TYPO3 v15 dev-main snapshot ()

2026-08-10 22:31:00 +02:00
commit f9941541b7
1178 changed files with 135377 additions and 0 deletions
@@ -0,0 +1,106 @@
+<?php
+
+declare(strict_types=1);
+
+/*
+ * This file is part of the TYPO3 CMS project.
+ *
+ * It is free software; you can redistribute it and/or modify it under
+ * the terms of the GNU General Public License, either version 2
+ * of the License, or any later version.
+ *
+ * For the full copyright and license information, please read the
+ * LICENSE.txt file that was distributed with this source code.
+ *
+ * The TYPO3 project - inspiring people to share!
+ */
+
+namespace TYPO3\CMS\Backend\Http;
+
+use Psr\Http\Message\ResponseInterface;
+use Psr\Http\Message\ServerRequestInterface;
+use Psr\Http\Server\RequestHandlerInterface;
+use TYPO3\CMS\Backend\Resource\PublicUrlPrefixer;
+use TYPO3\CMS\Backend\Routing\Exception\InvalidRequestTokenException;
+use TYPO3\CMS\Backend\Routing\Exception\MissingRequestTokenException;
+use TYPO3\CMS\Backend\Routing\Route;
+use TYPO3\CMS\Backend\Routing\RouteRedirect;
+use TYPO3\CMS\Backend\Routing\UriBuilder;
+use TYPO3\CMS\Core\EventDispatcher\ListenerProvider;
+use TYPO3\CMS\Core\Http\RedirectResponse;
+use TYPO3\CMS\Core\Http\Response;
+use TYPO3\CMS\Core\Resource\Event\GeneratePublicUrlForResourceEvent;
+
+/**
+ * General RequestHandler for the TYPO3 Backend. This is used for all Backend requests, including AJAX routes.
+ *
+ * If a get/post parameter "route" is set, the Backend Routing is called and searches for a
+ * matching route inside the Router. The corresponding controller / action is called then which returns the response.
+ *
+ * The following get/post parameters are evaluated here:
+ *   - route
+ *   - token
+ */
+class RequestHandler implements RequestHandlerInterface
+{
+    protected RouteDispatcher $dispatcher;
+
+    protected UriBuilder $uriBuilder;
+
+    protected ListenerProvider $listenerProvider;
+
+    public function __construct(
+        RouteDispatcher $dispatcher,
+        UriBuilder $uriBuilder,
+        ListenerProvider $listenerProvider
+    ) {
+        $this->dispatcher = $dispatcher;
+        $this->uriBuilder = $uriBuilder;
+        $this->listenerProvider = $listenerProvider;
+    }
+
+    /**
+     * Handles a backend request, after finishing running middlewares
+     * Dispatch the request to the appropriate controller through the
+     * Backend Dispatcher which resolves the routing
+     */
+    public function handle(ServerRequestInterface $request): ResponseInterface
+    {
+        // Make sure all FAL resources have absolute URL paths
+        $this->listenerProvider->addListener(
+            GeneratePublicUrlForResourceEvent::class,
+            PublicUrlPrefixer::class,
+            'prefixWithSitePath'
+        );
+
+        /** @var Route $route */
+        $route = $request->getAttribute('route');
+        $isAjaxCall = (bool)($route->getOption('ajax') ?? false);
+
+        // b/w compat
+        $GLOBALS['TYPO3_REQUEST'] = $request;
+
+        try {
+            // Check if the router has the available route and dispatch.
+            return $this->dispatcher->dispatch($request);
+        } catch (MissingRequestTokenException $e) {
+            if ($isAjaxCall) {
+                return new Response(statusCode: 401);
+            }
+            // When token was missing, then redirect to login, but keep the current route as redirect after login
+            $loginUrl = $this->uriBuilder->buildUriWithRedirect(
+                'login',
+                [],
+                RouteRedirect::createFromRoute($request->getAttribute('route'), $request->getQueryParams())
+            );
+            return new RedirectResponse($loginUrl);
+        } catch (InvalidRequestTokenException $e) {
+            if ($isAjaxCall) {
+                return new Response(statusCode: 401);
+            }
+            // When token was invalid, then redirect to login
+            $loginForm = $this->uriBuilder->buildUriFromRoute('login');
+            return new RedirectResponse($loginForm);
+        }
+    }
+}