107 lines
3.8 KiB
PHP
107 lines
3.8 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
/*
|
|
* This file is part of the TYPO3 CMS project.
|
|
*
|
|
* It is free software; you can redistribute it and/or modify it under
|
|
* the terms of the GNU General Public License, either version 2
|
|
* of the License, or any later version.
|
|
*
|
|
* For the full copyright and license information, please read the
|
|
* LICENSE.txt file that was distributed with this source code.
|
|
*
|
|
* The TYPO3 project - inspiring people to share!
|
|
*/
|
|
|
|
namespace TYPO3\CMS\Backend\Http;
|
|
|
|
use Psr\Http\Message\ResponseInterface;
|
|
use Psr\Http\Message\ServerRequestInterface;
|
|
use Psr\Http\Server\RequestHandlerInterface;
|
|
use TYPO3\CMS\Backend\Resource\PublicUrlPrefixer;
|
|
use TYPO3\CMS\Backend\Routing\Exception\InvalidRequestTokenException;
|
|
use TYPO3\CMS\Backend\Routing\Exception\MissingRequestTokenException;
|
|
use TYPO3\CMS\Backend\Routing\Route;
|
|
use TYPO3\CMS\Backend\Routing\RouteRedirect;
|
|
use TYPO3\CMS\Backend\Routing\UriBuilder;
|
|
use TYPO3\CMS\Core\EventDispatcher\ListenerProvider;
|
|
use TYPO3\CMS\Core\Http\RedirectResponse;
|
|
use TYPO3\CMS\Core\Http\Response;
|
|
use TYPO3\CMS\Core\Resource\Event\GeneratePublicUrlForResourceEvent;
|
|
|
|
/**
|
|
* General RequestHandler for the TYPO3 Backend. This is used for all Backend requests, including AJAX routes.
|
|
*
|
|
* If a get/post parameter "route" is set, the Backend Routing is called and searches for a
|
|
* matching route inside the Router. The corresponding controller / action is called then which returns the response.
|
|
*
|
|
* The following get/post parameters are evaluated here:
|
|
* - route
|
|
* - token
|
|
*/
|
|
class RequestHandler implements RequestHandlerInterface
|
|
{
|
|
protected RouteDispatcher $dispatcher;
|
|
|
|
protected UriBuilder $uriBuilder;
|
|
|
|
protected ListenerProvider $listenerProvider;
|
|
|
|
public function __construct(
|
|
RouteDispatcher $dispatcher,
|
|
UriBuilder $uriBuilder,
|
|
ListenerProvider $listenerProvider
|
|
) {
|
|
$this->dispatcher = $dispatcher;
|
|
$this->uriBuilder = $uriBuilder;
|
|
$this->listenerProvider = $listenerProvider;
|
|
}
|
|
|
|
/**
|
|
* Handles a backend request, after finishing running middlewares
|
|
* Dispatch the request to the appropriate controller through the
|
|
* Backend Dispatcher which resolves the routing
|
|
*/
|
|
public function handle(ServerRequestInterface $request): ResponseInterface
|
|
{
|
|
// Make sure all FAL resources have absolute URL paths
|
|
$this->listenerProvider->addListener(
|
|
GeneratePublicUrlForResourceEvent::class,
|
|
PublicUrlPrefixer::class,
|
|
'prefixWithSitePath'
|
|
);
|
|
|
|
/** @var Route $route */
|
|
$route = $request->getAttribute('route');
|
|
$isAjaxCall = (bool)($route->getOption('ajax') ?? false);
|
|
|
|
// b/w compat
|
|
$GLOBALS['TYPO3_REQUEST'] = $request;
|
|
|
|
try {
|
|
// Check if the router has the available route and dispatch.
|
|
return $this->dispatcher->dispatch($request);
|
|
} catch (MissingRequestTokenException $e) {
|
|
if ($isAjaxCall) {
|
|
return new Response(statusCode: 401);
|
|
}
|
|
// When token was missing, then redirect to login, but keep the current route as redirect after login
|
|
$loginUrl = $this->uriBuilder->buildUriWithRedirect(
|
|
'login',
|
|
[],
|
|
RouteRedirect::createFromRoute($request->getAttribute('route'), $request->getQueryParams())
|
|
);
|
|
return new RedirectResponse($loginUrl);
|
|
} catch (InvalidRequestTokenException $e) {
|
|
if ($isAjaxCall) {
|
|
return new Response(statusCode: 401);
|
|
}
|
|
// When token was invalid, then redirect to login
|
|
$loginForm = $this->uriBuilder->buildUriFromRoute('login');
|
|
return new RedirectResponse($loginForm);
|
|
}
|
|
}
|
|
}
|