RequestHandler.php

Go to the documentation of this file.

<?php
namespace TYPO3\CMS\Backend\Http;

/*
 * This file is part of the TYPO3 CMS project.
 *
 * It is free software; you can redistribute it and/or modify it under
 * the terms of the GNU General Public License, either version 2
 * of the License, or any later version.
 *
 * For the full copyright and license information, please read the
 * LICENSE.txt file that was distributed with this source code.
 *
 * The TYPO3 project - inspiring people to share!
 */

use Psr\Http\Message\ResponseInterface;
use Psr\Http\Message\ServerRequestInterface;
use TYPO3\CMS\Backend\Routing\Exception\InvalidRequestTokenException;
use TYPO3\CMS\Core\Core\Bootstrap;
use TYPO3\CMS\Core\Http\RequestHandlerInterface;
use TYPO3\CMS\Core\Http\Response;
use TYPO3\CMS\Core\Utility\GeneralUtility;

class RequestHandler implements RequestHandlerInterface
{
    protected $bootstrap;

    public function __construct(Bootstrap $bootstrap)
    {
        $this->bootstrap = $bootstrap;
    }

    public function handleRequest(ServerRequestInterface $request)
    {
        // enable dispatching via Request/Response logic only for typo3/index.php
        // This fallback will be removed in TYPO3 CMS 8, as only index.php will be allowed
        $path = substr($request->getUri()->getPath(), strlen(GeneralUtility::getIndpEnv('TYPO3_SITE_PATH')));
        $routingEnabled = ($path === TYPO3_mainDir . 'index.php' || $path === TYPO3_mainDir);
        $proceedIfNoUserIsLoggedIn = false;

        if ($routingEnabled) {
            $pathToRoute = (string)$request->getQueryParams()['route'];
            // Allow the login page to be displayed if routing is not used and on index.php
            if (empty($pathToRoute)) {
                $pathToRoute = '/login';
            }
            $request = $request->withAttribute('routePath', $pathToRoute);

            // Evaluate the constant for skipping the BE user check for the bootstrap
            // should be handled differently in the future by checking the Bootstrap directly
            if ($pathToRoute === '/login') {
                $proceedIfNoUserIsLoggedIn = true;
            }
        }

        $this->boot($proceedIfNoUserIsLoggedIn);

        // Check if the router has the available route and dispatch.
        if ($routingEnabled) {
            try {
                return $this->dispatch($request);

                // When token was invalid redirect to login
            } catch (InvalidRequestTokenException $e) {
                $url = GeneralUtility::getIndpEnv('TYPO3_SITE_URL') . TYPO3_mainDir;
                \TYPO3\CMS\Core\Utility\HttpUtility::redirect($url);
            }
        }

        // No route found, so the system proceeds in called entrypoint as fallback.
        return null;
    }

    protected function boot($proceedIfNoUserIsLoggedIn)
    {
        $this->bootstrap
            ->checkLockedBackendAndRedirectOrDie()
            ->checkBackendIpOrDie()
            ->checkSslBackendAndRedirectIfNeeded()
            ->initializeBackendRouter()
            ->loadExtensionTables(true)
            ->initializeSpriteManager()
            ->initializeBackendUser()
            ->initializeBackendAuthentication($proceedIfNoUserIsLoggedIn)
            ->initializeLanguageObject()
            ->initializeBackendTemplate()
            ->endOutputBufferingAndCleanPreviousOutput()
            ->initializeOutputCompression()
            ->sendHttpHeaders();
    }

    public function canHandleRequest(ServerRequestInterface $request)
    {
        return TYPO3_REQUESTTYPE & TYPO3_REQUESTTYPE_BE && !(TYPO3_REQUESTTYPE & TYPO3_REQUESTTYPE_CLI);
    }

    public function getPriority()
    {
        return 50;
    }

    protected function dispatch($request)
    {
        $response = GeneralUtility::makeInstance(Response::class);
        $dispatcher = GeneralUtility::makeInstance(RouteDispatcher::class);
        return $dispatcher->dispatch($request, $response);
    }
}