vendor/league/oauth2-server-bundle/src/Security/EventListener/CheckScopeListener.php line 29

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace League\Bundle\OAuth2ServerBundle\Security\EventListener;
  7. use League\Bundle\OAuth2ServerBundle\Security\Exception\InsufficientScopesException;
  8. use League\Bundle\OAuth2ServerBundle\Security\Passport\Badge\ScopeBadge;
  9. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  10. use Symfony\Component\HttpFoundation\Request;
  11. use Symfony\Component\HttpFoundation\RequestStack;
  12. use Symfony\Component\Security\Http\Authenticator\Passport\Passport;
  13. use Symfony\Component\Security\Http\Event\CheckPassportEvent;
  15. /**
  16.  * Checks that requested scopes are matching with token scopes.
  17.  *
  18.  * @author Mathias Arlaud <mathias.arlaud@gmail.com>
  19.  */
  20. final class CheckScopeListener implements EventSubscriberInterface
  21. {
  22.     private $requestStack;
  24.     public function __construct(RequestStack $requestStack)
  25.     {
  26.         $this->requestStack = $requestStack;
  27.     }
  29.     public function checkPassport(CheckPassportEvent $event): void
  30.     {
  31.         /**
  32.          * @var Passport $passport
  33.          * @psalm-suppress DeprecatedClass
  34.          */
  35.         $passport = $event->getPassport();
  36.         if (!$passport->hasBadge(ScopeBadge::class)) {
  37.             return;
  38.         }
  40.         /** @var ScopeBadge $badge */
  41.         $badge = $passport->getBadge(ScopeBadge::class);
  42.         if ($badge->isResolved()) {
  43.             return;
  44.         }
  46.         /** @var Request $request */
  47.         $request = $this->requestStack->{method_exists($this->requestStack, 'getMainRequest') ? 'getMainRequest' : 'getMasterRequest'}();
  49.         /** @var list<string> $requestedScopes */
  50.         $requestedScopes = $request->attributes->get('oauth2_scopes', []);
  52.         if ([] !== $requestedScopes && [] !== array_diff($requestedScopes, $badge->getScopes())) {
  53.             throw InsufficientScopesException::create();
  54.         }
  56.         $badge->markResolved();
  57.     }
  59.     public static function getSubscribedEvents(): array
  60.     {
  61.         return [
  62.             CheckPassportEvent::class => ['checkPassport', 256],
  63.         ];
  64.     }
  65. }