Silverback\ApiComponentsBundle\Security\EventListener\AccessDeniedListener

Complexity

Total Complexity

4

Size/Duplication

Total Lines	17
Duplicated Lines	0 %

Test Coverage

Coverage

0%

Importance

Changes	1
Bugs	0	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	3	1
A	onPostRespond()	0	8	3

<?php

namespace Silverback\ApiComponentsBundle\Security\EventListener;

use Lexik\Bundle\JWTAuthenticationBundle\Response\JWTAuthenticationFailureResponse;
use Silverback\ApiComponentsBundle\EventListener\Api\ApiEventListenerTrait;
use Silverback\ApiComponentsBundle\Mercure\MercureAuthorization;
use Symfony\Component\HttpKernel\Event\ExceptionEvent;
use Symfony\Component\HttpKernel\Event\ResponseEvent;
use Symfony\Component\Security\Core\Exception\AccessDeniedException;

class AccessDeniedListener
{
    use ApiEventListenerTrait;

The trait Silverback\ApiComponentsBundle\EventListener\Api\ApiEventListenerTrait requires the property $attributes which is not provided by Silverback\ApiComponentsBundle\Security\EventListener\AccessDeniedListener.

    public function __construct(
        private readonly MercureAuthorization $mercureAuthorization
    ) {
    }

    public function onPostRespond(ResponseEvent $event): void
    {
        $request = $event->getRequest();
        $attributes = $this->getAttributes($request);
        if ($attributes['operation']->getName() !== 'me' || !($response = $event->getResponse()) instanceof JWTAuthenticationFailureResponse) {
            return;
        }
        $response->headers->setCookie($this->mercureAuthorization->getClearAuthorizationCookie());
    }
}