1
|
|
|
<?php |
2
|
|
|
|
3
|
|
|
namespace luya\web; |
4
|
|
|
|
5
|
|
|
use Yii; |
6
|
|
|
use yii\base\Component; |
7
|
|
|
use luya\Exception; |
8
|
|
|
use luya\helpers\StringHelper; |
9
|
|
|
use yii\web\ForbiddenHttpException; |
10
|
|
|
|
11
|
|
|
/** |
12
|
|
|
* Composition parseRequest Handler. |
13
|
|
|
* |
14
|
|
|
* The composition is run for every {{luya\web\UrlManager::parseRequest()} call in order to determine |
15
|
|
|
* the language of the application based on {{luya\web\Composition::$hostInfoMapping}} or from the given |
16
|
|
|
* {{luya\web\Request::$hostInfo}}. |
17
|
|
|
* |
18
|
|
|
* It also provides common functions in order to make complex regional language detection for urls |
19
|
|
|
* like `https://example.com/fr/ch`, its possible to set {{luya\web\Composition::$pattern}} and retrieve |
20
|
|
|
* the value later inside your application. The `langShortCode` must be provided as long as working with the |
21
|
|
|
* cms, as its bound to the administration are language database table. |
22
|
|
|
* |
23
|
|
|
* It also provides security checks like |
24
|
|
|
* |
25
|
|
|
* + {{luya\web\Composition::$allowedHosts}} |
26
|
|
|
* |
27
|
|
|
* The Composition component is registered by the {{luya\base\Boot}} object and can therefore always access |
28
|
|
|
* trough `Yii::$app->composition` as "singleton" instance. |
29
|
|
|
* |
30
|
|
|
* @property string $full Return `getFull()` method represents full composition |
31
|
|
|
* @property string $defaultLangShortCode Return default defined language shord code |
32
|
|
|
* @property string $language Return wrapper of getKey('langShortCode') |
33
|
|
|
* |
34
|
|
|
* @author Basil Suter <[email protected]> |
35
|
|
|
* @since 1.0.0 |
36
|
|
|
*/ |
37
|
|
|
class Composition extends Component implements \ArrayAccess |
38
|
|
|
{ |
39
|
|
|
/** |
40
|
|
|
* @var string This event will method will triggere after setKey method is proccessed |
41
|
|
|
*/ |
42
|
|
|
const EVENT_AFTER_SET = 'EVENT_AFTER_SET'; |
43
|
|
|
|
44
|
|
|
/** |
45
|
|
|
* @var string The Regular-Expression matching the var finder inside the url parts |
46
|
|
|
*/ |
47
|
|
|
const VAR_MATCH_REGEX = '/<(\w+):?([^>]+)?>/'; |
48
|
|
|
|
49
|
|
|
/** |
50
|
|
|
* @var \yii\web\Request Request-Object container from DI |
51
|
|
|
*/ |
52
|
|
|
public $request; |
53
|
|
|
|
54
|
|
|
/** |
55
|
|
|
* @var bool Enable or disable the->getFull() prefix. If disabled the response of getFull() would be empty, otherwhise it |
56
|
|
|
* returns the full prefix composition pattern based url. |
57
|
|
|
*/ |
58
|
|
|
public $hidden = true; |
59
|
|
|
|
60
|
|
|
/** |
61
|
|
|
* @var string Url matching prefix, which is used for all the modules (e.g. an e-store requireds a language |
62
|
|
|
* as the cms needs this informations too). After proccessing this informations, they will be removed |
63
|
|
|
* from the url for further proccessing. |
64
|
|
|
* |
65
|
|
|
* The fullqualified composer key will be stored in `$request->get('urlPrefixCompositionKey')`. |
66
|
|
|
* |
67
|
|
|
* Examples of how to use urlPrefixComposition |
68
|
|
|
* |
69
|
|
|
* ```php |
70
|
|
|
* $urlPrefixComposition = '<langShortCode:[a-z]{2}>/<countryShortCode:[a-z]{2}>'; // de/ch; fr/ch |
71
|
|
|
* ``` |
72
|
|
|
*/ |
73
|
|
|
public $pattern = '<langShortCode:[a-z]{2}>'; |
74
|
|
|
|
75
|
|
|
/** |
76
|
|
|
* @var array Default value if there is no composition provided in the url. The default value must match the url. |
77
|
|
|
*/ |
78
|
|
|
public $default = ['langShortCode' => 'en']; |
79
|
|
|
|
80
|
|
|
/** |
81
|
|
|
* @var array Define the default behavior for differnet host info schemas, if the host info is not found |
82
|
|
|
* the default behvaior via `$default` will be used. |
83
|
|
|
* An array where the key is the host info and value the array with the default configuration .e.g. |
84
|
|
|
* |
85
|
|
|
* ``` |
86
|
|
|
* 'hostInfoMapping' => [ |
87
|
|
|
* 'http://mydomain.com' => ['langShortCode' => 'en'], |
88
|
|
|
* 'http://meinedomain.de' => ['langShortCode' => 'de'], |
89
|
|
|
* ], |
90
|
|
|
* ``` |
91
|
|
|
* |
92
|
|
|
* The above configuration must be defined in your compostion componeont configuration in your config file. |
93
|
|
|
*/ |
94
|
|
|
public $hostInfoMapping = []; |
95
|
|
|
|
96
|
|
|
/** |
97
|
|
|
* |
98
|
|
|
* @var array|string An array with all valid hosts in order to ensure the request host is equals to valid hosts. |
99
|
|
|
* This filter provides protection against ['host header' attacks](https://www.acunetix.com/vulnerabilities/web/host-header-attack). |
100
|
|
|
* |
101
|
|
|
* ```php |
102
|
|
|
* 'allowedHosts' => [ |
103
|
|
|
* 'example.com', |
104
|
|
|
* '*.example.com', |
105
|
|
|
* ] |
106
|
|
|
* ``` |
107
|
|
|
* |
108
|
|
|
* If null is defined, the allow host filtering is disabled, default value. |
109
|
|
|
* @since 1.0.5 |
110
|
|
|
*/ |
111
|
|
|
public $allowedHosts = null; |
112
|
|
|
|
113
|
|
|
/** |
114
|
|
|
* Class constructor, to get data from DiContainer. |
115
|
|
|
* |
116
|
|
|
* @param \luya\web\Request $request Request componet resolved from Depency Manager |
117
|
|
|
* @param array $config The object configuration array |
118
|
|
|
*/ |
119
|
|
|
public function __construct(Request $request, array $config = []) |
120
|
|
|
{ |
121
|
|
|
$this->request = $request; |
122
|
|
|
parent::__construct($config); |
123
|
|
|
} |
124
|
|
|
|
125
|
|
|
/** |
126
|
|
|
* Return the the default langt short code. |
127
|
|
|
* |
128
|
|
|
* @return string |
129
|
|
|
*/ |
130
|
|
|
public function getDefaultLangShortCode() |
131
|
|
|
{ |
132
|
|
|
return $this->default['langShortCode']; |
133
|
|
|
} |
134
|
|
|
|
135
|
|
|
private $_compositionKeys = []; |
136
|
|
|
|
137
|
|
|
/** |
138
|
|
|
* Resolve the the composition on init. |
139
|
|
|
*/ |
140
|
|
|
public function init() |
141
|
|
|
{ |
142
|
|
|
parent::init(); |
143
|
|
|
|
144
|
|
|
// check if the required key langShortCode exist in the default array. |
145
|
|
|
if (!array_key_exists('langShortCode', $this->default)) { |
146
|
|
|
throw new Exception("The composition default rule must contain a langShortCode."); |
147
|
|
|
} |
148
|
|
|
|
149
|
|
|
if ($this->allowedHosts !== null && !$this->isHostAllowed($this->allowedHosts)) { |
150
|
|
|
throw new ForbiddenHttpException("The current host '{$this->request->hostName}' is not in the list valid of hosts."); |
151
|
|
|
} |
152
|
|
|
|
153
|
|
|
if (array_key_exists($this->request->hostInfo, $this->hostInfoMapping)) { |
154
|
|
|
$this->default = $this->hostInfoMapping[$this->request->hostInfo]; |
155
|
|
|
} |
156
|
|
|
|
157
|
|
|
// atach event to component |
158
|
|
|
$this->on(self::EVENT_AFTER_SET, [$this, 'eventAfterSet']); |
159
|
|
|
// resolved data |
160
|
|
|
$resolve = $this->getResolvedPathInfo($this->request); |
|
|
|
|
161
|
|
|
// set initializer comosition |
162
|
|
|
foreach ($resolve['compositionKeys'] as $key => $value) { |
163
|
|
|
$this->setKey($key, $value); |
164
|
|
|
} |
165
|
|
|
$this->_compositionKeys = $resolve['keys']; |
166
|
|
|
} |
167
|
|
|
|
168
|
|
|
/** |
169
|
|
|
* Checks if the current request name against the allowedHosts list. |
170
|
|
|
* |
171
|
|
|
* If the list of |
172
|
|
|
* |
173
|
|
|
* @return boolean Whether the current hostName is allowed or not. |
174
|
|
|
* @since 1.0.5 |
175
|
|
|
*/ |
176
|
|
|
public function isHostAllowed($allowedHosts) |
177
|
|
|
{ |
178
|
|
|
$currentHost = $this->request->hostName; |
179
|
|
|
|
180
|
|
|
$rules = (array) $allowedHosts; |
181
|
|
|
|
182
|
|
|
foreach ($rules as $allowedHost) { |
183
|
|
|
if (StringHelper::matchWildcard($allowedHost, $currentHost)) { |
184
|
|
|
return true; |
185
|
|
|
} |
186
|
|
|
} |
187
|
|
|
|
188
|
|
|
return false; |
189
|
|
|
} |
190
|
|
|
|
191
|
|
|
/** |
192
|
|
|
* This event will method will trigge after setKey method is proccessed. The |
193
|
|
|
* main purpose of this function to change the localisation based on the required |
194
|
|
|
* key 'langShortCode'. |
195
|
|
|
* |
196
|
|
|
* @param \luya\web\CompositionAfterSetEvent $event The event object. |
197
|
|
|
*/ |
198
|
|
|
public function eventAfterSet($event) |
199
|
|
|
{ |
200
|
|
|
if ($event->key == 'langShortCode') { |
201
|
|
|
Yii::$app->setLocale($event->value); |
202
|
|
|
} |
203
|
|
|
} |
204
|
|
|
|
205
|
|
|
/** |
206
|
|
|
* Resolve the current url request and retun an array contain resolved route and the resolved values. |
207
|
|
|
* |
208
|
|
|
* @param \luya\web\Request $request |
209
|
|
|
* @return array An array containing the route and the resolvedValues. Example array output when request path is `de/hello/world`: |
210
|
|
|
* |
211
|
|
|
* ```php |
212
|
|
|
* [ |
213
|
|
|
* 'route' => 'hello/world', |
214
|
|
|
* 'resolvedValues' => [ |
215
|
|
|
* 0 => 'de' |
216
|
|
|
* ], |
217
|
|
|
* ] |
218
|
|
|
* ``` |
219
|
|
|
*/ |
220
|
|
|
public function getResolvedPathInfo(Request $request) |
221
|
|
|
{ |
222
|
|
|
// contains all resolved values |
223
|
|
|
$resolvedValues = []; |
224
|
|
|
$foundKeys = []; |
225
|
|
|
// array with all url parts, seperated by slash |
226
|
|
|
$requestUrlParts = explode('/', $request->pathInfo); |
227
|
|
|
// catch all results matching the var match regular expression |
228
|
|
|
preg_match_all(static::VAR_MATCH_REGEX, $this->pattern, $matches, PREG_SET_ORDER); |
229
|
|
|
// get all matches |
230
|
|
|
foreach ($matches as $index => $match) { |
231
|
|
|
$foundKeys[] = $match[1]; |
232
|
|
|
// check if the index of the match is existing in the requestUrlParts array as the match always |
233
|
|
|
// starts from the begin of a string. |
234
|
|
|
if (isset($requestUrlParts[$index])) { |
235
|
|
|
$requestUrlValue = $requestUrlParts[$index]; |
236
|
|
|
// check if the value of the requeste url value matches the regex of the compositoin |
237
|
|
|
if (preg_match('/^'.$match[2].'$/', $requestUrlValue)) { |
238
|
|
|
$resolvedValues[$match[1]] = $requestUrlValue; |
239
|
|
|
// cause the part is matched by the composition, we have to unset the key from the array. |
240
|
|
|
unset($requestUrlParts[$index]); |
241
|
|
|
} |
242
|
|
|
} |
243
|
|
|
} |
244
|
|
|
// get default values if nothing have been resolved |
245
|
|
|
if (count($resolvedValues) == 0) { |
246
|
|
|
$keys = $this->default; |
247
|
|
|
} else { |
248
|
|
|
$keys = $resolvedValues; |
249
|
|
|
} |
250
|
|
|
// return array with route and resolvedValues |
251
|
|
|
return ['route' => implode('/', $requestUrlParts), 'resolvedValues' => $resolvedValues, 'compositionKeys' => $keys, 'keys' => $foundKeys]; |
252
|
|
|
} |
253
|
|
|
|
254
|
|
|
private $_composition = []; |
255
|
|
|
|
256
|
|
|
/** |
257
|
|
|
* Set a new composition key and value in composition array. If the key already exists, it will |
258
|
|
|
* be overwritten. The setKey method triggers the CompositionAfterSetEvent class. |
259
|
|
|
* |
260
|
|
|
* @param string $key The key in the array, e.g. langShortCode |
261
|
|
|
* @param string $value The value coresponding to the key e.g. de |
262
|
|
|
*/ |
263
|
|
|
public function setKey($key, $value) |
264
|
|
|
{ |
265
|
|
|
// set and override composition |
266
|
|
|
$this->_composition[$key] = $value; |
267
|
|
|
// trigger event |
268
|
|
|
$event = new CompositionAfterSetEvent(); |
269
|
|
|
$event->key = $key; |
270
|
|
|
$event->value = $value; |
271
|
|
|
$this->trigger(self::EVENT_AFTER_SET, $event); |
272
|
|
|
} |
273
|
|
|
|
274
|
|
|
/** |
275
|
|
|
* Get value from the composition array for the provided key, if the key does not existing the default value |
276
|
|
|
* will be return. The standard value of the defaultValue is false, so if nothing defined and the could not |
277
|
|
|
* be found, the return value is `false`. |
278
|
|
|
* |
279
|
|
|
* @param string $key The key to find in the composition array e.g. langShortCode |
280
|
|
|
* @param string $defaultValue The default value if they could not be found |
281
|
|
|
* @return string|bool |
282
|
|
|
*/ |
283
|
|
|
public function getKey($key, $defaultValue = false) |
284
|
|
|
{ |
285
|
|
|
return (isset($this->_composition[$key])) ? $this->_composition[$key] : $defaultValue; |
286
|
|
|
} |
287
|
|
|
|
288
|
|
|
/** |
289
|
|
|
* Return the whole composition array. |
290
|
|
|
* |
291
|
|
|
* @return array |
292
|
|
|
*/ |
293
|
|
|
public function get() |
294
|
|
|
{ |
295
|
|
|
return $this->_composition; |
296
|
|
|
} |
297
|
|
|
|
298
|
|
|
/** |
299
|
|
|
* Return a path like string with all composition with trailing slash e.g. us/e. |
300
|
|
|
* |
301
|
|
|
* @return string |
302
|
|
|
*/ |
303
|
|
|
public function getFull() |
304
|
|
|
{ |
305
|
|
|
return $this->createRouteEnsure(); |
306
|
|
|
} |
307
|
|
|
|
308
|
|
|
/** |
309
|
|
|
* create a route but ensures if composition is hidden anywho. |
310
|
|
|
* |
311
|
|
|
* @param array $overrideKeys |
312
|
|
|
* @return string |
313
|
|
|
*/ |
314
|
|
|
public function createRouteEnsure(array $overrideKeys = []) |
315
|
|
|
{ |
316
|
|
|
return $this->hidden ? '' : $this->createRoute($overrideKeys); |
317
|
|
|
} |
318
|
|
|
|
319
|
|
|
/** |
320
|
|
|
* Create compositon route based on the provided keys (to override), if no keys provided |
321
|
|
|
* all the default values will be used. |
322
|
|
|
* |
323
|
|
|
* @param array $overrideKeys |
324
|
|
|
* @return string |
325
|
|
|
*/ |
326
|
|
|
public function createRoute(array $overrideKeys = []) |
327
|
|
|
{ |
328
|
|
|
$composition = $this->_composition; |
329
|
|
|
|
330
|
|
|
foreach ($overrideKeys as $key => $value) { |
331
|
|
|
if (in_array($key, $this->_compositionKeys)) { |
332
|
|
|
$composition[$key] = $value; |
333
|
|
|
} |
334
|
|
|
} |
335
|
|
|
|
336
|
|
|
return implode('/', $composition); |
337
|
|
|
} |
338
|
|
|
|
339
|
|
|
/** |
340
|
|
|
* Prepend to current composition (or to provided composition prefix-route) to a given route. |
341
|
|
|
* |
342
|
|
|
* @param string $route The route where the composition prefix should be prepended. |
343
|
|
|
* @param null|string $prefix Define the value you want to prepend to the route or not. |
344
|
|
|
* @return string |
345
|
|
|
*/ |
346
|
|
|
public function prependTo($route, $prefix = null) |
347
|
|
|
{ |
348
|
|
|
if ($prefix === null) { |
349
|
|
|
$prefix = $this->getFull(); |
350
|
|
|
} |
351
|
|
|
|
352
|
|
|
if (empty($prefix)) { |
353
|
|
|
return $route; |
354
|
|
|
} |
355
|
|
|
|
356
|
|
|
$prepend = ''; |
357
|
|
|
|
358
|
|
|
if (substr($route, 0, 1) == '/') { |
359
|
|
|
$prepend = '/'; |
360
|
|
|
} |
361
|
|
|
|
362
|
|
|
return $prepend.$prefix.'/'.ltrim($route, '/'); |
363
|
|
|
} |
364
|
|
|
|
365
|
|
|
/** |
366
|
|
|
* Remove the composition full parterns from a given route |
367
|
|
|
* |
368
|
|
|
* @param string $route |
369
|
|
|
* @return string route cleanup from the compositon pattern (without). |
370
|
|
|
*/ |
371
|
|
|
public function removeFrom($route) |
372
|
|
|
{ |
373
|
|
|
$pattern = preg_quote($this->getFull().'/', '#'); |
374
|
|
|
|
375
|
|
|
return preg_replace("#$pattern#", '', $route, 1); |
376
|
|
|
} |
377
|
|
|
|
378
|
|
|
/** |
379
|
|
|
* Wrapper for `getKey('langShortCode')` to load language to set php env settings. |
380
|
|
|
* |
381
|
|
|
* @return string|boolean Get the language value from the langShortCode key, false if not set. |
382
|
|
|
*/ |
383
|
|
|
public function getLanguage() |
384
|
|
|
{ |
385
|
|
|
return $this->getKey('langShortCode'); |
386
|
|
|
} |
387
|
|
|
|
388
|
|
|
/** |
389
|
|
|
* ArrayAccess offset exists. |
390
|
|
|
* |
391
|
|
|
* @see \ArrayAccess::offsetExists() |
392
|
|
|
* @return boolean |
393
|
|
|
*/ |
394
|
|
|
public function offsetExists($offset) |
395
|
|
|
{ |
396
|
|
|
return isset($this->_composition[$offset]); |
397
|
|
|
} |
398
|
|
|
|
399
|
|
|
/** |
400
|
|
|
* ArrayAccess set value to array. |
401
|
|
|
* |
402
|
|
|
* @see \ArrayAccess::offsetSet() |
403
|
|
|
* @param string $offset The key of the array |
404
|
|
|
* @param mixed $value The value for the offset key. |
405
|
|
|
* @throws \luya\Exception |
406
|
|
|
*/ |
407
|
|
|
public function offsetSet($offset, $value) |
408
|
|
|
{ |
409
|
|
|
if (is_null($offset)) { |
410
|
|
|
throw new Exception('Unable to set array value without key. Empty keys not allowed.'); |
411
|
|
|
} |
412
|
|
|
$this->setKey($offset, $value); |
413
|
|
|
} |
414
|
|
|
|
415
|
|
|
/** |
416
|
|
|
* ArrayAccess get the value for a key. |
417
|
|
|
* |
418
|
|
|
* @see \ArrayAccess::offsetGet() |
419
|
|
|
* @param string $offset The key to get from the array. |
420
|
|
|
* @return mixed The value for the offset key from the array. |
421
|
|
|
*/ |
422
|
|
|
public function offsetGet($offset) |
423
|
|
|
{ |
424
|
|
|
return $this->getKey($offset, null); |
425
|
|
|
} |
426
|
|
|
|
427
|
|
|
/** |
428
|
|
|
* ArrayAccess unset key. |
429
|
|
|
* |
430
|
|
|
* Unsetting data via array access is not allowed. |
431
|
|
|
* |
432
|
|
|
* @see \ArrayAccess::offsetUnset() |
433
|
|
|
* @param string $offset The key to unset from the array. |
434
|
|
|
* @throws \luya\Exception |
435
|
|
|
*/ |
436
|
|
|
public function offsetUnset($offset) |
437
|
|
|
{ |
438
|
|
|
throw new Exception('Deleting keys in Composition is not allowed.'); |
439
|
|
|
} |
440
|
|
|
} |
441
|
|
|
|
This check looks for parameters that are defined as one type in their type hint or doc comment but seem to be used as a narrower type, i.e an implementation of an interface or a subclass.
Consider changing the type of the parameter or doing an instanceof check before assuming your parameter is of the expected type.