77 lines
2.3 KiB
PHP
77 lines
2.3 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Middleware;
|
|
|
|
use App\Container\SettingsAwareTrait;
|
|
use App\Environment;
|
|
use App\Http\ServerRequest;
|
|
use App\Session\Csrf;
|
|
use App\Session\Flash;
|
|
use Mezzio\Session\Cache\CacheSessionPersistence;
|
|
use Mezzio\Session\LazySession;
|
|
use Mezzio\Session\SessionPersistenceInterface;
|
|
use Psr\Cache\CacheItemPoolInterface;
|
|
use Psr\Http\Message\ResponseInterface;
|
|
use Psr\Http\Server\RequestHandlerInterface;
|
|
use Symfony\Component\Cache\Adapter\ArrayAdapter;
|
|
use Symfony\Component\Cache\Adapter\ProxyAdapter;
|
|
|
|
/**
|
|
* Inject the session object into the request.
|
|
*/
|
|
final class InjectSession extends AbstractMiddleware
|
|
{
|
|
use SettingsAwareTrait;
|
|
|
|
private CacheItemPoolInterface $cachePool;
|
|
|
|
public function __construct(
|
|
CacheItemPoolInterface $psrCache,
|
|
private readonly Environment $environment
|
|
) {
|
|
if ($environment->isCli()) {
|
|
$psrCache = new ArrayAdapter();
|
|
}
|
|
|
|
$this->cachePool = new ProxyAdapter($psrCache, 'session.');
|
|
}
|
|
|
|
public function getSessionPersistence(ServerRequest $request): SessionPersistenceInterface
|
|
{
|
|
$alwaysUseSsl = $this->readSettings()->getAlwaysUseSsl();
|
|
$isHttpsUrl = ('https' === $request->getUri()->getScheme());
|
|
|
|
return new CacheSessionPersistence(
|
|
cache: $this->cachePool,
|
|
cookieName: 'app_session',
|
|
cookiePath: '/',
|
|
cacheLimiter: 'nocache',
|
|
cacheExpire: 43200,
|
|
lastModified: time(),
|
|
persistent: true,
|
|
cookieSecure: $alwaysUseSsl && $isHttpsUrl,
|
|
cookieHttpOnly: true,
|
|
autoRegenerate: false
|
|
);
|
|
}
|
|
|
|
public function __invoke(ServerRequest $request, RequestHandlerInterface $handler): ResponseInterface
|
|
{
|
|
$sessionPersistence = $this->getSessionPersistence($request);
|
|
$session = new LazySession($sessionPersistence, $request);
|
|
|
|
$csrf = new Csrf($session, $this->environment);
|
|
$flash = new Flash($session);
|
|
|
|
$request = $request->withAttribute(ServerRequest::ATTR_SESSION, $session)
|
|
->withAttribute(ServerRequest::ATTR_SESSION_CSRF, $csrf)
|
|
->withAttribute(ServerRequest::ATTR_SESSION_FLASH, $flash);
|
|
|
|
$response = $handler->handle($request);
|
|
|
|
return $sessionPersistence->persistSession($session, $response);
|
|
}
|
|
}
|