PublicRoute Attr

Author: tatevikg1

src/Attribute/PublicRoute.php

@@ -0,0 +1,15 @@
+<?php
+
+declare(strict_types=1);
+
+namespace PhpList\WebFrontend\Attribute;
+
+use Attribute;
+
+#[Attribute(Attribute::TARGET_CLASS | Attribute::TARGET_METHOD)]
+class PublicRoute
+{
+    public function __construct(public bool $isPublic = true)
+    {
+    }
+}

src/Controller/AuthController.php

@@ -7,6 +7,7 @@
 use Exception;
 use GuzzleHttp\Exception\GuzzleException;
 use PhpList\RestApiClient\Endpoint\AuthClient;
+use PhpList\WebFrontend\Attribute\PublicRoute;
 use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
 use Symfony\Component\HttpFoundation\Request;
 use Symfony\Component\HttpFoundation\Response;
@@ -21,6 +22,7 @@ public function __construct(AuthClient $apiClient)
         $this->apiClient = $apiClient;
     }
 
+    #[PublicRoute]
     #[Route('/login', name: 'login', methods: ['GET', 'POST'])]
     public function login(Request $request): Response
     {
@@ -64,6 +66,7 @@ public function login(Request $request): Response
     }
 
     #[Route('/logout', name: 'logout')]
+    #[PublicRoute]
     public function logout(Request $request): Response
     {
         $request->getSession()->remove('auth_token');

src/EventSubscriber/AuthRequiredSubscriber.php

@@ -0,0 +1,80 @@
+<?php
+
+declare(strict_types=1);
+
+namespace PhpList\WebFrontend\EventSubscriber;
+
+use PhpList\WebFrontend\Attribute\PublicRoute;
+use Symfony\Component\EventDispatcher\EventSubscriberInterface;
+use Symfony\Component\HttpFoundation\RedirectResponse;
+use Symfony\Component\HttpKernel\Event\ControllerEvent;
+use Symfony\Component\HttpKernel\KernelEvents;
+use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
+use ReflectionClass;
+use ReflectionMethod;
+
+class AuthRequiredSubscriber implements EventSubscriberInterface
+{
+    public function __construct(private readonly UrlGeneratorInterface $urlGenerator)
+    {
+    }
+
+    public static function getSubscribedEvents(): array
+    {
+        return [
+            KernelEvents::CONTROLLER => 'onController',
+        ];
+    }
+
+    public function onController(ControllerEvent $event): void
+    {
+        if (!$event->isMainRequest()) {
+            return;
+        }
+
+        $controller = $event->getController();
+        if (!\is_array($controller)) {
+            return;
+        }
+
+        [$controllerObject, $methodName] = $controller;
+
+        if ($this->isPublicRoute($controllerObject, $methodName)) {
+            return;
+        }
+
+        $request = $event->getRequest();
+        $session = $request->getSession();
+
+        if (!$session->has('auth_token')) {
+            $loginUrl = $this->urlGenerator->generate('login');
+            $event->setController(static fn () => new RedirectResponse($loginUrl));
+        }
+    }
+
+    private function isPublicRoute(object $controllerObject, string $methodName): bool
+    {
+        $rc = new ReflectionClass($controllerObject);
+
+        if ($rc->hasMethod($methodName)) {
+            $rm = new ReflectionMethod($controllerObject, $methodName);
+            foreach ($rm->getAttributes(PublicRoute::class) as $attr) {
+                /** @var PublicRoute $instance */
+                $instance = $attr->newInstance();
+                if ($instance->isPublic) {
+                    return true;
+                }
+            }
+        }
+
+        foreach ($rc->getAttributes(PublicRoute::class) as $attr) {
+            /** @var PublicRoute $instance */
+            $instance = $attr->newInstance();
+            if ($instance->isPublic) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}