9.5/backend_2_classes_2_middleware_2_backend_user_authenticator_8php_source.html

<?php

declare(strict_types = 1);

namespace ‪TYPO3\CMS\Backend\Middleware;


/*

 * This file is part of the TYPO3 CMS project.

 *

 * It is free software; you can redistribute it and/or modify it under

 * the terms of the GNU General Public License, either version 2

 * of the License, or any later version.

 *

 * For the full copyright and license information, please read the

 * LICENSE.txt file that was distributed with this source code.

 *

 * The TYPO3 project - inspiring people to share!

 */


use Psr\Http\Message\ResponseInterface;

use Psr\Http\Message\ServerRequestInterface;

use Psr\Http\Server\MiddlewareInterface;

use Psr\Http\Server\RequestHandlerInterface;

use ‪TYPO3\CMS\Core\Authentication\BackendUserAuthentication;

use ‪TYPO3\CMS\Core\Context\Context;

use ‪TYPO3\CMS\Core\Context\UserAspect;

use ‪TYPO3\CMS\Core\Context\WorkspaceAspect;

use ‪TYPO3\CMS\Core\Core\Bootstrap;

use ‪TYPO3\CMS\Core\Utility\GeneralUtility;


class ‪BackendUserAuthenticator implements MiddlewareInterface

{

    protected ‪$publicRoutes = [

        '/login',

        '/login/frame',

        '/ajax/login',

        '/ajax/logout',

        '/ajax/login/preflight',

        '/ajax/login/refresh',

        '/ajax/login/timedout',

        '/ajax/rsa/publickey',

        '/ajax/core/requirejs',

    ];


    public function ‪process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface

    {

        $pathToRoute = $request->getAttribute('routePath', '/login');


        ‪Bootstrap::initializeBackendUser();

        // @todo: once this logic is in this method, the redirect URL should be handled as response here

        ‪Bootstrap::initializeBackendAuthentication($this->‪isLoggedInBackendUserRequired($pathToRoute));

        ‪Bootstrap::initializeLanguageObject();

        // Register the backend user as aspect

        $this->‪setBackendUserAspect(GeneralUtility::makeInstance(Context::class), ‪$GLOBALS['BE_USER']);


        return $handler->handle($request);

    }


    protected function ‪isLoggedInBackendUserRequired(string $routePath): bool

    {

        return in_array($routePath, $this->publicRoutes, true);

    }


    protected function ‪setBackendUserAspect(‪Context $context, ‪BackendUserAuthentication $user)

    {

        $context->‪setAspect('backend.user', GeneralUtility::makeInstance(UserAspect::class, $user));

        $context->‪setAspect('workspace', GeneralUtility::makeInstance(WorkspaceAspect::class, $user->workspace));

    }

}