getAuthorizationUrl($request, $service);
  61.         } catch (RuntimeException $e) {
  62.             throw new NotFoundHttpException($e->getMessage(), $e);
  63.         }
  65.         $this->storeReturnPath($request, $authorizationUrl);
  67.         return new RedirectResponse($authorizationUrl);
  68.     }
  70.     private function storeReturnPath(Request $request, string $authorizationUrl): void
  71.     {
  72.         try {
  73.             $session = $request->getSession();
  74.         } catch (SessionNotFoundException $e) {
  75.             return;
  76.         }
  78.         $param = $this->targetPathParameter;
  80.         foreach ($this->resourceOwnerMapLocator->getFirewallNames() as $firewallName) {
  81.             $sessionKey = '_security.'.$firewallName.'.target_path';
  82.             $sessionKeyFailure = '_security.'.$firewallName.'.failed_target_path';
  84.             if (!empty($param) && $targetUrl = $request->get($param)) {
  85.                 if (!$this->domainWhitelist->isValidTargetUrl($targetUrl)) {
  86.                     throw new AccessDeniedHttpException('Not allowed to redirect to '.$targetUrl);
  87.                 }
  89.                 $session->set($sessionKey, $targetUrl);
  90.             }
  92.             if ($this->failedUseReferer && !$session->has($sessionKeyFailure) && ($targetUrl = $request->headers->get('Referer')) && $targetUrl !== $authorizationUrl) {
  93.                 $session->set($sessionKeyFailure, $targetUrl);
  94.             }
  96.             if ($this->useReferer && !$session->has($sessionKey) && ($targetUrl = $request->headers->get('Referer')) && $targetUrl !== $authorizationUrl) {
  97.                 $session->set($sessionKey, $targetUrl);
  98.             }
  99.         }
  100.     }
  101. }