custom/plugins/shopware6-sapoci/src/Subscriber/ResponseHeaderSubscriber.php line 35

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace Orcamultimedia\OciPunchout\Subscriber;
  7. use Shopware\Core\Framework\Event\BeforeSendResponseEvent;
  8. use Shopware\Core\PlatformRequest;
  9. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  10. use Symfony\Component\HttpFoundation\Cookie;
  11. use Symfony\Component\HttpFoundation\Response;
  13. class ResponseHeaderSubscriber implements EventSubscriberInterface
  14. {
  16.     /**
  17.      * @var array
  18.      */
  19.     private array $frameancestors;
  21.     public function __construct(
  22.         array $frameancestors
  23.     )
  24.     {
  25.         $this->frameancestors = $frameancestors;
  26.     }
  28.     public static function getSubscribedEvents(): array
  29.     {
  30.         return [
  31.             BeforeSendResponseEvent::class => [['beforeSendOciResponse']]
  32.         ];
  33.     }
  35.     public function beforeSendOciResponse(BeforeSendResponseEvent $event): void
  36.     {
  37.         $response = $event->getResponse();
  38.         $request = $event->getRequest();
  39.         $requestCookie = $request->cookies->get('sapoci');
  40.         $responseCookies = $response->headers->getCookies();
  41.         $responseCookie = array_filter($responseCookies, fn(Cookie $cookie) => $cookie->getName() === 'sapoci');
  42.         $isPunchout = false;
  44.         if (
  45.             $response->getStatusCode() !== Response::HTTP_OK
  46.             && $response->getStatusCode() !== Response::HTTP_NOT_FOUND
  47.             && $response->getStatusCode() !== Response::HTTP_FOUND
  48.         ) {
  49.             return;
  50.         }
  52.         if ($request->hasSession()) {
  53.             $session = $request->getSession();
  54.         } elseif ($requestCookie == 'is-punchout') {
  55.             $isPunchout = true;
  56.         } elseif ($responseCookie && $responseCookie[0]->getValue() == 'is-punchout') {
  57.             $isPunchout = true;
  58.         } else {
  59.             return;
  60.         }
  62.         if (!$isPunchout && (isset($session) && !$session->get('oci'))) {
  63.             return;
  64.         }
  66.         if ($response->headers->has(PlatformRequest::HEADER_FRAME_OPTIONS)) {
  67.             $response->headers->remove(PlatformRequest::HEADER_FRAME_OPTIONS);
  68.         }
  70.         $response->headers->set(
  71.             'Content-Security-Policy',
  72.             sprintf("frame-ancestors %s", implode(' ', $this->frameancestors)),
  73.             false
  74.         );
  76.         foreach ($response->headers->getCookies() as $cookie) {
  77.             $response->headers->setCookie($cookie->withSameSite(Cookie::SAMESITE_NONE)->withSecure());
  78.         }
  80.         $event->setResponse($response);
  81.     }
  82. }