src/Core/Framework/Api/Controller/AuthController.php line 49

  1. <?php declare(strict_types=1);
  3. namespace Shopware\Core\Framework\Api\Controller;
  5. use League\OAuth2\Server\AuthorizationServer;
  6. use Shopware\Core\Framework\Api\Controller\Exception\AuthThrottledException;
  7. use Shopware\Core\Framework\Log\Package;
  8. use Shopware\Core\Framework\RateLimiter\Exception\RateLimitExceededException;
  9. use Shopware\Core\Framework\RateLimiter\RateLimiter;
  10. use Symfony\Bridge\PsrHttpMessage\Factory\HttpFoundationFactory;
  11. use Symfony\Bridge\PsrHttpMessage\Factory\PsrHttpFactory;
  12. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  13. use Symfony\Component\HttpFoundation\Request;
  14. use Symfony\Component\HttpFoundation\Response;
  15. use Symfony\Component\Routing\Annotation\Route;
  17. #[Route(defaults: ['_routeScope' => ['api']])]
  18. #[Package('system-settings')]
  19. class AuthController extends AbstractController
  20. {
  21.     /**
  22.      * @internal
  23.      */
  24.     public function __construct(private readonly AuthorizationServer $authorizationServer, private readonly PsrHttpFactory $psrHttpFactory, private readonly RateLimiter $rateLimiter)
  25.     {
  26.     }
  28.     #[Route(path: '/api/oauth/authorize', name: 'api.oauth.authorize', defaults: ['auth_required' => false], methods: ['POST'])]
  29.     public function authorize(Request $request): void
  30.     {
  31.     }
  33.     #[Route(path: '/api/oauth/token', name: 'api.oauth.token', defaults: ['auth_required' => false], methods: ['POST'])]
  34.     public function token(Request $request): Response
  35.     {
  36.         $response = new Response();
  38.         try {
  39.             $cacheKey = $request->get('username') . '-' . $request->getClientIp();
  41.             $this->rateLimiter->ensureAccepted(RateLimiter::OAUTH, $cacheKey);
  42.         } catch (RateLimitExceededException $exception) {
  43.             throw new AuthThrottledException($exception->getWaitTime(), $exception);
  44.         }
  46.         $psr7Request = $this->psrHttpFactory->createRequest($request);
  47.         $psr7Response = $this->psrHttpFactory->createResponse($response);
  49.         $response = $this->authorizationServer->respondToAccessTokenRequest($psr7Request, $psr7Response);
  51.         $this->rateLimiter->reset(RateLimiter::OAUTH, $cacheKey);
  53.         return (new HttpFoundationFactory())->createResponse($response);
  54.     }
  55. }