src/Security/Voters/Psd2ConsentVoter.php line 14

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace App\Security\Voters;
  7. use App\Entity\Client;
  8. use App\Entity\OA2User;
  9. use App\Entity\Psd2Consent;
  10. use App\Repository\ClientRepository;
  11. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  12. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  14. class Psd2ConsentVoter extends Voter
  15. {
  16.     public const PERMISSION_VIEW = 'view';
  17.     public const PERMISSION_APPROVE = 'approve';
  18.     public const PERMISSION_REJECT = 'reject';
  19.     private $clientRepository;
  21.     public function __construct(ClientRepository $clientRepository)
  22.     {
  23.         $this->clientRepository = $clientRepository;
  24.     }
  26.     protected function supports($attribute, $subject)
  27.     {
  28.         return !(!$subject instanceof Psd2Consent)
  30.          ;
  31.     }
  33.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  34.     {
  35.         /** @var Psd2Consent $psd2Consent */
  36.         $psd2Consent = $subject;
  37.         $consentClient = $psd2Consent->getAccessToken()->getUser()->getClientUser();
  38.         $currentClient = $this->getCurrentClient($token);
  39.         if (!$currentClient || !$consentClient) {
  40.             return false;
  41.         }
  42.         $user = $currentClient->getPerson()->getUser();
  43.         $consentUsername = $consentClient->getUsername();
  44.         $username = $user ? $user->getUsername() : '';
  46.         return $consentUsername === $username;
  47.     }
  49.     private function getCurrentClient(TokenInterface $token): ?Client
  50.     {
  51.         /** @var OA2User $oa2User */
  52.         $oa2User = $token->getUser();
  53.         if (!$oa2User instanceof OA2User || $oa2User->isBankUser()) {
  54.             return null; // Client user only
  55.         }
  57.         return $this->clientRepository->findOneByOa2User($oa2User);
  58.     }
  59. }