bundles/CheckoutBundle/Security/Voter/ApplicationOwnerVoter.php line 13

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace Bdm\CheckoutBundle\Security\Voter;
  7. use Bdm\BackofficeBundle\Entity\Application;
  8. use FOS\OAuthServerBundle\Entity\AccessTokenManager;
  9. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  10. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  11. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  13. class ApplicationOwnerVoter extends Voter
  14. {
  15. const APPLICATION_OWNER = 'APPLICATION_OWNER';
  17. protected \FOS\OAuthServerBundle\Entity\AccessTokenManager $oTokenManager;
  19. protected \Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface $oTokenStorage;
  21. /**
  22. * @param AccessTokenManager $oTokenManager token manager
  23. * @param TokenStorageInterface $oTokenStorage token storage
  24. */
  25. public function __construct(
  26. AccessTokenManager $oTokenManager,
  27. TokenStorageInterface $oTokenStorage
  28. ) {
  29. $this->oTokenManager = $oTokenManager;
  30. $this->oTokenStorage = $oTokenStorage;
  31. }
  33. /**
  34. * @param string $sAttribute attribute
  35. * @param mixed $oSubject subject
  36. * @return bool
  37. */
  38. public function supports($sAttribute, $oSubject)
  39. {
  40. if ($sAttribute !== self::APPLICATION_OWNER) {
  41. return false;
  42. }
  44. if ($oSubject instanceof Application) {
  45. return true;
  46. }
  48. return false;
  49. }
  51. /**
  52. * @param string $sAttribute attribute
  53. * @param mixed $oApplication application
  54. * @param TokenInterface $oToken token
  55. * @return bool
  56. */
  57. public function voteOnAttribute($sAttribute, $oApplication, TokenInterface $oToken)
  58. {
  59. $oAccessToken = $this->oTokenManager->findTokenByToken(
  60. $this->oTokenStorage->getToken()->getToken()
  61. );
  63. $oMerchant = $oAccessToken->getClient()->getMerchant();
  65. return ($oApplication->getMerchant()->getId() === $oMerchant->getId());
  66. }
  67. }