kenaug74/Sylius
1
0
Fork 0
mirror of https://github.com/Sylius/Sylius.git synced 2026-07-05 20:57:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix after review

Browse source
This commit is contained in:
Michał Kaczmarek 2026-05-22 14:52:30 +02:00
parent 6920a9dfff
commit 29d0ce9614
2 changed files with 18 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/Sylius/Bundle/CoreBundle/Resources/config/services/templating.xml
View file

@ -50,7 +50,10 @@
</service>
<service id="sylius.twig.extension.security_csrf" class="Sylius\Bundle\CoreBundle\Twig\SecurityCsrfExtension" public="false">
<argument type="service" id="service_container" />
<argument>%sylius_admin.security.csrf_parameter%</argument>
<argument>%sylius_admin.security.csrf_token_id%</argument>
<argument>%sylius_shop.security.csrf_parameter%</argument>
<argument>%sylius_shop.security.csrf_token_id%</argument>
<tag name="twig.extension" />
</service>
</services>

18
src/Sylius/Bundle/CoreBundle/Twig/SecurityCsrfExtension.php
View file

@ -13,14 +13,16 @@ declare(strict_types=1);
namespace Sylius\Bundle\CoreBundle\Twig;
use Symfony\Component\DependencyInjection\ContainerInterface;
use Twig\Extension\AbstractExtension;
use Twig\TwigFunction;
final class SecurityCsrfExtension extends AbstractExtension
{
public function __construct(
private readonly ContainerInterface $container,
private readonly string $adminCsrfParameter,
private readonly string $adminCsrfTokenId,
private readonly string $shopCsrfParameter,
private readonly string $shopCsrfTokenId,
) {
}
@ -34,11 +36,19 @@ final class SecurityCsrfExtension extends AbstractExtension
public function getCsrfParameter(string $section): string
{
return (string) $this->container->getParameter(sprintf('sylius_%s.security.csrf_parameter', $section));
return match ($section) {
'admin' => $this->adminCsrfParameter,
'shop' => $this->shopCsrfParameter,
default => throw new \InvalidArgumentException(sprintf('Unknown section "%s". Expected "admin" or "shop".', $section)),
};
}
public function getCsrfTokenId(string $section): string
{
return (string) $this->container->getParameter(sprintf('sylius_%s.security.csrf_token_id', $section));
return match ($section) {
'admin' => $this->adminCsrfTokenId,
'shop' => $this->shopCsrfTokenId,
default => throw new \InvalidArgumentException(sprintf('Unknown section "%s". Expected "admin" or "shop".', $section)),
};
}
}