93 lines
3.1 KiB
PHP
93 lines
3.1 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
/*
|
|
* This file is part of the TYPO3 CMS project.
|
|
*
|
|
* It is free software; you can redistribute it and/or modify it under
|
|
* the terms of the GNU General Public License, either version 2
|
|
* of the License, or any later version.
|
|
*
|
|
* For the full copyright and license information, please read the
|
|
* LICENSE.txt file that was distributed with this source code.
|
|
*
|
|
* The TYPO3 project - inspiring people to share!
|
|
*/
|
|
|
|
namespace TYPO3\CMS\Form\Slot;
|
|
|
|
use Psr\Http\Message\ServerRequestInterface;
|
|
use TYPO3\CMS\Core\Attribute\AsEventListener;
|
|
use TYPO3\CMS\Core\Core\Environment;
|
|
use TYPO3\CMS\Core\Crypto\HashService;
|
|
use TYPO3\CMS\Core\Resource\Event\GeneratePublicUrlForResourceEvent;
|
|
use TYPO3\CMS\Core\Resource\File;
|
|
use TYPO3\CMS\Core\Resource\FileInterface;
|
|
use TYPO3\CMS\Core\Resource\ProcessedFile;
|
|
use TYPO3\CMS\Core\Resource\ResourceInterface;
|
|
use TYPO3\CMS\Core\SingletonInterface;
|
|
use TYPO3\CMS\Core\Utility\GeneralUtility;
|
|
use TYPO3\CMS\Core\Utility\PathUtility;
|
|
|
|
/**
|
|
* A PSR-14 event listener for using FAL resources in public (frontend)
|
|
*
|
|
* @internal will be renamed at some point.
|
|
*/
|
|
class ResourcePublicationSlot implements SingletonInterface
|
|
{
|
|
/**
|
|
* @var list<string>
|
|
*/
|
|
protected $fileIdentifiers = [];
|
|
|
|
public function __construct(private readonly HashService $hashService) {}
|
|
|
|
#[AsEventListener('form-framework/resource-getPublicUrl')]
|
|
public function getPublicUrl(GeneratePublicUrlForResourceEvent $event): void
|
|
{
|
|
$resource = $event->getResource();
|
|
if (!$resource instanceof FileInterface
|
|
|| !$this->has($resource)
|
|
|| $event->getStorage()->getDriverType() !== 'Local'
|
|
) {
|
|
return;
|
|
}
|
|
$event->setPublicUrl($this->getStreamUrl($event->getResource()));
|
|
}
|
|
|
|
public function add(FileInterface $resource): void
|
|
{
|
|
if ($this->has($resource)) {
|
|
return;
|
|
}
|
|
$this->fileIdentifiers[] = $resource->getIdentifier();
|
|
}
|
|
|
|
public function has(FileInterface $resource): bool
|
|
{
|
|
return in_array($resource->getIdentifier(), $this->fileIdentifiers, true);
|
|
}
|
|
|
|
protected function getStreamUrl(ResourceInterface $resource): string
|
|
{
|
|
$queryParameterArray = ['eID' => 'dumpFile', 't' => ''];
|
|
if ($resource instanceof File) {
|
|
$queryParameterArray['f'] = $resource->getUid();
|
|
$queryParameterArray['t'] = 'f';
|
|
} elseif ($resource instanceof ProcessedFile) {
|
|
$queryParameterArray['p'] = $resource->getUid();
|
|
$queryParameterArray['t'] = 'p';
|
|
}
|
|
|
|
$queryParameterArray['token'] = $this->hashService->hmac(implode('|', $queryParameterArray), 'resourceStorageDumpFile');
|
|
$publicUrl = '';
|
|
if (($GLOBALS['TYPO3_REQUEST'] ?? null) instanceof ServerRequestInterface) {
|
|
$publicUrl = GeneralUtility::locationHeaderUrl(PathUtility::getAbsoluteWebPath(Environment::getPublicPath() . '/index.php'), $GLOBALS['TYPO3_REQUEST']);
|
|
}
|
|
$publicUrl .= '?' . http_build_query($queryParameterArray, '', '&', PHP_QUERY_RFC3986);
|
|
return $publicUrl;
|
|
}
|
|
}
|