45 lines
1.6 KiB
PHP
45 lines
1.6 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Controller\Groups\Offer;
|
|
|
|
use App\Repository\Groups\AccommodationBookingRepository;
|
|
use App\Service\AccommodationBookingLinkSigner;
|
|
use Symfony\Component\HttpFoundation\RedirectResponse;
|
|
use Symfony\Component\HttpFoundation\Request;
|
|
use Symfony\Component\HttpFoundation\Response;
|
|
use Symfony\Component\Routing\Attribute\Route;
|
|
|
|
class IndexController extends AbstractController
|
|
{
|
|
public function __construct(
|
|
private readonly AccommodationBookingRepository $bookingRepository,
|
|
private readonly AccommodationBookingLinkSigner $linkSigner,
|
|
) {
|
|
}
|
|
|
|
/**
|
|
* Signed-link entry point: validates the `t`/`_hash` query params once,
|
|
* authorizes the session for this booking, and redirects to the plain
|
|
* (session-gated) offer page — nothing downstream needs the signature again.
|
|
*/
|
|
#[Route(path: '/groups/booking/offer/{uuid}', name: 'app_groups_offer', methods: ['GET'])]
|
|
public function index(string $uuid, Request $request): Response
|
|
{
|
|
$booking = $this->bookingRepository->findOneBy(['uuid' => $uuid]);
|
|
|
|
if (null === $booking || false === $this->linkSigner->isValidLinkRequest($request, $booking)) {
|
|
return $this->render('groups/offer/unavailable.html.twig');
|
|
}
|
|
|
|
if (!$this->isCustomerVisible($booking)) {
|
|
return $this->render('groups/offer/unavailable.html.twig');
|
|
}
|
|
|
|
$this->linkSigner->authorizeSession($request, $booking);
|
|
|
|
return new RedirectResponse($this->generateUrl('app_groups_offer_view', ['uuid' => $uuid]));
|
|
}
|
|
}
|