Files
yii2-usuario/src/User/Service/SwitchIdentityService.php
2017-07-19 00:43:18 +02:00

70 lines
2.3 KiB
PHP

<?php
/*
* This file is part of the 2amigos/yii2-usuario project.
*
* (c) 2amigOS! <http://2amigos.us/>
*
* For the full copyright and license information, please view
* the LICENSE file that was distributed with this source code.
*/
namespace Da\User\Service;
use Da\User\Contracts\ServiceInterface;
use Da\User\Controller\AdminController;
use Da\User\Event\UserEvent;
use Da\User\Model\User;
use Da\User\Module;
use Da\User\Query\UserQuery;
use Da\User\Traits\ContainerAwareTrait;
use Yii;
use yii\web\ForbiddenHttpException;
use yii\web\IdentityInterface;
class SwitchIdentityService implements ServiceInterface
{
use ContainerAwareTrait;
protected $controller;
protected $switchIdentitySessionKey;
protected $userId;
protected $userQuery;
public function __construct(AdminController $controller, UserQuery $userQuery, $userId = null)
{
/** @var Module $module */
$module = $controller->module;
$this->controller = $controller;
$this->switchIdentitySessionKey = $module->switchIdentitySessionKey;
$this->userId = $userId;
$this->userQuery = $userQuery;
}
public function run()
{
$session = Yii::$app->session;
if (null === $this->userId) { // switch back identities
$user = $this->userQuery->whereId($session->get($this->switchIdentitySessionKey))->one();
$session->remove($this->switchIdentitySessionKey);
} else {
/** @var User $identity */
$identity = Yii::$app->user->identity;
if (!$identity->getIsAdmin()) {
// Only admins allowed on module. Developers can override the service and implement different
// approach. For example, by roles other than, and including, admin.
throw new ForbiddenHttpException();
}
$user = $this->userQuery->whereId($this->userId)->one();
$session->set($this->switchIdentitySessionKey, Yii::$app->user->id);
}
$event = $this->make(UserEvent::class, [$user]);
$this->controller->trigger(UserEvent::EVENT_BEFORE_SWITCH_IDENTITY, $event);
/** @var IdentityInterface $user */
Yii::$app->user->switchIdentity($user, $session->timeout);
$this->controller->trigger(UserEvent::EVENT_AFTER_SWITCH_IDENTITY, $event);
}
}