src/IlaveU/FrontBundle/EventSubscriber/ApiPlatformKernelListener.php line 29

  1. <?php
  2. namespace App\IlaveU\FrontBundle\EventSubscriber;
  4. use App\Entity\Settings;
  5. use Doctrine\Persistence\ManagerRegistry;
  6. use Exception;
  7. use Symfony\Component\HttpFoundation\Response;
  8. use Symfony\Component\HttpKernel\Event\ExceptionEvent;
  9. use Symfony\Component\HttpKernel\Exception\HttpExceptionInterface;
  11. use Symfony\Component\EventDispatcher\Attribute\AsEventListener;
  12. use Symfony\Component\HttpFoundation\JsonResponse;
  13. use Symfony\Component\HttpFoundation\RedirectResponse;
  14. use Symfony\Component\HttpKernel\Event\RequestEvent;
  15. use Symfony\Component\Security\Core\Security;
  17. #[AsEventListener(event: RequestEvent::class, method: 'onKernelRequest')]
  19. class ApiPlatformKernelListener
  20. {
  23.     public function __construct(
  24.         private readonly ManagerRegistry $doctrine,private readonly Security $security
  25.         ){
  27.     }
  29.     public function onKernelRequest(RequestEvent $event)
  30.     {
  31.         
  32.         $request = $event->getRequest();
  33.         // Check if the request is targeting the API platform
  36.         if (strpos($request->getPathInfo(), '/'.$request->getLocale().'/api') !== 0) {
  37.             
  38.             return;
  39.         }
  41.         
  43.         
  45.          $settings = $this->doctrine->getRepository(Settings::class)->findOneBy(["code"=>"main"]);
  48.         
  50.          if($settings->getAssetFolderName() == "Taxiciel"){
  52.             
  55.              $allowedURIs = [
  56.                 '/'.$request->getLocale().'/api/booking/ajax-preview-mission',
  57.                  '/'.$request->getLocale().'/api/missions-by-invoice',
  58.                  '/'.$request->getLocale().'/api_login_check',
  59.                  '/'.$request->getLocale().'/api/customers',
  60.                  '/'.$request->getLocale().'/api/city_regions',
  61.                  '/'.$request->getLocale().'/api/shipping_vehicle_types',
  62.              ];
  63.             
  64.             
  65.              foreach($allowedURIs as $singleURI){
  66.                  if (strpos($request->getPathInfo(), $singleURI) === 0) {
  67.                       return;
  68.                  }
  69.              }
  73.               //User is not authenticated or doesn't have admin role
  74.              $response = new JsonResponse(["message"=>'No Api Available'], Response::HTTP_FORBIDDEN);
  75.              $event->setResponse($response);
  77.             
  79.             
  80.         }
  81.         
  83.       
  84.     }
  87. }