Silverback\ApiComponentsBundle\Security\EventListener\AccessDeniedListener

Complexity

Total Complexity

5

Size/Duplication

Total Lines	20
Duplicated Lines	0 %

Test Coverage

Coverage

0%

Importance

Changes	2
Bugs	1	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	3	1
A	onPostRespond()	0	11	4

<?php

/*
 * This file is part of the Silverback API Components Bundle Project
 *
 * (c) Daniel West <daniel@silverback.is>
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

declare(strict_types=1);

namespace Silverback\ApiComponentsBundle\Security\EventListener;

use Lexik\Bundle\JWTAuthenticationBundle\Response\JWTAuthenticationFailureResponse;
use Silverback\ApiComponentsBundle\EventListener\Api\ApiEventListenerTrait;
use Silverback\ApiComponentsBundle\Mercure\MercureAuthorization;
use Symfony\Component\HttpKernel\Event\ResponseEvent;

class AccessDeniedListener
{
    use ApiEventListenerTrait;

The trait Silverback\ApiComponentsBundle\EventListener\Api\ApiEventListenerTrait requires the property $attributes which is not provided by Silverback\ApiComponentsBundle\Security\EventListener\AccessDeniedListener.

    public function __construct(
        private readonly MercureAuthorization $mercureAuthorization
    ) {
    }

    public function onPostRespond(ResponseEvent $event): void
    {
        $request = $event->getRequest();
        $attributes = $this->getAttributes($request);
        if (
            !($operation = $attributes['operation'] ?? null)
            || 'me' !== $operation->getName()
            || !($response = $event->getResponse()) instanceof JWTAuthenticationFailureResponse) {
            return;
        }
        $response->headers->setCookie($this->mercureAuthorization->getClearAuthorizationCookie());
    }
}