vendor/datenwerk/ginger-bundle/EventSubscriber/AdminLogEventSubscriber.php line 40

Open in your IDE?
  1. <?php
  3. namespace DW\GingerBundle\EventSubscriber;
  5. use DW\GingerBundle\DWGingerEvents;
  6. use DW\GingerBundle\Entity\AdminLog;
  7. use DW\GingerBundle\Event\AdminLogEvent;
  8. use DW\GingerBundle\Doctrine\AdminLogManager;
  9. use FOS\OAuthServerBundle\Security\Authentication\Token\OAuthToken;
  10. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  11. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  12. use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken;
  13. use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
  14. use Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter;
  15. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  17. class AdminLogEventSubscriber implements EventSubscriberInterface
  18. {
  19.     /**
  20.      * @var \Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface
  21.      */
  22.     private $tokenStorage;
  23.     
  24.     /**
  25.      * @var \Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface
  26.      */
  27.     private $authorizationChecker;
  28.     
  29.     private ?TokenInterface $token = null;
  30.     
  31.     public function __construct(TokenStorageInterface $tokenStorage = null, AuthorizationCheckerInterface $authorizationChecker = null)
  32.     {
  33.         $this->tokenStorage = $tokenStorage;
  34.         $this->authorizationChecker = $authorizationChecker;
  35.     }
  36.     
  37.     /**
  38.      * Add auth-related information to admin log.
  39.      */
  40.     public function addAuthInfo(AdminLogEvent $event)
  41.     {
  42.         if (null === $this->tokenStorage || null === $this->authorizationChecker) {
  43.             return;
  44.         }
  46.         $this->token = $this->tokenStorage->getToken();
  47.         if (null !== $this->token && $this->authorizationChecker->isGranted(AuthenticatedVoter::IS_AUTHENTICATED_FULLY)) {
  48.             $log = $event->getAdminLog();
  49.             $this->setChannel($log);
  50.             $this->setUserName($log);
  51.         }
  52.     }
  53.     
  54.     /**
  55.      * Set channel.
  56.      *
  57.      * TODO: Also check one user role in case of UsernamePasswordToken ???
  58.      *
  59.      * @param \DW\GingerBundle\Entity\AdminLog $log
  60.      */
  61.     private function setChannel(AdminLog $log)
  62.     {
  63.         if ($this->token instanceof OAuthToken) {
  64.             $log->setChannel(AdminLogManager::CHANNEL_API_CLIENT);
  65.         } else if ($this->token instanceof UsernamePasswordToken) {
  66.             $log->setChannel(AdminLogManager::CHANNEL_ADMIN_BACKEND);
  67.         }
  68.     }
  69.     
  70.     /**
  71.      * If not username is present, set it from current token.
  72.      *
  73.      * @param \DW\GingerBundle\Entity\AdminLog $log
  74.      */
  75.     private function setUserName(AdminLog $log)
  76.     {
  77.         if(empty($log->getUsername())) {
  78.             $log->setUsername($this->token->getUserIdentifier());
  79.         }
  80.     }
  81.     
  82.     /**
  83.      * @return array|void
  84.      */
  85.     public static function getSubscribedEvents()
  86.     {
  87.         return [
  88.           DWGingerEvents::ADMIN_LOG_PRE_PERSIST => 'addAuthInfo'
  89.         ];
  90.     }
  91. }