84 lines
2.5 KiB
PHP
84 lines
2.5 KiB
PHP
<?php
|
|
|
|
namespace App\Controller\Api;
|
|
|
|
use App\BusProNet\ApiClient;
|
|
use App\BusProNet\Exception\ApiClientException;
|
|
use App\BusProNet\Model\Notification;
|
|
use App\BusProNet\Model\PersonalData;
|
|
use App\Entity\User;
|
|
use App\Security\Crypt;
|
|
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
|
|
use Symfony\Component\HttpFoundation\JsonResponse;
|
|
use Symfony\Component\HttpFoundation\Response;
|
|
use Symfony\Component\Routing\Attribute\Route;
|
|
use Symfony\Component\Security\Http\Attribute\IsGranted;
|
|
|
|
#[Route('/api')]
|
|
#[IsGranted('ROLE_OAUTH2_EMAIL')]
|
|
class UserinfoController extends AbstractController
|
|
{
|
|
public function __construct(private readonly ApiClient $apiClient, private readonly Crypt $crypt)
|
|
{
|
|
}
|
|
|
|
#[Route('/userinfo', name: 'api_userinfo', methods: ['GET'])]
|
|
public function index(): JsonResponse
|
|
{
|
|
// basic scopes applicable to all authenticated users
|
|
$scopes = ['email'];
|
|
|
|
// extend scopes depending on granted permissions
|
|
if ($this->isGranted('ROLE_OAUTH2_ID')) {
|
|
$scopes[] = 'id';
|
|
}
|
|
if ($this->isGranted('ROLE_OAUTH2_PROFILE')) {
|
|
$scopes[] = 'profile';
|
|
}
|
|
if ($this->isGranted('ROLE_OAUTH2_ROLES')) {
|
|
$scopes[] = 'roles';
|
|
}
|
|
|
|
/** @var User $user */
|
|
$user = $this->getUser();
|
|
$email = $user->getEmail();
|
|
$password = $this->crypt->decrypt($user->getPassword());
|
|
|
|
try {
|
|
$data = $this->apiClient->getPersonalData($email, $password);
|
|
|
|
if ($data instanceof Notification) {
|
|
return new JsonResponse(['message' => $data->message, 'code' => $data->code], Response::HTTP_BAD_REQUEST);
|
|
}
|
|
|
|
// Patch current user's roles
|
|
$data->roles = $user->getRoles();
|
|
|
|
// extract userdata for resulting claims
|
|
$userData = $this->getClaims($data, $scopes);
|
|
|
|
return $this->json($userData);
|
|
} catch (ApiClientException $e) {
|
|
return new JsonResponse(['message' => $e->getMessage()], Response::HTTP_BAD_REQUEST);
|
|
}
|
|
}
|
|
|
|
private function getClaims(PersonalData $data, array $scopes): array
|
|
{
|
|
// get all available claims
|
|
$allClaims = $data->getClaims();
|
|
$keys = array_keys($allClaims);
|
|
$claims = [];
|
|
|
|
// filter claims by provided scopes
|
|
foreach ($scopes as $scope) {
|
|
if (false === in_array($scope, $keys)) {
|
|
continue;
|
|
}
|
|
$claims[$scope] = $allClaims[$scope];
|
|
}
|
|
|
|
return $claims;
|
|
}
|
|
}
|