src/EventSubscriber/ApiAccessDeniedSubscriber.php line 27

Open in your IDE?
  1. <?php
  3. namespace Seidemann\Hanagud\EventSubscriber;
  5. use Seidemann\Hanagud\Http\ApiResponse;
  6. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  7. use Symfony\Component\HttpKernel\DataCollector\ExceptionDataCollector;
  8. use Symfony\Component\HttpKernel\Event\ExceptionEvent;
  9. use Symfony\Component\HttpKernel\KernelEvents;
  10. use Symfony\Component\HttpKernel\Profiler\Profiler;
  11. use Symfony\Component\Security\Core\Exception\AccessDeniedException;
  13. class ApiAccessDeniedSubscriber implements EventSubscriberInterface
  14. {
  15.     public function __construct(private ?Profiler $profiler = null)
  16.     {
  17.     }
  19.     /**
  20.      * Creates the ApiResponse from a given AccessDeniedException.
  21.      */
  22.     private function createApiResponse(AccessDeniedException $exception): ApiResponse
  23.     {
  24.         return new ApiResponse(null, $exception, 403);
  25.     }
  27.     public function onKernelException(ExceptionEvent $event): void
  28.     {
  29.         $exception = $event->getThrowable();
  30.         if (!$exception instanceof AccessDeniedException) {
  31.             return;
  32.         }
  34.         $request = $event->getRequest();
  36.         if (in_array('application/json', $request->getAcceptableContentTypes())) {
  37.             $response = $this->createApiResponse($exception);
  38.             $event->setResponse($response);
  40.             // If profiler is enabled, log exception into it
  41.             if (null !== $this->profiler) {
  42.                 /** @var ExceptionDataCollector $exceptionCollector */
  43.                 $exceptionCollector = $this->profiler->get('exception');
  44.                 $exceptionCollector->collect($request, $response, $exception);
  45.             }
  46.         }
  47.     }
  49.     public static function getSubscribedEvents()
  50.     {
  51.         return [
  52.             KernelEvents::EXCEPTION => [
  53.                 // we need a higher priority than Security HTTP ExceptionListener,
  54.                 // however we use a different priority for the rest of the responses,
  55.                 // hence this is in its own class
  56.                 ['onKernelException', 2],
  57.             ],
  58.         ];
  59.     }
  60. }