vendor/shopware/storefront/Framework/Routing/StorefrontSubscriber.php line 424

  1.         if (!$session->isStarted()) {
  2.             $session->setName('session-');
  3.             $session->start();
  4.             $session->set('sessionId', $session->getId());
  5.         }
  7.         $salesChannelId = $master->attributes->get(PlatformRequest::ATTRIBUTE_SALES_CHANNEL_ID);
  8.         if ($salesChannelId === null) {
  9.             /** @var SalesChannelContext|null $salesChannelContext */
  10.             $salesChannelContext = $master->attributes->get(PlatformRequest::ATTRIBUTE_SALES_CHANNEL_CONTEXT_OBJECT);
  11.             if ($salesChannelContext !== null) {
  12.                 $salesChannelId = $salesChannelContext->getSalesChannel()->getId();
  13.             }
  14.         }
  16.         if ($this->shouldRenewToken($session, $salesChannelId)) {
  17.             $token = Random::getAlphanumericString(32);
  18.             $session->set(PlatformRequest::HEADER_CONTEXT_TOKEN, $token);
  19.             $session->set(PlatformRequest::ATTRIBUTE_SALES_CHANNEL_ID, $salesChannelId);
  20.         }
  22.         $master->headers->set(
  23.             PlatformRequest::HEADER_CONTEXT_TOKEN,
  24.             $session->get(PlatformRequest::HEADER_CONTEXT_TOKEN)
  25.         );
  26.     }
  28.     public function updateSessionAfterLogin(CustomerLoginEvent $event): void
  29.     {
  30.         $token = $event->getContextToken();
  32.         $this->updateSession($token);
  33.     }
  35.     public function updateSessionAfterLogout(): void
  36.     {
  37.         $newToken = Random::getAlphanumericString(32);
  39.         $this->updateSession($newToken, true);
  40.     }
  42.     public function updateSession(string $token, bool $destroyOldSession = false): void
  43.     {
  44.         $master = $this->requestStack->getMainRequest();
  45.         if (!$master) {
  46.             return;
  47.         }
  48.         if (!$master->attributes->get(SalesChannelRequest::ATTRIBUTE_IS_SALES_CHANNEL_REQUEST)) {
  49.             return;
  50.         }
  52.         if (!$master->hasSession()) {
  53.             return;
  54.         }
  56.         $session = $master->getSession();
  57.         $session->migrate($destroyOldSession);
  58.         $session->set('sessionId', $session->getId());
  60.         $session->set(PlatformRequest::HEADER_CONTEXT_TOKEN, $token);
  61.         $master->headers->set(PlatformRequest::HEADER_CONTEXT_TOKEN, $token);
  62.     }
  64.     public function customerNotLoggedInHandler(ExceptionEvent $event): void
  65.     {
  66.         if (!$event->getRequest()->attributes->has(SalesChannelRequest::ATTRIBUTE_IS_SALES_CHANNEL_REQUEST)) {
  67.             return;
  68.         }
  70.         if (!$event->getThrowable() instanceof CustomerNotLoggedInException) {
  71.             return;
  72.         }
  74.         $request = $event->getRequest();
  76.         $parameters = [
  77.             'redirectTo' => $request->attributes->get('_route'),
  78.             'redirectParameters' => json_encode($request->attributes->get('_route_params'), \JSON_THROW_ON_ERROR),
  79.         ];
  81.         $redirectResponse = new RedirectResponse($this->router->generate('frontend.account.login.page', $parameters));
  83.         $event->setResponse($redirectResponse);
  84.     }
  86.     public function maintenanceResolver(RequestEvent $event): void
  87.     {
  88.         if ($this->maintenanceModeResolver->shouldRedirect($event->getRequest())) {
  89.             $event->setResponse(
  90.                 new RedirectResponse(
  91.                     $this->router->generate('frontend.maintenance.page'),
  92.                     RedirectResponse::HTTP_TEMPORARY_REDIRECT
  93.                 )
  94.             );
  95.         }
  96.     }
  98.     public function preventPageLoadingFromXmlHttpRequest(ControllerEvent $event): void
  99.     {
  100.         if (!$event->getRequest()->isXmlHttpRequest()) {
  101.             return;
  102.         }
  104.         /** @var list<string> $scope */
  105.         $scope = $event->getRequest()->attributes->get(PlatformRequest::ATTRIBUTE_ROUTE_SCOPE, []);
  107.         if (!\in_array(StorefrontRouteScope::ID, $scope, true)) {
  108.             return;
  109.         }
  111.         /** @var callable(): Response $controller */
  112.         $controller = $event->getController();
  114.         // happens if Controller is a closure
  115.         if (!\is_array($controller)) {
  116.             return;
  117.         }
  119.         $isAllowed = $event->getRequest()->attributes->getBoolean('XmlHttpRequest');
  121.         if ($isAllowed) {
  122.             return;
  123.         }
  125.         throw new AccessDeniedHttpException('PageController can\'t be requested via XmlHttpRequest.');
  126.     }
  128.     // used to switch session token - when the context token expired
  129.     public function replaceContextToken(SalesChannelContextResolvedEvent $event): void
  130.     {
  131.         $context = $event->getSalesChannelContext();
  133.         // only update session if token expired and switched
  134.         if ($event->getUsedToken() === $context->getToken()) {
  135.             return;
  136.         }
  138.         $this->updateSession($context->getToken());
  139.     }
  141.     public function addHreflang(StorefrontRenderEvent $event): void
  142.     {
  143.         $request = $event->getRequest();
  144.         $route = $request->attributes->get('_route');
  146.         if ($route === null) {
  147.             return;
  148.         }
  150.         $routeParams = $request->attributes->get('_route_params', []);
  151.         $salesChannelContext = $request->attributes->get(PlatformRequest::ATTRIBUTE_SALES_CHANNEL_CONTEXT_OBJECT);
  152.         $parameter = new HreflangLoaderParameter($route, $routeParams, $salesChannelContext);
  153.         $event->setParameter('hrefLang', $this->hreflangLoader->load($parameter));
  154.     }
  156.     public function addShopIdParameter(StorefrontRenderEvent $event): void
  157.     {
  158.         if (!$this->activeAppsLoader->getActiveApps()) {
  159.             return;
  160.         }
  162.         try {
  163.             $shopId = $this->shopIdProvider->getShopId();
  164.         } catch (AppUrlChangeDetectedException) {
  165.             return;
  166.         }
  168.         $event->setParameter('appShopId', $shopId);
  169.     }
  171.     public function addIconSetConfig(StorefrontRenderEvent $event): void
  172.     {
  173.         $request = $event->getRequest();
  175.         // get name if theme is not inherited
  176.         $theme = $request->attributes->get(SalesChannelRequest::ATTRIBUTE_THEME_NAME);
  178.         if (!$theme) {
  179.             // get theme name from base theme because for inherited themes the name is always null
  180.             $theme = $request->attributes->get(SalesChannelRequest::ATTRIBUTE_THEME_BASE_NAME);
  181.         }
  183.         if (!$theme) {
  184.             return;
  185.         }
  187.         $themeConfig = $this->themeRegistry->getConfigurations()->getByTechnicalName($theme);
  189.         if (!$themeConfig) {
  190.             return;
  191.         }
  193.         $iconConfig = [];
  194.         foreach ($themeConfig->getIconSets() as $pack => $path) {
  195.             $iconConfig[$pack] = [
  196.                 'path' => $path,
  197.                 'namespace' => $theme,
  198.             ];
  199.         }
  201.         $event->setParameter('themeIconConfig', $iconConfig);
  202.     }
  204.     private function shouldRenewToken(SessionInterface $session, ?string $salesChannelId = null): bool
  205.     {
  206.         if (!$session->has(PlatformRequest::HEADER_CONTEXT_TOKEN) || $salesChannelId === null) {
  207.             return true;
  208.         }
  210.         if ($this->systemConfigService->get('core.systemWideLoginRegistration.isCustomerBoundToSalesChannel')) {
  211.             return $session->get(PlatformRequest::ATTRIBUTE_SALES_CHANNEL_ID) !== $salesChannelId;
  212.         }
  214.         return false;
  215.     }
  216. }