securitytoken/Module.php at master · dragonjsonserver/securitytoken · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
<?php
/**
 * @link http://dragonjsonserver.de/
 * @copyright Copyright (c) 2012-2014 DragonProjects (http://dragonprojects.de/)
 * @license http://license.dragonprojects.de/dragonjsonserver.txt New BSD License
 * @author Christoph Herrmann <[email protected]>
 * @package DragonJsonServerSecuritytoken
 */

namespace DragonJsonServerSecuritytoken;

/**
 * Klasse zur Initialisierung des Moduls
 */
class Module
{
	use \DragonJsonServer\ServiceManagerTrait;

    /**
     * Gibt die Konfiguration des Moduls zurück
     * @return array
     */
    public function getConfig()
    {
        return require __DIR__ . '/config/module.config.php';
    }

    /**
     * Gibt die Autoloaderkonfiguration des Moduls zurück
     * @return array
     */
    public function getAutoloaderConfig()
    {
        return [
            'Zend\Loader\StandardAutoloader' => [
                'namespaces' => [
                    __NAMESPACE__ => __DIR__ . '/src/' . __NAMESPACE__,
                ],
            ],
        ];
    }

    /**
     * Wird bei der Initialisierung des Moduls aufgerufen
     * @param \Zend\ModuleManager\ModuleManager $moduleManager
     */
    public function init(\Zend\ModuleManager\ModuleManager $moduleManager)
    {
    	$sharedManager = $moduleManager->getEventManager()->getSharedManager();
    	$sharedManager->attach('DragonJsonServer\Service\Server', 'Request',
    		function (\DragonJsonServer\Event\Request $eventRequest) {
    			$request = $eventRequest->getRequest();
    			$method = $request->getMethod();
    			$securitytokens = $this->getServiceManager()->get('Config')['dragonjsonserversecuritytoken']['securitytokens'];
    			foreach ($securitytokens as $namespace => $securitytoken) {
    				if (substr($method, 0, strlen($namespace . '.')) != $namespace . '.') {
    					continue;
    				}
    				if ($request->getParam('securitytoken') != $securitytoken) {
    					throw new \DragonJsonServer\Exception('invalid securitytoken', ['namespace' => $namespace]);
    				}
    			}
    		}
    	);
    	$sharedManager->attach('DragonJsonServer\Service\Server', 'Servicemap',
    		function (\DragonJsonServer\Event\Servicemap $eventServicemap) {
	    		$securitytokens = $this->getServiceManager()->get('Config')['dragonjsonserversecuritytoken']['securitytokens'];
		        foreach ($eventServicemap->getServicemap()->getServices() as $method => $service) {
		        	foreach ($securitytokens as $namespace => $securitytoken) {
		    			$namespace .= '.';
		        		if (substr($method, 0, strlen($namespace)) != $namespace) {
		        			continue;
		        		}
			            $service->addParams([
			                [
			                    'type' => 'string',
			                    'name' => 'securitytoken',
			                    'optional' => false,
			                ],
			            ]);
		        	}
		        }
    		}
	    );
    }
}