SessionCheckController.php

<?php

/**
 * @copyright Copyright (C) Ibexa AS. All rights reserved.
 * @license For full copyright and license information view LICENSE file distributed with this source code.
 */
declare(strict_types=1);

namespace Ibexa\Rest\Server\Controller\Session;

use ApiPlatform\Metadata\Get;
use ApiPlatform\OpenApi\Model;
use Ibexa\Rest\Server\Values\UserSession;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;

#[Get(
    uriTemplate: '/user/sessions/current',
    openapi: new Model\Operation(
        operationId: 'ibexa.rest.check_session',
        summary: 'Get current session',
        description: 'Get current user session, if any.',
        tags: [
            'User Session',
        ],
        parameters: [
            new Model\Parameter(
                name: 'Cookie',
                in: 'header',
                required: false,
                description: 'Only needed for session\'s checking {sessionName}={sessionID}.',
                schema: [
                    'type' => 'string',
                ],
            ),
        ],
        responses: [
            Response::HTTP_OK => [
                'description' => 'User is currently logged in and has a valid session.',
                'content' => [
                    'application/vnd.ibexa.api.Session+json' => [
                        'schema' => [
                            '$ref' => '#/components/schemas/SessionWrapper',
                        ],
                        'x-ibexa-example-file' => '@IbexaRestBundle/Resources/api_platform/examples/user/sessions/session_id/refresh/POST/Session.json.example',
                    ],
                    'application/vnd.ibexa.api.Session+xml' => [
                        'schema' => [
                            '$ref' => '#/components/schemas/Session',
                        ],
                        'x-ibexa-example-file' => '@IbexaRestBundle/Resources/api_platform/examples/user/sessions/POST/Session.xml.example',
                    ],
                ],
            ],
            Response::HTTP_NOT_FOUND => [
                'description' => 'User does not have a valid session, or it has expired.',
            ],
        ],
    ),
)]
/**
 * @internal
 */
final class SessionCheckController extends SessionBaseController
{
    public function checkSessionAction(Request $request): Response|UserSession
    {
        $session = $request->getSession();
        if (!$session->isStarted()) {
            return $this->logout($request);
        }

        $currentUser = $this->userService->loadUser(
            $this->permissionResolver->getCurrentUserReference()->getUserId()
        );

        return new UserSession(
            $currentUser,
            $session->getName(),
            $session->getId(),
            $this->getCsrfToken(),
            false
        );
    }
}