Knp\RadBundle\EventListener\CsrfListener

Complexity

Total Complexity

5

Size/Duplication

Total Lines	32
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	3

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	5	1
A	onKernelRequest()	0	20	4

<?php

namespace Knp\RadBundle\EventListener;

use Symfony\Component\Form\Extension\Csrf\CsrfProvider\CsrfProviderInterface;
use Symfony\Component\HttpKernel\Event\GetResponseEvent;

class CsrfListener
{
    private $csrfProvider;
    private $intention;

    public function __construct(CsrfProviderInterface $csrfProvider, $intention = 'link')
    {
        $this->csrfProvider = $csrfProvider;
        $this->intention    = $intention;
    }

    public function onKernelRequest(GetResponseEvent $event)
    {
        $request = $event->getRequest();
        if (false === $request->attributes->get('_check_csrf', false)) {
            return;
        }
        if (!$request->request->has('_link_token')) {
            throw new \InvalidArgumentException(
                'The CSRF token verification is activated but you did not send a token. Please submit a request with a valid csrf token.'
            );
        }

        $token = $request->request->get('_link_token');

        if (!$this->csrfProvider->isCsrfTokenValid($this->intention, $token)) {
            throw new \InvalidArgumentException(
                'The CSRF token is invalid. Please submit a request with a valid csrf token.'
            );
        }
    }
}