123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169 |
- <?php
- /*
- * This file is part of the Symfony package.
- *
- * (c) Fabien Potencier <fabien@symfony.com>
- *
- * For the full copyright and license information, please view the LICENSE
- * file that was distributed with this source code.
- */
- namespace Symfony\Component\Security\Http\Logout;
- use Symfony\Component\HttpFoundation\RequestStack;
- use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
- use Symfony\Component\Security\Core\Authentication\Token\AnonymousToken;
- use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
- use Symfony\Component\Security\Csrf\CsrfTokenManagerInterface;
- /**
- * Provides generator functions for the logout URL.
- *
- * @author Fabien Potencier <fabien@symfony.com>
- * @author Jeremy Mikola <jmikola@gmail.com>
- */
- class LogoutUrlGenerator
- {
- private $requestStack;
- private $router;
- private $tokenStorage;
- private $listeners = [];
- private $currentFirewall;
- public function __construct(RequestStack $requestStack = null, UrlGeneratorInterface $router = null, TokenStorageInterface $tokenStorage = null)
- {
- $this->requestStack = $requestStack;
- $this->router = $router;
- $this->tokenStorage = $tokenStorage;
- }
- /**
- * Registers a firewall's LogoutListener, allowing its URL to be generated.
- *
- * @param string $key The firewall key
- * @param string $logoutPath The path that starts the logout process
- * @param string|null $csrfTokenId The ID of the CSRF token
- * @param string|null $csrfParameter The CSRF token parameter name
- * @param string|null $context The listener context
- */
- public function registerListener(string $key, string $logoutPath, ?string $csrfTokenId, ?string $csrfParameter, CsrfTokenManagerInterface $csrfTokenManager = null, string $context = null)
- {
- $this->listeners[$key] = [$logoutPath, $csrfTokenId, $csrfParameter, $csrfTokenManager, $context];
- }
- /**
- * Generates the absolute logout path for the firewall.
- *
- * @return string The logout path
- */
- public function getLogoutPath(string $key = null)
- {
- return $this->generateLogoutUrl($key, UrlGeneratorInterface::ABSOLUTE_PATH);
- }
- /**
- * Generates the absolute logout URL for the firewall.
- *
- * @return string The logout URL
- */
- public function getLogoutUrl(string $key = null)
- {
- return $this->generateLogoutUrl($key, UrlGeneratorInterface::ABSOLUTE_URL);
- }
- public function setCurrentFirewall(?string $key, string $context = null)
- {
- $this->currentFirewall = [$key, $context];
- }
- /**
- * Generates the logout URL for the firewall.
- *
- * @return string The logout URL
- */
- private function generateLogoutUrl(?string $key, int $referenceType): string
- {
- [$logoutPath, $csrfTokenId, $csrfParameter, $csrfTokenManager] = $this->getListener($key);
- if (null === $logoutPath) {
- throw new \LogicException('Unable to generate the logout URL without a path.');
- }
- $parameters = null !== $csrfTokenManager ? [$csrfParameter => (string) $csrfTokenManager->getToken($csrfTokenId)] : [];
- if ('/' === $logoutPath[0]) {
- if (!$this->requestStack) {
- throw new \LogicException('Unable to generate the logout URL without a RequestStack.');
- }
- $request = $this->requestStack->getCurrentRequest();
- $url = UrlGeneratorInterface::ABSOLUTE_URL === $referenceType ? $request->getUriForPath($logoutPath) : $request->getBaseUrl().$logoutPath;
- if (!empty($parameters)) {
- $url .= '?'.http_build_query($parameters, '', '&');
- }
- } else {
- if (!$this->router) {
- throw new \LogicException('Unable to generate the logout URL without a Router.');
- }
- $url = $this->router->generate($logoutPath, $parameters, $referenceType);
- }
- return $url;
- }
- /**
- * @throws \InvalidArgumentException if no LogoutListener is registered for the key or could not be found automatically
- */
- private function getListener(?string $key): array
- {
- if (null !== $key) {
- if (isset($this->listeners[$key])) {
- return $this->listeners[$key];
- }
- throw new \InvalidArgumentException(sprintf('No LogoutListener found for firewall key "%s".', $key));
- }
- // Fetch the current provider key from token, if possible
- if (null !== $this->tokenStorage) {
- $token = $this->tokenStorage->getToken();
- if ($token instanceof AnonymousToken) {
- throw new \InvalidArgumentException('Unable to generate a logout url for an anonymous token.');
- }
- if (null !== $token) {
- if (method_exists($token, 'getFirewallName')) {
- $key = $token->getFirewallName();
- } elseif (method_exists($token, 'getProviderKey')) {
- trigger_deprecation('symfony/security-http', '5.2', 'Method "%s::getProviderKey()" has been deprecated, rename it to "getFirewallName()" instead.', \get_class($token));
- $key = $token->getProviderKey();
- }
- if (isset($this->listeners[$key])) {
- return $this->listeners[$key];
- }
- }
- }
- // Fetch from injected current firewall information, if possible
- [$key, $context] = $this->currentFirewall;
- if (isset($this->listeners[$key])) {
- return $this->listeners[$key];
- }
- foreach ($this->listeners as $listener) {
- if (isset($listener[4]) && $context === $listener[4]) {
- return $listener;
- }
- }
- throw new \InvalidArgumentException('Unable to find the current firewall LogoutListener, please provide the provider key manually.');
- }
- }
|