vendor/symfony/security-core/Authorization/Voter/AuthenticatedVoter.php line 26

Open in your IDE?
  1. <?php
  3. /*
  4.  * This file is part of the Symfony package.
  5.  *
  6.  * (c) Fabien Potencier <fabien@symfony.com>
  7.  *
  8.  * For the full copyright and license information, please view the LICENSE
  9.  * file that was distributed with this source code.
  10.  */
  12. namespace Symfony\Component\Security\Core\Authorization\Voter;
  14. use Symfony\Component\Security\Core\Authentication\AuthenticationTrustResolverInterface;
  15. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  17. /**
  18.  * AuthenticatedVoter votes if an attribute like IS_AUTHENTICATED_FULLY,
  19.  * IS_AUTHENTICATED_REMEMBERED, or IS_AUTHENTICATED_ANONYMOUSLY is present.
  20.  *
  21.  * This list is most restrictive to least restrictive checking.
  22.  *
  23.  * @author Fabien Potencier <fabien@symfony.com>
  24.  * @author Johannes M. Schmitt <schmittjoh@gmail.com>
  25.  */
  26. class AuthenticatedVoter implements VoterInterface
  27. {
  28.     public const IS_AUTHENTICATED_FULLY = 'IS_AUTHENTICATED_FULLY';
  29.     public const IS_AUTHENTICATED_REMEMBERED = 'IS_AUTHENTICATED_REMEMBERED';
  30.     public const IS_AUTHENTICATED_ANONYMOUSLY = 'IS_AUTHENTICATED_ANONYMOUSLY';
  32.     private $authenticationTrustResolver;
  34.     public function __construct(AuthenticationTrustResolverInterface $authenticationTrustResolver)
  35.     {
  36.         $this->authenticationTrustResolver = $authenticationTrustResolver;
  37.     }
  39.     /**
  40.      * {@inheritdoc}
  41.      */
  42.     public function vote(TokenInterface $token, $subject, array $attributes)
  43.     {
  44.         $result = VoterInterface::ACCESS_ABSTAIN;
  45.         foreach ($attributes as $attribute) {
  46.             if (null === $attribute || (self::IS_AUTHENTICATED_FULLY !== $attribute
  47.                     && self::IS_AUTHENTICATED_REMEMBERED !== $attribute
  48.                     && self::IS_AUTHENTICATED_ANONYMOUSLY !== $attribute)) {
  49.                 continue;
  50.             }
  52.             $result = VoterInterface::ACCESS_DENIED;
  54.             if (self::IS_AUTHENTICATED_FULLY === $attribute
  55.                 && $this->authenticationTrustResolver->isFullFledged($token)) {
  56.                 return VoterInterface::ACCESS_GRANTED;
  57.             }
  59.             if (self::IS_AUTHENTICATED_REMEMBERED === $attribute
  60.                 && ($this->authenticationTrustResolver->isRememberMe($token)
  61.                     || $this->authenticationTrustResolver->isFullFledged($token))) {
  62.                 return VoterInterface::ACCESS_GRANTED;
  63.             }
  65.             if (self::IS_AUTHENTICATED_ANONYMOUSLY === $attribute
  66.                 && ($this->authenticationTrustResolver->isAnonymous($token)
  67.                     || $this->authenticationTrustResolver->isRememberMe($token)
  68.                     || $this->authenticationTrustResolver->isFullFledged($token))) {
  69.                 return VoterInterface::ACCESS_GRANTED;
  70.             }
  71.         }
  73.         return $result;
  74.     }
  75. }