getMethod() == 'PUT') $content = $request->getContent(); $this->logger->debug('Authenticating User.'); //When running phpUnit tests the global $_SERVER headers are not set. Adding them manually here to validate token $app_env = $this->env; $this->logger->debug('App Mode is: ' . $app_env); if ('test' == $app_env) { $_SERVER['HTTP_AUTHORIZATION'] = $request->headers->get('Authorization'); $this->logger->debug('Authenticating User.' . $_SERVER['HTTP_AUTHORIZATION']); } if (!$this->oauthService->verifyResourceRequest(\OAuth2\Request::createFromGlobals())) { //$app['server']->getResponse()->send(); //send 401 response - Unauthorized; $response = new CSProResponse(); $response->setError(401, 'Unauthorized', 'Unauthorized '); $response->headers->set('Content-Length', strlen($response->getContent())); return $response; } //check if valid schema $schemaValidator = new CSProSchemaValidator($this->apiSchemaVersion, $this->pdo, $this->logger); if (!$schemaValidator->isValidSchema()) { $response = new CSProResponse(); $msg = 'The database schema version does not match the version of the CSWeb code. Please run upgrade to update the database to the latest version.'; $response->setError(500, 'Internal Server Error', $msg); $response->headers->set('Content-Length', strlen($response->getContent())); return $response; } return null; } public function onKernelController(ControllerEvent $event) { $controller = $event->getController(); $this->logger->debug("Event Subscriber: OnKernelController"); /* * $controller passed can be either a class or a Closure. * This is not usual in Symfony but it may happen. * If it is a class, it comes in array format */ if (!is_array($controller)) { return; } $request = $event->getRequest(); $currentUrl = $request->getUri(); $this->logger->debug('route is ' . $currentUrl); $strTokenRoute = '/token'; $length = strlen($strTokenRoute); $isTokenRoute = (substr($currentUrl, -$length) === $strTokenRoute); if ($controller[0] instanceof ApiTokenAuthenticatedController) { //do the oauth check unless it is requesting a token if (!$isTokenRoute) { $response = $this->verifyResourceRequest($request); if ($response !== null) { $event->setController(fn() => $response); } else { $apiKeyToken = $this->oauthService->getResourceController()->getToken(); $apiKey = $apiKeyToken['access_token']; //set the token storage. $this->logger->debug("setting token storage " . $apiKey); $user = $this->apikeyUserProvider->loadUserByApiKey($apiKey); // $this->logger->debug("setting token storage" . print_r($user, true)); $roles = $user->getRoles(); $providerKey = 'cspro_oauth_provider'; /*$tokenStorage = new PreAuthenticatedToken( $user, $apiKey, $providerKey, $roles );*/ //deprecation https://github.com/symfony/symfony/issues/44396 $tokenStorage = new PreAuthenticatedToken( $user, $providerKey, $roles ); //set tokenstorage for authorization $this->tokenStorage->setToken($tokenStorage); } } } } public static function getSubscribedEvents() { return [KernelEvents::CONTROLLER => 'onKernelController']; } }