custom/plugins/NetiNextAdminTools/src/Subscriber/ApiSubscriber.php line 43

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace NetInventors\NetiNextAdminTools\Subscriber;
  7. use League\OAuth2\Server\Exception\OAuthServerException;
  8. use NetInventors\NetiNextAdminTools\Services\FilterCheck;
  9. use NetInventors\NetiNextAdminTools\Services\FilterCriteriaBuilder;
  10. use Shopware\Core\Framework\DataAbstractionLayer\Event\EntitySearchedEvent;
  11. use Shopware\Core\PlatformRequest;
  12. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  13. use Symfony\Component\HttpKernel\Event\ControllerEvent;
  14. use Symfony\Component\HttpKernel\KernelEvents;
  16. class ApiSubscriber implements EventSubscriberInterface
  17. {
  18.     public const ENTITY_NAME = 'neti_admin_tools_filter';
  20.     private FilterCriteriaBuilder $filterCriteriaBuilder;
  22.     private FilterCheck           $filterCheck;
  24.     public function __construct(
  25.         FilterCriteriaBuilder $filterCriteriaBuilder,
  26.         FilterCheck $filterCheck
  27.     ) {
  28.         $this->filterCriteriaBuilder = $filterCriteriaBuilder;
  29.         $this->filterCheck           = $filterCheck;
  30.     }
  32.     public static function getSubscribedEvents(): array
  33.     {
  34.         return [
  35.             EntitySearchedEvent::class => 'onEntitySearched',
  36.             KernelEvents::CONTROLLER   => [ 'onKernelController', -100 ],
  37.         ];
  38.     }
  40.     /**
  41.      * @throws OAuthServerException
  42.      */
  43.     public function onEntitySearched(EntitySearchedEvent $event): void
  44.     {
  45.         if (static::ENTITY_NAME !== $event->getDefinition()->getEntityName()) {
  46.             return;
  47.         }
  49.         $this->filterCriteriaBuilder->buildConditions(
  50.             $event->getCriteria(),
  51.             $event->getContext()
  52.         );
  53.     }
  55.     public function onKernelController(ControllerEvent $event)
  56.     {
  57.         $request     = $event->getRequest();
  58.         $route       = $request->get('_route');
  59.         $id          = $request->get('id');
  60.         $updateRoute = \sprintf('api.%s.update', static::ENTITY_NAME);
  61.         $deleteRoute = \sprintf('api.%s.delete', static::ENTITY_NAME);
  63.         if (null === $id) {
  64.             return;
  65.         }
  67.         if ($route !== $updateRoute && $route !== $deleteRoute) {
  68.             return;
  69.         }
  71.         $this->filterCheck->checkUserForFilter(
  72.             $id,
  73.             $request->attributes->get(PlatformRequest::ATTRIBUTE_CONTEXT_OBJECT)
  74.         );
  75.     }
  76. }