Your IP : 216.73.216.97
<?php
/**
* Copyright © Magento, Inc. All rights reserved.
* See COPYING.txt for license details.
*/
declare(strict_types=1);
namespace Magento\Customer\Controller\Plugin;
use Closure;
use Magento\Customer\Controller\AccountInterface;
use Magento\Customer\Model\Session;
use Magento\Framework\App\RequestInterface;
use Magento\Framework\App\ResponseInterface;
use Magento\Framework\Controller\ResultInterface;
/**
* Plugin verifies permissions using Action Name against injected (`fontend/di.xml`) rules
*/
class Account
{
/**
* @var Session
*/
private $session;
/**
* @var RequestInterface
*/
private $request;
/**
* @var array
*/
private $allowedActions = [];
/**
* @param RequestInterface $request
* @param Session $customerSession
* @param array $allowedActions List of actions that are allowed for not authorized users
*/
public function __construct(
RequestInterface $request,
Session $customerSession,
array $allowedActions = []
) {
$this->request = $request;
$this->session = $customerSession;
$this->allowedActions = $allowedActions;
}
/**
* Executes original method if allowed, otherwise - redirects to log in
*
* @param AccountInterface $controllerAction
* @param Closure $proceed
* @return ResultInterface|ResponseInterface|void
* @SuppressWarnings(PHPMD.UnusedFormalParameter)
*/
public function aroundExecute(AccountInterface $controllerAction, Closure $proceed)
{
/** @FIXME Move Authentication and redirect out of Session model */
if ($this->isActionAllowed() || $this->session->authenticate()) {
return $proceed();
}
}
/**
* Validates whether currently requested action is one of the allowed
*
* @return bool
*/
private function isActionAllowed(): bool
{
$action = strtolower($this->request->getActionName());
$pattern = '/^(' . implode('|', $this->allowedActions) . ')$/i';
return (bool)preg_match($pattern, $action);
}
}