URLSpecialsMiddleware
class URLSpecialsMiddleware extends PermissionAwareConfirmationMiddleware (View source)
Check the request for the URL special variables.
Performs authorisation, confirmation and actions for some of those.
WARNING: Bypasses only disable authorisation and confirmation, but not actions nor redirects
The rules are:
- flush GET parameter
- isDev GET parameter
- isTest GET parameter
- dev/build URL
Traits
Schedule flush operation for a following request
Implements switching user session into Test and Dev environment types
Methods
Initializes the middleware with the required rules
Extract the confirmation items from the request and return
Override the confirmation storage ID
Override the confirmation form url
Returns the list of permissions that are affected
Set the list of affected permissions
Returns flag whether we want to enforce authentication or not
Set whether we want to enforce authentication
Check whether the user has permissions to perform the target operation Otherwise we may want to skip the confirmation dialog.
Checks whether the request has GET flags to control environment type and amends the user session accordingly
Looks up for the special flags passed in the request and schedules the changes accordingly for the next request.
Details
__construct()
Initializes the middleware with the required rules
$this
setDeclineUrl(string $url)
Override the default decline url
bool
canBypass(HTTPRequest $request)
Check whether the rules can be bypassed without user confirmation
Item[]
getConfirmationItems(HTTPRequest $request)
Extract the confirmation items from the request and return
HTTPResponse
process(HTTPRequest $request, callable $delegate)
Generate response for the given request
$this
setConfirmationStorageId(string $id)
Override the confirmation storage ID
$this
setConfirmationFormUrl(string $url)
Override the confirmation form url
$this
setBypasses(Bypass[] $bypasses)
Set the list of bypasses for the confirmation
string[]
getAffectedPermissions()
Returns the list of permissions that are affected
$this
setAffectedPermissions(string[] $permissions)
Set the list of affected permissions
If the user doesn't have at least one of these, we assume they don't have access to the protected action, so we don't ask for a confirmation
bool
getEnforceAuthentication()
Returns flag whether we want to enforce authentication or not
$this
setEnforceAuthentication(bool $enforce)
Set whether we want to enforce authentication
We either enforce authentication (redirect to a login form) or silently assume the user does not have permissions and so we don't have to ask for a confirmation
bool
hasAccess(HTTPRequest $request)
Check whether the user has permissions to perform the target operation Otherwise we may want to skip the confirmation dialog.
WARNING! The user has to be authenticated beforehand
bool
scheduleFlush(HTTPRequest $request)
Schedules the manifest flush operation for a following request
WARNING! Does not perform flush, but schedules it for another request
bool
setSessionEnvType(HTTPRequest $request)
Checks whether the request has GET flags to control environment type and amends the user session accordingly
null|HTTPResponse
buildImpactRedirect(HTTPRequest $request)
Looks up for the special flags passed in the request and schedules the changes accordingly for the next request.
Returns a redirect to the same page (with a random token) if there are changes introduced by the flags. Returns null if there is no impact introduced by the flags.