src/EventSubscriber/ChatMessage/ChatMessagePostValidateSubscriber.php line 56

Open in your IDE?
  1. <?php
  2. /**
  3.  * Created by PhpStorm.
  4.  * User: SUSAN MEDINA
  5.  * Date: 21/05/2019
  6.  * Time: 02:43 PM
  7.  */
  9. namespace App\EventSubscriber\ChatMessage;
  11. use App\Entity\App\MediaObject;
  12. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  13. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  14. use Symfony\Component\HttpKernel\Event\ViewEvent;
  15. use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
  16. use ApiPlatform\Core\EventListener\EventPriorities;
  17. use Symfony\Contracts\Translation\TranslatorInterface;
  18. use Symfony\Component\HttpFoundation\Request;
  19. use Symfony\Component\HttpKernel\KernelEvents;
  20. use App\Exception\InvalidArgumentException;
  21. use App\Exception\NotFoundException;
  22. use App\Exception\AccessDeniedException;
  23. use App\Services\ChatService;
  24. use App\Services\UtilsService;
  25. use App\Entity\Chat\ChatMessage;
  26. use App\Entity\App\User;
  28. class ChatMessagePostValidateSubscriber implements EventSubscriberInterface
  29. {
  30.     private $tokenStorage;
  31.     private $authorizationChecker;
  32.     private $chatService;
  33.     private $utilsService;
  34.     private $translator;
  36.     public function __construct(
  37.         TokenStorageInterface $tokenStorage,
  38.         AuthorizationCheckerInterface $checker,
  39.         ChatService $chatService,
  40.         UtilsService $utilsService,
  41.         TranslatorInterface $translator
  42.     ){
  43.         $this->tokenStorage = $tokenStorage;
  44.         $this->authorizationChecker = $checker;
  45.         $this->chatService = $chatService;
  46.         $this->utilsService = $utilsService;
  47.         $this->translator = $translator;
  48.     }
  50.     /**
  51.      * @param ViewEvent $event
  52.      * @throws AccessDeniedException
  53.      * @throws InvalidArgumentException
  54.      * @throws NotFoundException
  55.      */
  56.     public function onKernelView(ViewEvent $event)
  57.     {
  58.         if ($this->utilsService->isAPublicRequest($event)) {
  59.             return;
  60.         }
  62.         $chatMessage = $event->getControllerResult();
  63.         $request = $event->getRequest();
  64.         $method = $request->getMethod();
  65.         $userCurrent = $this->tokenStorage->getToken()->getUser();
  67.         if (!($chatMessage instanceof ChatMessage) || (Request::METHOD_POST !== $method)
  68.         ) {
  69.             return;
  70.         }
  72.         if (!($userCurrent instanceof User)) {
  73.             throw new NotFoundException($this->translator->trans('User current not found'));
  74.         }
  76.         $content = $request->getContent();
  77.         $params = json_decode($content, true);
  79.         if (isset($params['mediaObjects']) && !empty($params['mediaObjects']) && count($params['mediaObjects']) > 0) {
  80.             foreach ($chatMessage->getMediaObjects() as $mediaObject) {
  81.                 if ($mediaObject->getType() !== MediaObject::TYPE_MESSAGE) {
  82.                     throw new InvalidArgumentException(
  83.                         $this->translator->trans(
  84.                             'mediaObject.validate.type_not_allowed',
  85.                             [
  86.                                 '%mediaId%' => $mediaObject->getId(),
  87.                                 '%mediaType%' => $mediaObject->getType(),
  88.                                 '%mediaTypeAvailable%' => MediaObject::TYPE_MESSAGE
  89.                             ]
  90.                         )
  91.                     );
  92.                 }
  93.             }
  94.             $chatMessage->setType('mediaObjects');
  95.         } else if(!isset($params['body']) || empty(trim($params['body']))) {
  96.             throw new InvalidArgumentException('body: ' . $this->translator->trans('This value should not be blank'));
  97.         }
  99.         if ($this->authorizationChecker->isGranted('ROLE_SUPERADMIN')) {
  100.             return;
  101.         }
  103.         $authorization = false;
  104.         $userChat = $this->chatService->getUsersOfChat($chatMessage->getChat());
  105.         $search = array_search($userCurrent->getId(), array_column($userChat, 'id'));
  106.         if ($search !== false) {
  107.             $authorization = true;
  108.         }
  110.         if (!$authorization) {
  111.             throw new AccessDeniedException(
  112.                 $this->translator->trans('You have not permission for write on this chat')
  113.             );
  114.         }
  115.     }
  117.     public static function getSubscribedEvents()
  118.     {
  119.         return [
  120.             KernelEvents::VIEW => ['onKernelView', EventPriorities::POST_VALIDATE]
  121.         ];
  122.     }
  123. }