TYPO3 v15 dev-main snapshot ()

2026-08-10 22:31:15 +02:00
commit 6830982e7d
295 changed files with 31995 additions and 0 deletions
@@ -0,0 +1,78 @@
+<?php
+
+declare(strict_types=1);
+
+/*
+ * This file is part of the TYPO3 CMS project.
+ *
+ * It is free software; you can redistribute it and/or modify it under
+ * the terms of the GNU General Public License, either version 2
+ * of the License, or any later version.
+ *
+ * For the full copyright and license information, please read the
+ * LICENSE.txt file that was distributed with this source code.
+ *
+ * The TYPO3 project - inspiring people to share!
+ */
+
+namespace TYPO3\CMS\Extbase\DependencyInjection;
+
+use Symfony\Component\DependencyInjection\Compiler\CompilerPassInterface;
+use Symfony\Component\DependencyInjection\ContainerBuilder;
+use TYPO3\CMS\Extbase\Attribute\Authorize;
+use TYPO3\CMS\Extbase\Mvc\Controller\AuthorizeRegistry;
+
+/**
+ * Scans all extbase action controllers for #[Authorize] attributes
+ * and registers their configurations in the {@see AuthorizeRegistry}.
+ *
+ * @internal
+ */
+final readonly class AuthorizePass implements CompilerPassInterface
+{
+    public function __construct(private string $tagName) {}
+
+    public function process(ContainerBuilder $container): void
+    {
+        if (!$container->hasDefinition(AuthorizeRegistry::class)) {
+            return;
+        }
+
+        $registryDefinition = $container->findDefinition(AuthorizeRegistry::class);
+
+        foreach ($container->findTaggedServiceIds($this->tagName) as $serviceName => $tags) {
+            $definition = $container->findDefinition($serviceName);
+            if ($definition->isAbstract()) {
+                continue;
+            }
+
+            $className = $definition->getClass() ?? $serviceName;
+            $reflectionClass = $container->getReflectionClass($className);
+            if ($reflectionClass === null) {
+                continue;
+            }
+
+            foreach ($reflectionClass->getMethods(\ReflectionMethod::IS_PUBLIC) as $method) {
+                if (!str_ends_with($method->getName(), 'Action')) {
+                    continue;
+                }
+
+                $attributes = $method->getAttributes(Authorize::class);
+                if ($attributes === []) {
+                    continue;
+                }
+
+                foreach ($attributes as $attribute) {
+                    $authorize = $attribute->newInstance();
+                    $registryDefinition->addMethodCall('add', [
+                        $className,
+                        $method->getName(),
+                        $authorize->callback,
+                        $authorize->requireLogin,
+                        $authorize->requireGroups,
+                    ]);
+                }
+            }
+        }
+    }
+}