src/Controller/AssetController.php line 36

Open in your IDE?
  1. <?php
  3. namespace App\Controller;
  5. use FrontendPermissionToolkitBundle\Service;
  6. use Pimcore\Controller\FrontendController;
  7. use Pimcore\Model\Asset;
  8. use Pimcore\Tool\Admin;
  9. use Pimcore\Tool\Storage;
  10. use Symfony\Component\HttpFoundation\Request;
  11. use Symfony\Component\HttpFoundation\StreamedResponse;
  12. use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
  13. use Symfony\Component\Routing\Matcher\UrlMatcher;
  14. use Symfony\Component\Routing\RouteCollection;
  15. use Symfony\Component\Routing\RouterInterface;
  16. use Symfony\Contracts\Translation\TranslatorInterface;
  18. class AssetController extends DefaultController
  19. {
  21.     public function __construct(TranslatorInterface $translator, Service $permissionService )
  22.     {
  23.         parent::__construct($translator, $permissionService);
  24.     }
  26.     public function protectedAssetAction(Request $request, RouterInterface $router)
  27.     {
  28.         // IMPORTANT!
  29.         // Add your code here to check permission!
  30.         $currentUser = Admin::getCurrentUser();
  32.         if ($currentUser == null) {
  33.             $currentUser = \Pimcore\Tool\Session::getReadonly()->get("user");
  34.         }
  36.         // the following code is responsible to deliver asset & thumbnail contents
  37.         // modify it the way you need it for your use-case
  38.         $pathInfo = $request->getPathInfo();
  40.         if($pathInfo == "/faq"){
  41.             $params = $this->faqAction($request);
  42.             return $this->render("default/faq.html.twig", $params);
  43.         }
  45.         if($pathInfo == "/Emails/PublicationNewsletterEmail"){
  46.             return $this->sentPublicationNewsletterEmailAction($request);
  47.         }
  49.         if ($pathInfo == "/Emails/OrderForm") {
  50.             return $this->sendEmailOrderFormAction($request);
  51.         }
  53.         if ($pathInfo == "/Emails/OrderFormCustomer") {
  54.             return $this->sendEmailOrderFormCustomerAction($request);
  55.         }
  57.         $asset = Asset::getByPath($pathInfo);
  58.         if ($asset){
  59.             if(!$currentUser){
  60.                 throw new AccessDeniedHttpException('Access denied.');
  61.             }
  63.             $stream = $asset->getStream();
  64.             return new StreamedResponse(function () use ($stream) {
  65.                 fpassthru($stream);
  66.             }, 200, [
  67.                 'Content-Type' => $asset->getMimeType(),
  68.             ]);
  69.         } elseif (preg_match('@.*/(image|video)-thumb__[\d]+__.*@', $pathInfo, $matches)) {
  70.             $storage = Storage::get('thumbnail');
  71.             $storagePath = urldecode($pathInfo);
  72.             if($storage->fileExists($storagePath)){
  73.                 $stream = $storage->readStream($storagePath);
  74.                 return new StreamedResponse(function () use ($stream) {
  75.                     fpassthru($stream);
  76.                 }, 200, [
  77.                     'Content-Type' => $storage->mimeType($storagePath),
  78.                 ]);
  79.             } else {
  80.                 $pimcoreThumbnailRoute = '_pimcore_service_thumbnail';
  81.                 $route = $router->getRouteCollection()->get($pimcoreThumbnailRoute);
  82.                 $collection = new RouteCollection();
  83.                 $collection->add($pimcoreThumbnailRoute, $route);
  84.                 $matcher = new UrlMatcher($collection, $router->getContext());
  86.                 try {
  87.                     $parameters = $matcher->matchRequest($request);
  88.                     return $this->forward('PimcoreCoreBundle:PublicServices:thumbnail', $parameters);
  89.                 } catch (\Exception $e) {
  90.                     // nothing to do
  91.                 }
  92.             }
  93.         }
  95.         throw new AccessDeniedHttpException('Access denied.');
  96.     }
  97. }