vendor/symfony/security-bundle/DependencyInjection/Compiler/RegisterEntryPointPass.php line 53

  1. <?php
  3. /*
  4.  * This file is part of the Symfony package.
  5.  *
  6.  * (c) Fabien Potencier <fabien@symfony.com>
  7.  *
  8.  * For the full copyright and license information, please view the LICENSE
  9.  * file that was distributed with this source code.
  10.  */
  12. namespace Symfony\Bundle\SecurityBundle\DependencyInjection\Compiler;
  14. use Symfony\Component\Config\Definition\Exception\InvalidConfigurationException;
  15. use Symfony\Component\DependencyInjection\ChildDefinition;
  16. use Symfony\Component\DependencyInjection\Compiler\CompilerPassInterface;
  17. use Symfony\Component\DependencyInjection\ContainerBuilder;
  18. use Symfony\Component\DependencyInjection\Reference;
  19. use Symfony\Component\Security\Http\EntryPoint\AuthenticationEntryPointInterface;
  21. /**
  22.  * @author Wouter de Jong <wouter@wouterj.nl>
  23.  */
  24. class RegisterEntryPointPass implements CompilerPassInterface
  25. {
  26.     public function process(ContainerBuilder $container)
  27.     {
  28.         if (!$container->hasParameter('security.firewalls')) {
  29.             return;
  30.         }
  32.         $firewalls = $container->getParameter('security.firewalls');
  33.         foreach ($firewalls as $firewallName) {
  34.             if (!$container->hasDefinition('security.authenticator.manager.'.$firewallName) || !$container->hasParameter('security.'.$firewallName.'._indexed_authenticators')) {
  35.                 continue;
  36.             }
  38.             $entryPoints = [];
  39.             $indexedAuthenticators = $container->getParameter('security.'.$firewallName.'._indexed_authenticators');
  40.             // this is a compile-only parameter, removing it cleans up space and avoids unintended usage
  41.             $container->getParameterBag()->remove('security.'.$firewallName.'._indexed_authenticators');
  42.             foreach ($indexedAuthenticators as $key => $authenticatorId) {
  43.                 if (!$container->has($authenticatorId)) {
  44.                     continue;
  45.                 }
  47.                 // because this pass runs before ResolveChildDefinitionPass, child definitions didn't inherit the parent class yet
  48.                 $definition = $container->findDefinition($authenticatorId);
  49.                 while (!($authenticatorClass = $definition->getClass()) && $definition instanceof ChildDefinition) {
  50.                     $definition = $container->findDefinition($definition->getParent());
  51.                 }
  53.                 if (is_a($authenticatorClass, AuthenticationEntryPointInterface::class, true)) {
  54.                     $entryPoints[$key] = $authenticatorId;
  55.                 }
  56.             }
  58.             if (!$entryPoints) {
  59.                 continue;
  60.             }
  62.             $config = $container->getDefinition('security.firewall.map.config.'.$firewallName);
  63.             $configuredEntryPoint = $config->getArgument(7);
  65.             if (null !== $configuredEntryPoint) {
  66.                 // allow entry points to be configured by authenticator key (e.g. "http_basic")
  67.                 $entryPoint = $entryPoints[$configuredEntryPoint] ?? $configuredEntryPoint;
  68.             } elseif (1 === \count($entryPoints)) {
  69.                 $entryPoint = array_shift($entryPoints);
  70.             } else {
  71.                 $entryPointNames = [];
  72.                 foreach ($entryPoints as $key => $serviceId) {
  73.                     $entryPointNames[] = is_numeric($key) ? $serviceId : $key;
  74.                 }
  76.                 throw new InvalidConfigurationException(sprintf('Because you have multiple authenticators in firewall "%s", you need to set the "entry_point" key to one of your authenticators ("%s") or a service ID implementing "%s". The "entry_point" determines what should happen (e.g. redirect to "/login") when an anonymous user tries to access a protected page.', $firewallName, implode('", "', $entryPointNames), AuthenticationEntryPointInterface::class));
  77.             }
  79.             $config->replaceArgument(7, $entryPoint);
  80.             $container->getDefinition('security.exception_listener.'.$firewallName)->replaceArgument(4, new Reference($entryPoint));
  81.         }
  82.     }
  83. }