src/Controller/AssetController.php line 36

Open in your IDE?
  1. <?php
  3. namespace App\Controller;
  5. use FrontendPermissionToolkitBundle\Service;
  6. use Pimcore\Controller\FrontendController;
  7. use Pimcore\Model\Asset;
  8. use Pimcore\Tool\Admin;
  9. use Pimcore\Tool\Storage;
  10. use Symfony\Component\HttpFoundation\Request;
  11. use Symfony\Component\HttpFoundation\StreamedResponse;
  12. use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
  13. use Symfony\Component\Routing\Matcher\UrlMatcher;
  14. use Symfony\Component\Routing\RouteCollection;
  15. use Symfony\Component\Routing\RouterInterface;
  16. use Symfony\Contracts\Translation\TranslatorInterface;
  18. class AssetController extends DefaultController
  19. {
  20.     /** @var TranslatorInterface */
  21.     protected $translator;
  23.     /** 
  24.      * @var Service 
  25.      */
  26.     private $permissionService;
  28.     public function __construct(TranslatorInterface $translator, Service $permissionService )
  29.     {
  30.         $this->translator = $translator;
  31.         $this->permissionService = $permissionService;
  32.         
  33.         parent::__construct($translator, $permissionService);
  34.     }
  36.     public function protectedAssetAction(Request $request, RouterInterface $router)
  37.     {
  38.         // IMPORTANT!
  39.         // Add your code here to check permission!
  40.         $currentUser = Admin::getCurrentUser();
  42.         if ($currentUser == null) {
  43.             $currentUser = \Pimcore\Tool\Session::getReadonly()->get("user");
  44.         }
  46.         // the following code is responsible to deliver asset & thumbnail contents
  47.         // modify it the way you need it for your use-case
  48.         $pathInfo = $request->getPathInfo();
  50.         if($pathInfo == "/faq"){
  51.             $params = $this->faqAction($request);
  52.             return $this->render("default/faq.html.twig", $params);
  53.         }
  55.         if($pathInfo == "/Emails/PublicationNewsletterEmail"){
  56.             return $this->sentPublicationNewsletterEmailAction($request);
  57.         }
  59.         $asset = Asset::getByPath($pathInfo);
  60.         if ($asset){
  61.             if(!$currentUser){
  62.                 throw new AccessDeniedHttpException('Access denied.');
  63.             }
  65.             $stream = $asset->getStream();
  66.             return new StreamedResponse(function () use ($stream) {
  67.                 fpassthru($stream);
  68.             }, 200, [
  69.                 'Content-Type' => $asset->getMimeType(),
  70.             ]);
  71.         } elseif (preg_match('@.*/(image|video)-thumb__[\d]+__.*@', $pathInfo, $matches)) {
  72.             $storage = Storage::get('thumbnail');
  73.             $storagePath = urldecode($pathInfo);
  74.             if($storage->fileExists($storagePath)){
  75.                 $stream = $storage->readStream($storagePath);
  76.                 return new StreamedResponse(function () use ($stream) {
  77.                     fpassthru($stream);
  78.                 }, 200, [
  79.                     'Content-Type' => $storage->mimeType($storagePath),
  80.                 ]);
  81.             } else {
  82.                 $pimcoreThumbnailRoute = '_pimcore_service_thumbnail';
  83.                 $route = $router->getRouteCollection()->get($pimcoreThumbnailRoute);
  84.                 $collection = new RouteCollection();
  85.                 $collection->add($pimcoreThumbnailRoute, $route);
  86.                 $matcher = new UrlMatcher($collection, $router->getContext());
  88.                 try {
  89.                     $parameters = $matcher->matchRequest($request);
  90.                     return $this->forward('PimcoreCoreBundle:PublicServices:thumbnail', $parameters);
  91.                 } catch (\Exception $e) {
  92.                     // nothing to do
  93.                 }
  94.             }
  95.         }
  97.         throw new AccessDeniedHttpException('Access denied.');
  98.     }
  99. }