vendor/league/oauth2-server-bundle/src/Security/EventListener/CheckScopeListener.php line 29

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace League\Bundle\OAuth2ServerBundle\Security\EventListener;
  7. use League\Bundle\OAuth2ServerBundle\Security\Exception\InsufficientScopesException;
  8. use League\Bundle\OAuth2ServerBundle\Security\Passport\Badge\ScopeBadge;
  9. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  10. use Symfony\Component\HttpFoundation\Request;
  11. use Symfony\Component\HttpFoundation\RequestStack;
  12. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  13. use Symfony\Component\Security\Http\Event\CheckPassportEvent;
  15. /**
  16.  * Checks that requested scopes are matching with token scopes.
  17.  *
  18.  * @author Mathias Arlaud <mathias.arlaud@gmail.com>
  19.  */
  20. final class CheckScopeListener implements EventSubscriberInterface
  21. {
  22.     private $requestStack;
  24.     public function __construct(RequestStack $requestStack)
  25.     {
  26.         $this->requestStack = $requestStack;
  27.     }
  29.     public function checkPassport(CheckPassportEvent $event): void
  30.     {
  31.         /**
  32.          * @var Passport $passport
  33.          *
  34.          * @psalm-suppress DeprecatedClass
  35.          */
  36.         $passport = $event->getPassport();
  37.         if (!$passport->hasBadge(ScopeBadge::class)) {
  38.             return;
  39.         }
  41.         /** @var ScopeBadge $badge */
  42.         $badge = $passport->getBadge(ScopeBadge::class);
  43.         if ($badge->isResolved()) {
  44.             return;
  45.         }
  47.         /** @var Request $request */
  48.         $request = $this->requestStack->{method_exists($this->requestStack, 'getMainRequest') ? 'getMainRequest' : 'getMasterRequest'}();
  50.         /** @var list<string> $requestedScopes */
  51.         $requestedScopes = $request->attributes->get('oauth2_scopes', []);
  53.         if ([] !== $requestedScopes && [] !== array_diff($requestedScopes, $badge->getScopes())) {
  54.             throw InsufficientScopesException::create();
  55.         }
  57.         $badge->markResolved();
  58.     }
  60.     public static function getSubscribedEvents(): array
  61.     {
  62.         return [
  63.             CheckPassportEvent::class => ['checkPassport', 256],
  64.         ];
  65.     }
  66. }