vendor/ibexa/core/src/bundle/Core/EventSubscriber/TrustedHeaderClientIpEventSubscriber.php line 35

Open in your IDE?
  1. <?php
  3. /**
  4. * @copyright Copyright (C) Ibexa AS. All rights reserved.
  5. * @license For full copyright and license information view LICENSE file distributed with this source code.
  6. */
  7. declare(strict_types=1);
  9. namespace Ibexa\Bundle\Core\EventSubscriber;
  11. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  12. use Symfony\Component\HttpFoundation\Request;
  13. use Symfony\Component\HttpKernel\Event\RequestEvent;
  14. use Symfony\Component\HttpKernel\KernelEvents;
  16. final class TrustedHeaderClientIpEventSubscriber implements EventSubscriberInterface
  17. {
  18. private const PLATFORM_SH_TRUSTED_HEADER_CLIENT_IP = 'X-Client-IP';
  20. private ?string $trustedHeaderName;
  22. public function __construct(
  23. ?string $trustedHeaderName
  24. ) {
  25. $this->trustedHeaderName = $trustedHeaderName;
  26. }
  28. public static function getSubscribedEvents(): array
  29. {
  30. return [
  31. KernelEvents::REQUEST => ['onKernelRequest', PHP_INT_MAX],
  32. ];
  33. }
  35. public function onKernelRequest(RequestEvent $event): void
  36. {
  37. $request = $event->getRequest();
  39. $trustedProxies = Request::getTrustedProxies();
  40. $trustedHeaderSet = Request::getTrustedHeaderSet();
  42. $trustedHeaderName = $this->trustedHeaderName;
  43. if (null === $trustedHeaderName && $this->isPlatformShProxy($request)) {
  44. $trustedHeaderName = self::PLATFORM_SH_TRUSTED_HEADER_CLIENT_IP;
  45. }
  47. if (null === $trustedHeaderName) {
  48. return;
  49. }
  51. $trustedClientIp = $request->headers->get($trustedHeaderName);
  53. if (null !== $trustedClientIp) {
  54. if ($trustedHeaderSet !== -1) {
  55. $trustedHeaderSet |= Request::HEADER_X_FORWARDED_FOR;
  56. }
  57. $request->headers->set('X_FORWARDED_FOR', $trustedClientIp);
  58. }
  60. Request::setTrustedProxies($trustedProxies, $trustedHeaderSet);
  61. }
  63. private function isPlatformShProxy(Request $request): bool
  64. {
  65. return null !== $request->server->get('PLATFORM_RELATIONSHIPS');
  66. }
  67. }