CakeDC /
cakephp-api
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | /** |
||
| 3 | * Copyright 2016 - 2018, Cake Development Corporation (http://cakedc.com) |
||
| 4 | * |
||
| 5 | * Licensed under The MIT License |
||
| 6 | * Redistributions of files must retain the above copyright notice. |
||
| 7 | * |
||
| 8 | * @copyright Copyright 2016 - 2018, Cake Development Corporation (http://cakedc.com) |
||
| 9 | * @license MIT License (http://www.opensource.org/licenses/mit-license.php) |
||
| 10 | */ |
||
| 11 | |||
| 12 | namespace CakeDC\Api\Service\Action; |
||
| 13 | |||
| 14 | use CakeDC\Api\Exception\ValidationException; |
||
| 15 | use CakeDC\Api\Service\Auth\Auth; |
||
| 16 | use CakeDC\Api\Service\Service; |
||
| 17 | use Cake\Core\InstanceConfigTrait; |
||
| 18 | use Cake\Event\Event; |
||
| 19 | use Cake\Event\EventDispatcherInterface; |
||
| 20 | use Cake\Event\EventDispatcherTrait; |
||
| 21 | use Cake\Event\EventListenerInterface; |
||
| 22 | use Cake\Event\EventManager; |
||
| 23 | use Cake\Utility\Hash; |
||
| 24 | use Cake\Validation\ValidatorAwareTrait; |
||
| 25 | use Exception; |
||
| 26 | use ReflectionMethod; |
||
| 27 | |||
| 28 | /** |
||
| 29 | * Class Action |
||
| 30 | * |
||
| 31 | * @package CakeDC\Api\Service\Action |
||
| 32 | */ |
||
| 33 | abstract class Action implements EventListenerInterface, EventDispatcherInterface |
||
| 34 | { |
||
| 35 | use EventDispatcherTrait; |
||
| 36 | use InstanceConfigTrait; |
||
| 37 | use ValidatorAwareTrait; |
||
| 38 | |||
| 39 | /** |
||
| 40 | * Extensions to load and attach to listener |
||
| 41 | * |
||
| 42 | * @var array |
||
| 43 | */ |
||
| 44 | public $extensions = []; |
||
| 45 | |||
| 46 | /** |
||
| 47 | * An Auth instance. |
||
| 48 | * |
||
| 49 | * @var Auth |
||
| 50 | */ |
||
| 51 | public $Auth; |
||
| 52 | |||
| 53 | /** |
||
| 54 | * Default Action options. |
||
| 55 | * |
||
| 56 | * @var array |
||
| 57 | */ |
||
| 58 | protected $_defaultConfig = []; |
||
| 59 | |||
| 60 | /** |
||
| 61 | * A Service reference. |
||
| 62 | * |
||
| 63 | * @var Service |
||
| 64 | */ |
||
| 65 | protected $_service; |
||
| 66 | |||
| 67 | /** |
||
| 68 | * Activated route. |
||
| 69 | * |
||
| 70 | * @var array |
||
| 71 | */ |
||
| 72 | protected $_route = null; |
||
| 73 | |||
| 74 | /** |
||
| 75 | * Extension registry. |
||
| 76 | * |
||
| 77 | * @var \CakeDC\Api\Service\Action\ExtensionRegistry |
||
| 78 | */ |
||
| 79 | protected $_extensions; |
||
| 80 | |||
| 81 | /** |
||
| 82 | * Action name. |
||
| 83 | * |
||
| 84 | * @var string |
||
| 85 | */ |
||
| 86 | protected $_name; |
||
| 87 | |||
| 88 | /** |
||
| 89 | * Action constructor. |
||
| 90 | * |
||
| 91 | * @param array $config Configuration options passed to the constructor |
||
| 92 | */ |
||
| 93 | 123 | public function __construct(array $config = []) |
|
| 94 | { |
||
| 95 | 123 | if (!empty($config['name'])) { |
|
| 96 | 81 | $this->setName($config['name']); |
|
| 97 | 81 | } |
|
| 98 | 123 | if (!empty($config['service'])) { |
|
| 99 | 123 | $this->setService($config['service']); |
|
| 100 | 123 | } |
|
| 101 | 123 | if (!empty($config['route'])) { |
|
| 102 | 64 | $this->setRoute($config['route']); |
|
| 103 | 64 | } |
|
| 104 | 123 | if (!empty($config['Extension'])) { |
|
| 105 | 49 | $this->extensions = (Hash::merge($this->extensions, $config['Extension'])); |
|
| 106 | 49 | } |
|
| 107 | 123 | $extensionRegistry = $eventManager = null; |
|
| 108 | 123 | if (!empty($config['eventManager'])) { |
|
| 109 | $eventManager = $config['eventManager']; |
||
| 110 | } |
||
| 111 | 123 | $this->_eventManager = $eventManager ?: new EventManager(); |
|
| 112 | 123 | $this->setConfig($config); |
|
| 113 | 123 | $this->initialize($config); |
|
| 114 | 123 | $this->_eventManager->on($this); |
|
| 115 | 123 | $this->setExtensions($extensionRegistry); |
|
| 116 | 123 | $this->_loadExtensions(); |
|
| 117 | 123 | } |
|
| 118 | |||
| 119 | /** |
||
| 120 | * Initialize an action instance |
||
| 121 | * |
||
| 122 | * @param array $config Configuration options passed to the constructor |
||
| 123 | * @return void |
||
| 124 | */ |
||
| 125 | 123 | public function initialize(array $config) |
|
| 126 | { |
||
| 127 | 123 | $this->Auth = $this->_initializeAuth(); |
|
| 128 | 123 | } |
|
| 129 | |||
| 130 | /** |
||
| 131 | * Gets an action name. |
||
| 132 | * |
||
| 133 | * @return string |
||
| 134 | */ |
||
| 135 | 79 | public function getName() |
|
| 136 | { |
||
| 137 | 79 | return $this->_name; |
|
| 138 | } |
||
| 139 | |||
| 140 | /** |
||
| 141 | * Sets an action name. |
||
| 142 | * |
||
| 143 | * @param string $name An action name. |
||
| 144 | * @return $this |
||
| 145 | */ |
||
| 146 | 81 | public function setName($name) |
|
| 147 | { |
||
| 148 | 81 | $this->_name = $name; |
|
| 149 | |||
| 150 | 81 | return $this; |
|
| 151 | } |
||
| 152 | |||
| 153 | /** |
||
| 154 | * Get and set service name. |
||
| 155 | * |
||
| 156 | * @param string $name Action name. |
||
| 157 | * @deprecated 3.4.0 Use setName()/getName() instead. |
||
| 158 | * @return string |
||
| 159 | */ |
||
| 160 | public function name($name = null) |
||
| 161 | { |
||
| 162 | deprecationWarning( |
||
| 163 | 'Action::name() is deprecated. ' . |
||
| 164 | 'Use Action::setName()/getName() instead.' |
||
| 165 | ); |
||
| 166 | |||
| 167 | if ($name !== null) { |
||
| 168 | return $this->setName($name); |
||
| 169 | } |
||
| 170 | |||
| 171 | return $this->getName(); |
||
| 172 | } |
||
| 173 | |||
| 174 | /** |
||
| 175 | * Returns activated route. |
||
| 176 | * |
||
| 177 | * @return array |
||
| 178 | */ |
||
| 179 | 13 | public function getRoute() |
|
| 180 | { |
||
| 181 | 13 | return $this->_route; |
|
| 182 | } |
||
| 183 | |||
| 184 | /** |
||
| 185 | * Sets activated route. |
||
| 186 | * |
||
| 187 | * @param array $route Route config. |
||
| 188 | * @return $this |
||
| 189 | */ |
||
| 190 | 64 | public function setRoute(array $route) |
|
| 191 | { |
||
| 192 | 64 | $this->_route = $route; |
|
| 193 | |||
| 194 | 64 | return $this; |
|
| 195 | } |
||
| 196 | |||
| 197 | /** |
||
| 198 | * Api method for activated route. |
||
| 199 | * |
||
| 200 | * @param array $route Activated route. |
||
| 201 | * @deprecated 3.4.0 Use setRoute()/getRoute() instead. |
||
| 202 | * @return array |
||
| 203 | */ |
||
| 204 | public function route($route = null) |
||
| 205 | { |
||
| 206 | deprecationWarning( |
||
| 207 | 'Action::route() is deprecated. ' . |
||
| 208 | 'Use Action::setRoute()/getRoute() instead.' |
||
| 209 | ); |
||
| 210 | |||
| 211 | if ($route !== null) { |
||
| 212 | return $this->setRoute($route); |
||
| 213 | } |
||
| 214 | |||
| 215 | return $this->getRoute(); |
||
| 216 | } |
||
| 217 | |||
| 218 | /** |
||
| 219 | * @return Service |
||
| 220 | */ |
||
| 221 | 9 | public function getService() |
|
| 222 | { |
||
| 223 | 9 | return $this->_service; |
|
| 224 | } |
||
| 225 | |||
| 226 | /** |
||
| 227 | * Set a service |
||
| 228 | * |
||
| 229 | * @param Service $service service |
||
| 230 | */ |
||
| 231 | 123 | public function setService(Service $service) |
|
| 232 | { |
||
| 233 | 123 | $this->_service = $service; |
|
| 234 | 123 | } |
|
| 235 | |||
| 236 | /** |
||
| 237 | * Set or get service. |
||
| 238 | * |
||
| 239 | * @param Service $service An Service instance. |
||
| 240 | * @return Service |
||
| 241 | * @deprecated 3.4.0 Use setService()/getService() instead. |
||
| 242 | */ |
||
| 243 | public function service($service = null) |
||
| 244 | { |
||
| 245 | deprecationWarning( |
||
| 246 | 'Action::service() is deprecated. ' . |
||
| 247 | 'Use Action::setService()/getService() instead.' |
||
| 248 | ); |
||
| 249 | |||
| 250 | if ($service !== null) { |
||
| 251 | return $this->setService($service); |
||
| 252 | } |
||
| 253 | |||
| 254 | return $this->getService(); |
||
| 255 | } |
||
| 256 | |||
| 257 | /** |
||
| 258 | * Apply validation process. |
||
| 259 | * |
||
| 260 | * @return bool |
||
| 261 | */ |
||
| 262 | 47 | public function validates() |
|
| 263 | { |
||
| 264 | 47 | return true; |
|
| 265 | } |
||
| 266 | |||
| 267 | /** |
||
| 268 | * Execute action. |
||
| 269 | * |
||
| 270 | * @return mixed |
||
| 271 | */ |
||
| 272 | abstract public function execute(); |
||
| 273 | |||
| 274 | /** |
||
| 275 | * Action execution life cycle. |
||
| 276 | * |
||
| 277 | * @return mixed |
||
| 278 | */ |
||
| 279 | 60 | public function process() |
|
| 280 | { |
||
| 281 | 60 | $event = $this->dispatchEvent('Action.beforeProcess', ['action' => $this]); |
|
| 282 | |||
| 283 | 60 | if ($event->isStopped()) { |
|
| 284 | return $event->result; |
||
| 285 | } |
||
| 286 | |||
| 287 | 60 | $event = new Event('Action.onAuth', $this, ['action' => $this]); |
|
| 288 | 60 | $this->Auth->authCheck($event); |
|
| 289 | |||
| 290 | 59 | $event = $this->dispatchEvent('Action.beforeValidate', []); |
|
| 291 | |||
| 292 | 59 | if ($event->isStopped()) { |
|
| 293 | $this->dispatchEvent('Action.beforeValidateStopped', []); |
||
| 294 | |||
| 295 | return $event->result; |
||
| 296 | } |
||
| 297 | |||
| 298 | 59 | if (!$this->validates()) { |
|
| 299 | $this->dispatchEvent('Action.validationFailed', []); |
||
| 300 | throw new ValidationException(__('Validation failed'), 0, null, []); |
||
| 301 | } |
||
| 302 | |||
| 303 | 58 | $event = $this->dispatchEvent('Action.beforeExecute', []); |
|
| 304 | |||
| 305 | 58 | if ($event->isStopped()) { |
|
| 306 | $this->dispatchEvent('Action.beforeExecuteStopped', []); |
||
| 307 | |||
| 308 | return $event->result; |
||
| 309 | } |
||
| 310 | |||
| 311 | // thrown before execute action event (with stop on false) |
||
| 312 | 58 | if (method_exists($this, 'action')) { |
|
| 313 | 1 | $result = $this->_executeAction(); |
|
| 314 | 1 | } else { |
|
| 315 | 57 | $result = $this->execute(); |
|
| 316 | } |
||
| 317 | 56 | $this->dispatchEvent('Action.afterProcess', compact('result')); |
|
| 318 | |||
| 319 | 56 | return $result; |
|
| 320 | } |
||
| 321 | |||
| 322 | /** |
||
| 323 | * Execute action call to the method. |
||
| 324 | * |
||
| 325 | * This method pass action params as method params. |
||
| 326 | * |
||
| 327 | * @param string $methodName Method name. |
||
| 328 | * @return mixed |
||
| 329 | * @throws Exception |
||
| 330 | */ |
||
| 331 | 1 | protected function _executeAction($methodName = 'action') |
|
| 332 | { |
||
| 333 | 1 | $parser = $this->getService()->getParser(); |
|
| 334 | 1 | $params = $parser->getParams(); |
|
| 335 | 1 | $arguments = []; |
|
| 336 | 1 | $reflection = new ReflectionMethod($this, $methodName); |
|
| 337 | 1 | foreach ($reflection->getParameters() as $param) { |
|
| 338 | 1 | $paramName = $param->getName(); |
|
|
0 ignored issues
–
show
Bug
introduced
by
Loading history...
|
|||
| 339 | 1 | if (!isset($params[$paramName])) { |
|
| 340 | if ($param->isOptional()) { |
||
| 341 | $arguments[] = $param->getDefaultValue(); |
||
| 342 | } else { |
||
| 343 | throw new Exception('Missing required param: ' . $paramName, 409); |
||
| 344 | } |
||
| 345 | } else { |
||
| 346 | 1 | if ($params[$paramName] === '' && $param->isOptional()) { |
|
| 347 | $arguments[] = $param->getDefaultValue(); |
||
| 348 | } else { |
||
| 349 | 1 | $value = $params[$paramName]; |
|
| 350 | 1 | $arguments[] = (is_numeric($value)) ? 0 + $value : $value; |
|
| 351 | } |
||
| 352 | } |
||
| 353 | 1 | } |
|
| 354 | 1 | $result = call_user_func_array([$this, $methodName], $arguments); |
|
| 355 | |||
| 356 | 1 | return $result; |
|
| 357 | } |
||
| 358 | |||
| 359 | /** |
||
| 360 | * @return array |
||
| 361 | */ |
||
| 362 | 123 | public function implementedEvents() |
|
| 363 | { |
||
| 364 | $eventMap = [ |
||
| 365 | 123 | 'Action.beforeProcess' => 'beforeProcess', |
|
| 366 | 123 | 'Action.beforeValidate' => 'beforeValidate', |
|
| 367 | 123 | 'Action.beforeExecute' => 'beforeExecute', |
|
| 368 | 123 | 'Action.afterProcess' => 'afterProcess', |
|
| 369 | 123 | ]; |
|
| 370 | 123 | $events = []; |
|
| 371 | |||
| 372 | 123 | foreach ($eventMap as $event => $method) { |
|
| 373 | 123 | if (!method_exists($this, $method)) { |
|
| 374 | 123 | continue; |
|
| 375 | } |
||
| 376 | $events[$event] = $method; |
||
| 377 | 123 | } |
|
| 378 | |||
| 379 | 123 | return $events; |
|
| 380 | } |
||
| 381 | |||
| 382 | /** |
||
| 383 | * Returns action input params |
||
| 384 | * |
||
| 385 | * @return mixed |
||
| 386 | */ |
||
| 387 | 66 | public function getData() |
|
| 388 | { |
||
| 389 | 66 | return $this->getService()->getParser()->getParams(); |
|
| 390 | } |
||
| 391 | |||
| 392 | /** |
||
| 393 | * Returns action input params |
||
| 394 | * |
||
| 395 | * @return mixed |
||
| 396 | * @deprecated 3.6.0 Use getData() instead. |
||
| 397 | */ |
||
| 398 | public function data() |
||
| 399 | { |
||
| 400 | deprecationWarning( |
||
| 401 | 'Action::data() is deprecated. ' . |
||
| 402 | 'Use Action::getData() instead.' |
||
| 403 | ); |
||
| 404 | |||
| 405 | return $this->getData(); |
||
| 406 | } |
||
| 407 | |||
| 408 | /** |
||
| 409 | * @return \CakeDC\Api\Service\Action\ExtensionRegistry |
||
| 410 | */ |
||
| 411 | 49 | public function getExtensions() |
|
| 412 | { |
||
| 413 | 49 | return $this->_extensions; |
|
| 414 | } |
||
| 415 | |||
| 416 | /** |
||
| 417 | * Set a service |
||
| 418 | * |
||
| 419 | * @param \CakeDC\Api\Service\Action\ExtensionRegistry|null $extensions Extension registry. |
||
| 420 | */ |
||
| 421 | 123 | public function setExtensions($extensions = null) |
|
| 422 | { |
||
| 423 | 123 | if ($extensions === null && $this->_extensions === null) { |
|
| 424 | 123 | $this->_extensions = new ExtensionRegistry($this); |
|
| 425 | 123 | } else { |
|
| 426 | $this->_extensions = $extensions; |
||
| 427 | } |
||
| 428 | |||
| 429 | 123 | return $this; |
|
| 430 | } |
||
| 431 | |||
| 432 | /** |
||
| 433 | * Get the extension registry for this action. |
||
| 434 | * |
||
| 435 | * If called with the first parameter, it will be set as the action $this->_extensions property |
||
| 436 | * |
||
| 437 | * @param \CakeDC\Api\Service\Action\ExtensionRegistry|null $extensions Extension registry. |
||
| 438 | * |
||
| 439 | * @return \CakeDC\Api\Service\Action\ExtensionRegistry |
||
| 440 | * @deprecated 3.6.0 Use setExtensions()/getExtensions() instead. |
||
| 441 | */ |
||
| 442 | public function extensions($extensions = null) |
||
| 443 | { |
||
| 444 | deprecationWarning( |
||
| 445 | 'Action::extensions() is deprecated. ' . |
||
| 446 | 'Use Action::setExtensions()/getExtensions() instead.' |
||
| 447 | ); |
||
| 448 | |||
| 449 | if ($this->_extensions === null && $extensions === null) { |
||
| 450 | $this->setExtensions($extensions); |
||
| 451 | |||
| 452 | return $this->getExtensions(); |
||
| 453 | } |
||
| 454 | } |
||
| 455 | |||
| 456 | /** |
||
| 457 | * Loads the defined extensions using the Extension factory. |
||
| 458 | * |
||
| 459 | * @return void |
||
| 460 | */ |
||
| 461 | protected function _loadExtensions() |
||
| 462 | { |
||
| 463 | if (empty($this->extensions)) { |
||
| 464 | return; |
||
| 465 | 123 | } |
|
| 466 | $registry = $this->getExtensions(); |
||
| 467 | 123 | $extensions = $registry->normalizeArray($this->extensions); |
|
| 468 | 74 | foreach ($extensions as $properties) { |
|
| 469 | $instance = $registry->load($properties['class'], $properties['config']); |
||
| 470 | 49 | $this->_eventManager->on($instance); |
|
| 471 | 49 | } |
|
| 472 | 49 | } |
|
| 473 | 49 | ||
| 474 | 49 | /** |
|
| 475 | 49 | * Initialize auth. |
|
| 476 | 49 | * |
|
| 477 | * @return Auth |
||
| 478 | */ |
||
| 479 | protected function _initializeAuth() |
||
| 480 | { |
||
| 481 | $config = $this->_authConfig(); |
||
| 482 | $auth = new Auth($config); |
||
| 483 | 123 | if (array_key_exists('allow', $config)) { |
|
| 484 | $auth->allow($config['allow']); |
||
| 485 | 123 | ||
| 486 | 123 | return $auth; |
|
| 487 | 123 | } |
|
| 488 | |||
| 489 | return $auth; |
||
| 490 | } |
||
| 491 | |||
| 492 | /** |
||
| 493 | 123 | * Prepare Auth configuration. |
|
| 494 | * |
||
| 495 | * @return array |
||
| 496 | */ |
||
| 497 | protected function _authConfig() |
||
| 498 | { |
||
| 499 | $defaultConfig = (array)$this->getConfig('Auth'); |
||
| 500 | |||
| 501 | 123 | return Hash::merge($defaultConfig, [ |
|
| 502 | 'service' => $this->_service, |
||
| 503 | 123 | 'request' => $this->_service->getRequest(), |
|
| 504 | 'response' => $this->_service->getResponse(), |
||
| 505 | 123 | 'action' => $this, |
|
| 506 | 123 | ]); |
|
| 507 | 123 | } |
|
| 508 | } |
||
| 509 |