vendor/ibexa/core/src/bundle/Core/EventSubscriber/TrustedHeaderClientIpEventSubscriber.php line 35

Open in your IDE?
  1. <?php
  3. /**
  4.  * @copyright Copyright (C) Ibexa AS. All rights reserved.
  5.  * @license For full copyright and license information view LICENSE file distributed with this source code.
  6.  */
  7. declare(strict_types=1);
  9. namespace Ibexa\Bundle\Core\EventSubscriber;
  11. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  12. use Symfony\Component\HttpFoundation\Request;
  13. use Symfony\Component\HttpKernel\Event\RequestEvent;
  14. use Symfony\Component\HttpKernel\KernelEvents;
  16. final class TrustedHeaderClientIpEventSubscriber implements EventSubscriberInterface
  17. {
  18.     private const PLATFORM_SH_TRUSTED_HEADER_CLIENT_IP = 'X-Client-IP';
  20.     private ?string $trustedHeaderName;
  22.     public function __construct(
  23.         ?string $trustedHeaderName
  24.     ) {
  25.         $this->trustedHeaderName = $trustedHeaderName;
  26.     }
  28.     public static function getSubscribedEvents(): array
  29.     {
  30.         return [
  31.             KernelEvents::REQUEST => ['onKernelRequest', PHP_INT_MAX],
  32.         ];
  33.     }
  35.     public function onKernelRequest(RequestEvent $event): void
  36.     {
  37.         $request = $event->getRequest();
  39.         $trustedProxies = Request::getTrustedProxies();
  40.         $trustedHeaderSet = Request::getTrustedHeaderSet();
  42.         $trustedHeaderName = $this->trustedHeaderName;
  43.         if (null === $trustedHeaderName && $this->isPlatformShProxy($request)) {
  44.             $trustedHeaderName = self::PLATFORM_SH_TRUSTED_HEADER_CLIENT_IP;
  45.         }
  47.         if (null === $trustedHeaderName) {
  48.             return;
  49.         }
  51.         $trustedClientIp = $request->headers->get($trustedHeaderName);
  53.         if (null !== $trustedClientIp) {
  54.             if ($trustedHeaderSet !== -1) {
  55.                 $trustedHeaderSet |= Request::HEADER_X_FORWARDED_FOR;
  56.             }
  57.             $request->headers->set('X_FORWARDED_FOR', $trustedClientIp);
  58.         }
  60.         Request::setTrustedProxies($trustedProxies, $trustedHeaderSet);
  61.     }
  63.     private function isPlatformShProxy(Request $request): bool
  64.     {
  65.         return null !== $request->server->get('PLATFORM_RELATIONSHIPS');
  66.     }
  67. }