IBX-10170: Introduced AccessCheckController contract

src/bundle/Controller/Controller.php

@@ -12,8 +12,4 @@
 
 abstract class Controller extends AbstractController
 {
-    public function performAccessCheck(): void
-    {
-        $this->denyAccessUnlessGranted('IS_AUTHENTICATED_REMEMBERED');
-    }
 }

src/bundle/Controller/PasswordChangeController.php

@@ -10,6 +10,8 @@
 
 use Exception;
 use Ibexa\Contracts\Core\Repository\UserService;
+use Ibexa\Contracts\User\Controller\AccessCheckController;
+use Ibexa\Contracts\User\Controller\AuthenticatedRememberedCheckTrait;
 use Ibexa\Core\MVC\Symfony\SiteAccess;
 use Ibexa\User\ExceptionHandler\ActionResultHandler;
 use Ibexa\User\Form\Factory\FormFactory;
@@ -20,8 +22,10 @@
 use Symfony\Component\HttpFoundation\Request;
 use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
 
-class PasswordChangeController extends Controller
+class PasswordChangeController extends Controller implements AccessCheckController
 {
+    use AuthenticatedRememberedCheckTrait;
+
     private ActionResultHandler $actionResultHandler;
 
     private UserService $userService;

src/bundle/Controller/UserInvitationController.php

@@ -8,6 +8,8 @@
 
 namespace Ibexa\Bundle\User\Controller;
 
+use Ibexa\Contracts\User\Controller\AccessCheckController;
+use Ibexa\Contracts\User\Controller\AuthenticatedRememberedCheckTrait;
 use Ibexa\Contracts\User\Invitation\Exception\InvitationAlreadyExistsException;
 use Ibexa\Contracts\User\Invitation\Exception\UserAlreadyExistsException;
 use Ibexa\Contracts\User\Invitation\InvitationCreateStruct;
@@ -20,8 +22,10 @@
 use Symfony\Component\Form\FormFactoryInterface;
 use Symfony\Component\HttpFoundation\Request;
 
-final class UserInvitationController extends Controller
+final class UserInvitationController extends Controller implements AccessCheckController
 {
+    use AuthenticatedRememberedCheckTrait;
+
     private InvitationService $invitationService;
 
     private InvitationSender $mailSender;

src/bundle/Controller/UserSettingsController.php

@@ -9,6 +9,8 @@
 namespace Ibexa\Bundle\User\Controller;
 
 use Ibexa\Contracts\Core\Repository\PermissionResolver;
+use Ibexa\Contracts\User\Controller\AccessCheckController;
+use Ibexa\Contracts\User\Controller\AuthenticatedRememberedCheckTrait;
 use Ibexa\User\ExceptionHandler\ActionResultHandler;
 use Ibexa\User\Form\Data\UserSettingUpdateData;
 use Ibexa\User\Form\Factory\FormFactory;
@@ -24,8 +26,10 @@
 use Symfony\Component\HttpFoundation\Request;
 use Symfony\Component\HttpFoundation\Response;
 
-class UserSettingsController extends Controller
+class UserSettingsController extends Controller implements AccessCheckController
 {
+    use AuthenticatedRememberedCheckTrait;
+
     private FormFactory $formFactory;
 
     private SubmitHandler $submitHandler;

src/bundle/Resources/config/services/controllers.yaml

@@ -17,7 +17,6 @@ services:
     Ibexa\Bundle\User\Controller\Controller:
         calls:
             - [setContainer , ['@Psr\Container\ContainerInterface']]
-            - [performAccessCheck, []]
 
     Ibexa\Bundle\User\Controller\PasswordResetController:
         calls:

src/contracts/Controller/AccessCheckController.php

@@ -0,0 +1,14 @@
+<?php
+
+/**
+ * @copyright Copyright (C) Ibexa AS. All rights reserved.
+ * @license For full copyright and license information view LICENSE file distributed with this source code.
+ */
+declare(strict_types=1);
+
+namespace Ibexa\Contracts\User\Controller;
+
+interface AccessCheckController
+{
+    public function performAccessCheck(): void;
+}

src/contracts/Controller/AuthenticatedRememberedCheckTrait.php

@@ -0,0 +1,17 @@
+<?php
+
+/**
+ * @copyright Copyright (C) Ibexa AS. All rights reserved.
+ * @license For full copyright and license information view LICENSE file distributed with this source code.
+ */
+declare(strict_types=1);
+
+namespace Ibexa\Contracts\User\Controller;
+
+trait AuthenticatedRememberedCheckTrait
+{
+    public function performAccessCheck(): void
+    {
+        $this->denyAccessUnlessGranted('IS_AUTHENTICATED_REMEMBERED');
+    }
+}

src/lib/EventListener/PerformAccessCheckSubscriber.php

@@ -0,0 +1,31 @@
+<?php
+
+/**
+ * @copyright Copyright (C) Ibexa AS. All rights reserved.
+ * @license For full copyright and license information view LICENSE file distributed with this source code.
+ */
+declare(strict_types=1);
+
+namespace Ibexa\User\EventListener;
+
+use Ibexa\Contracts\User\Controller\AccessCheckController;
+use Symfony\Component\EventDispatcher\EventSubscriberInterface;
+use Symfony\Component\HttpKernel\Event\ControllerArgumentsEvent;
+
+final class PerformAccessCheckSubscriber implements EventSubscriberInterface
+{
+    public function onControllerArgumentsEvent(ControllerArgumentsEvent $event): void
+    {
+        $controller = $event->getController();
+        if (is_array($controller) && $controller[0] instanceof AccessCheckController) {
+            $controller[0]->performAccessCheck();
+        }
+    }
+
+    public static function getSubscribedEvents(): array
+    {
+        return [
+            ControllerArgumentsEvent::class => 'onControllerArgumentsEvent',
+        ];
+    }
+}