FM / src

/var/www/vhosts/ihelp.ro/httpdocs/vendor/cakephp/authentication/src/

/var/www/vhosts/ihelp.ro/httpdocs/vendor/cakephp/authentication/src

Name	Size	Mode	Actions
Authenticator/	-	0755	rm
Controller/	-	0755	rm
Identifier/	-	0755	rm
Middleware/	-	0755	rm
PasswordHasher/	-	0755	rm
UrlChecker/	-	0755	rm
View/	-	0755	rm
AbstractCollection.php	1465	0644	edit dl rm
AuthenticationService.php	16987	0644	edit dl rm
AuthenticationServiceInterface.php	3443	0644	edit dl rm
AuthenticationServiceProviderInterface.php	1114	0644	edit dl rm
Identity.php	4649	0644	edit dl rm
IdentityInterface.php	1025	0644	edit dl rm
Plugin.php	998	0644	edit dl rm

Edit: /var/www/vhosts/ihelp.ro/httpdocs/vendor/cakephp/authentication/src/AuthenticationService.php (16987B)

<?php
declare(strict_types=1);

/**
 * CakePHP(tm) : Rapid Development Framework (https://cakephp.org)
 * Copyright (c) Cake Software Foundation, Inc. (https://cakefoundation.org)
 *
 * Licensed under The MIT License
 * For full copyright and license information, please see the LICENSE.txt
 * Redistributions of files must retain the above copyright notice.
 *
 * @copyright     Copyright (c) Cake Software Foundation, Inc. (https://cakefoundation.org)
 * @link          https://cakephp.org CakePHP(tm) Project
 * @since         1.0.0
 * @license       https://opensource.org/licenses/mit-license.php MIT License
 */
namespace Authentication;

use Authentication\Authenticator\AuthenticatorCollection;
use Authentication\Authenticator\AuthenticatorInterface;
use Authentication\Authenticator\ImpersonationInterface;
use Authentication\Authenticator\PersistenceInterface;
use Authentication\Authenticator\ResultInterface;
use Authentication\Authenticator\StatelessInterface;
use Authentication\Identifier\IdentifierCollection;
use Authentication\Identifier\IdentifierInterface;
use Cake\Core\InstanceConfigTrait;
use Psr\Http\Message\ResponseInterface;
use Psr\Http\Message\ServerRequestInterface;
use RuntimeException;

/**
 * Authentication Service
 */
class AuthenticationService implements AuthenticationServiceInterface, ImpersonationInterface
{
    use InstanceConfigTrait;

/**
     * Authenticator collection
     *
     * @var \Authentication\Authenticator\AuthenticatorCollection|null
     */
    protected $_authenticators;

/**
     * Identifier collection
     *
     * @var \Authentication\Identifier\IdentifierCollection|null
     */
    protected $_identifiers;

/**
     * Authenticator that successfully authenticated the identity.
     *
     * @var \Authentication\Authenticator\AuthenticatorInterface|null
     */
    protected $_successfulAuthenticator;

/**
     * Result of the last authenticate() call.
     *
     * @var \Authentication\Authenticator\ResultInterface|null
     */
    protected $_result;

/**
     * Default configuration
     *
     * - `authenticators` - An array of authentication objects to use for authenticating users.
     *   You can configure multiple adapters and they will be checked sequentially
     *   when users are identified.
     * - `identifiers` - An array of identifiers. The identifiers are constructed by the service
     *   and then passed to the authenticators that will pass the credentials to them and get the
     *   user data.
     * - `identityClass` - The class name of identity or a callable identity builder.
     * - `identityAttribute` - The request attribute used to store the identity. Default to `identity`.
     * - `unauthenticatedRedirect` - The URL to redirect unauthenticated errors to. See
     *    AuthenticationComponent::allowUnauthenticated()
     * - `queryParam` - The name of the query string parameter containing the previously blocked URL
     *   in case of unauthenticated redirect, or null to disable appending the denied URL.
     *
     * ### Example:
     *
     * ```
     * $service = new AuthenticationService([
     *    'authenticators' => [
     *        'Authentication.Form
     *    ],
     *    'identifiers' => [
     *        'Authentication.Password'
     *    ]
     * ]);
     * ```
     *
     * @var array
     */
    protected $_defaultConfig = [
        'authenticators' => [],
        'identifiers' => [],
        'identityClass' => Identity::class,
        'identityAttribute' => 'identity',
        'queryParam' => null,
        'unauthenticatedRedirect' => null,
    ];

/**
     * Constructor
     *
     * @param array $config Configuration options.
     */
    public function __construct(array $config = [])
    {
        $this->setConfig($config);
    }

/**
     * Access the identifier collection
     *
     * @return \Authentication\Identifier\IdentifierCollection
     */
    public function identifiers(): IdentifierCollection
    {
        if ($this->_identifiers === null) {
            $this->_identifiers = new IdentifierCollection($this->getConfig('identifiers'));
        }

return $this->_identifiers;
    }

/**
     * Access the authenticator collection
     *
     * @return \Authentication\Authenticator\AuthenticatorCollection
     */
    public function authenticators(): AuthenticatorCollection
    {
        if ($this->_authenticators === null) {
            $identifiers = $this->identifiers();
            $authenticators = $this->getConfig('authenticators');
            $this->_authenticators = new AuthenticatorCollection($identifiers, $authenticators);
        }

return $this->_authenticators;
    }

/**
     * Loads an authenticator.
     *
     * @param string $name Name or class name.
     * @param array $config Authenticator configuration.
     * @return \Authentication\Authenticator\AuthenticatorInterface
     */
    public function loadAuthenticator(string $name, array $config = []): AuthenticatorInterface
    {
        return $this->authenticators()->load($name, $config);
    }

/**
     * Loads an identifier.
     *
     * @param string $name Name or class name.
     * @param array $config Identifier configuration.
     * @return \Authentication\Identifier\IdentifierInterface Identifier instance
     */
    public function loadIdentifier(string $name, array $config = []): IdentifierInterface
    {
        return $this->identifiers()->load($name, $config);
    }

/**
     * {@inheritDoc}
     *
     * @param \Psr\Http\Message\ServerRequestInterface $request The request.
     * @return \Authentication\Authenticator\ResultInterface The result object. If none of the adapters was a success
     *  the last failed result is returned.
     * @throws \RuntimeException Throws a runtime exception when no authenticators are loaded.
     */
    public function authenticate(ServerRequestInterface $request): ResultInterface
    {
        $result = null;
        /** @var \Authentication\Authenticator\AuthenticatorInterface $authenticator */
        foreach ($this->authenticators() as $authenticator) {
            $result = $authenticator->authenticate($request);
            if ($result->isValid()) {
                $this->_successfulAuthenticator = $authenticator;

return $this->_result = $result;
            }

if ($authenticator instanceof StatelessInterface) {
                $authenticator->unauthorizedChallenge($request);
            }
        }

if ($result === null) {
            throw new RuntimeException(
                'No authenticators loaded. You need to load at least one authenticator.'
            );
        }

$this->_successfulAuthenticator = null;

return $this->_result = $result;
    }

/**
     * Clears the identity from authenticators that store them and the request
     *
     * @param \Psr\Http\Message\ServerRequestInterface $request The request.
     * @param \Psr\Http\Message\ResponseInterface $response The response.
     * @return array Return an array containing the request and response objects.
     * @psalm-return array{request: \Psr\Http\Message\ServerRequestInterface, response: \Psr\Http\Message\ResponseInterface}
     */
    public function clearIdentity(ServerRequestInterface $request, ResponseInterface $response): array
    {
        foreach ($this->authenticators() as $authenticator) {
            if ($authenticator instanceof PersistenceInterface) {
                if ($authenticator instanceof ImpersonationInterface && $authenticator->isImpersonating($request)) {
                    /** @psalm-var array{request: \Cake\Http\ServerRequest, response: \Cake\Http\Response} $stopImpersonationResult */
                    $stopImpersonationResult = $authenticator->stopImpersonating($request, $response);
                    ['request' => $request, 'response' => $response] = $stopImpersonationResult;
                }
                $result = $authenticator->clearIdentity($request, $response);
                ['request' => $request, 'response' => $response] = $result;
            }
        }
        $this->_successfulAuthenticator = null;

return [
            'request' => $request->withoutAttribute($this->getConfig('identityAttribute')),
            'response' => $response,
        ];
    }

/**
     * Sets identity data and persists it in the authenticators that support it.
     *
     * @param \Psr\Http\Message\ServerRequestInterface $request The request.
     * @param \Psr\Http\Message\ResponseInterface $response The response.
     * @param \ArrayAccess|array $identity Identity data.
     * @return array
     * @psalm-return array{request: \Psr\Http\Message\ServerRequestInterface, response: \Psr\Http\Message\ResponseInterface}
     */
    public function persistIdentity(ServerRequestInterface $request, ResponseInterface $response, $identity): array
    {
        foreach ($this->authenticators() as $authenticator) {
            if ($authenticator instanceof PersistenceInterface) {
                $result = $authenticator->persistIdentity($request, $response, $identity);
                $request = $result['request'];
                $response = $result['response'];
            }
        }

$identity = $this->buildIdentity($identity);

return [
            'request' => $request->withAttribute($this->getConfig('identityAttribute'), $identity),
            'response' => $response,
        ];
    }

/**
     * Gets the successful authenticator instance if one was successful after calling authenticate.
     *
     * @return \Authentication\Authenticator\AuthenticatorInterface|null
     */
    public function getAuthenticationProvider(): ?AuthenticatorInterface
    {
        return $this->_successfulAuthenticator;
    }

/**
     * Convenient method to gets the successful identifier instance.
     *
     * @return \Authentication\Identifier\IdentifierInterface|null
     */
    public function getIdentificationProvider()
    {
        return $this->identifiers()->getIdentificationProvider();
    }

/**
     * Gets the result of the last authenticate() call.
     *
     * @return \Authentication\Authenticator\ResultInterface|null Authentication result interface
     */
    public function getResult(): ?ResultInterface
    {
        return $this->_result;
    }

/**
     * Gets an identity object
     *
     * @return null|\Authentication\IdentityInterface
     */
    public function getIdentity(): ?IdentityInterface
    {
        if ($this->_result === null) {
            return null;
        }

$identityData = $this->_result->getData();
        if (!$this->_result->isValid() || $identityData === null) {
            return null;
        }

return $this->buildIdentity($identityData);
    }

/**
     * Return the name of the identity attribute.
     *
     * @return string
     */
    public function getIdentityAttribute(): string
    {
        return $this->getConfig('identityAttribute');
    }

/**
     * Builds the identity object
     *
     * @param \ArrayAccess|array $identityData Identity data
     * @return \Authentication\IdentityInterface
     */
    public function buildIdentity($identityData): IdentityInterface
    {
        if ($identityData instanceof IdentityInterface) {
            return $identityData;
        }

$class = $this->getConfig('identityClass');

if (is_callable($class)) {
            $identity = $class($identityData);
        } else {
            $identity = new $class($identityData);
        }

if (!($identity instanceof IdentityInterface)) {
            throw new RuntimeException(sprintf(
                'Object `%s` does not implement `%s`',
                get_class($identity),
                IdentityInterface::class
            ));
        }

return $identity;
    }

/**
     * Return the URL to redirect unauthenticated users to.
     *
     * If the `unauthenticatedRedirect` option is not set,
     * this method will return null.
     *
     * If the `queryParam` option is set a query parameter
     * will be appended with the denied URL path.
     *
     * @param \Psr\Http\Message\ServerRequestInterface $request The request
     * @return string|null
     */
    public function getUnauthenticatedRedirectUrl(ServerRequestInterface $request): ?string
    {
        $param = $this->getConfig('queryParam');
        $target = $this->getConfig('unauthenticatedRedirect');
        if ($target === null) {
            return null;
        }
        if ($param === null) {
            return $target;
        }

$uri = $request->getUri();
        $redirect = $uri->getPath();
        if ($uri->getQuery()) {
            $redirect .= '?' . $uri->getQuery();
        }
        $query = urlencode($param) . '=' . urlencode($redirect);

/** @var array $url */
        $url = parse_url($target);
        if (isset($url['query']) && strlen($url['query'])) {
            $url['query'] .= '&' . $query;
        } else {
            $url['query'] = $query;
        }
        $fragment = isset($url['fragment']) ? '#' . $url['fragment'] : '';
        $url['path'] = $url['path'] ?? '/';

return $url['path'] . '?' . $url['query'] . $fragment;
    }

/**
     * Return the URL that an authenticated user came from or null.
     *
     * This reads from the URL parameter defined in the `queryParam` option.
     * Will return null if this parameter doesn't exist or is invalid.
     *
     * @param \Psr\Http\Message\ServerRequestInterface $request The request
     * @return string|null
     */
    public function getLoginRedirect(ServerRequestInterface $request): ?string
    {
        $redirectParam = $this->getConfig('queryParam');
        $params = $request->getQueryParams();
        if (
            empty($redirectParam) ||
            !isset($params[$redirectParam]) ||
            strlen($params[$redirectParam]) === 0
        ) {
            return null;
        }

$parsed = parse_url($params[$redirectParam]);
        if ($parsed === false) {
            return null;
        }
        if (!empty($parsed['host']) || !empty($parsed['scheme'])) {
            return null;
        }
        $parsed += ['path' => '/', 'query' => ''];
        /** @psalm-suppress PossiblyUndefinedArrayOffset */
        if (strlen($parsed['path']) && $parsed['path'][0] !== '/') {
            $parsed['path'] = "/{$parsed['path']}";
        }
        /** @psalm-suppress PossiblyUndefinedArrayOffset */
        if ($parsed['query']) {
            $parsed['query'] = "?{$parsed['query']}";
        }

return $parsed['path'] . $parsed['query'];
    }

/**
     * Impersonates a user
     *
     * @param \Psr\Http\Message\ServerRequestInterface $request The request
     * @param \Psr\Http\Message\ResponseInterface $response The response
     * @param \ArrayAccess $impersonator User who impersonates
     * @param \ArrayAccess $impersonated User impersonated
     * @return array
     */
    public function impersonate(
        ServerRequestInterface $request,
        ResponseInterface $response,
        \ArrayAccess $impersonator,
        \ArrayAccess $impersonated
    ): array {
        $provider = $this->getImpersonationProvider();

return $provider->impersonate($request, $response, $impersonator, $impersonated);
    }

/**
     * Stops impersonation
     *
     * @param \Psr\Http\Message\ServerRequestInterface $request The request
     * @param \Psr\Http\Message\ResponseInterface $response The response
     * @return array
     */
    public function stopImpersonating(ServerRequestInterface $request, ResponseInterface $response): array
    {
        $provider = $this->getImpersonationProvider();

return $provider->stopImpersonating($request, $response);
    }

/**
     * Returns true if impersonation is being done
     *
     * @param \Psr\Http\Message\ServerRequestInterface $request The request
     * @return bool
     */
    public function isImpersonating(ServerRequestInterface $request): bool
    {
        $provider = $this->getImpersonationProvider();

return $provider->isImpersonating($request);
    }

/**
     * Get impersonation provider
     *
     * @return \Authentication\Authenticator\ImpersonationInterface
     * @throws \InvalidArgumentException
     */
    protected function getImpersonationProvider(): ImpersonationInterface
    {
        /** @var \Authentication\Authenticator\ImpersonationInterface $provider */
        $provider = $this->getAuthenticationProvider();
        if (!($provider instanceof ImpersonationInterface)) {
            $className = get_class($provider);
            throw new \InvalidArgumentException(
                "The {$className} Provider must implement ImpersonationInterface in order to use impersonation."
            );
        }

return $provider;
    }
}

[ * 'Authentication.Form * ], * 'identifiers' => [ * 'Authentication.Password' * ] * ]); * ``` * * @var array */ protected $_defaultConfig = [ 'authenticators' => [], 'identifiers' => [], 'identityClass' => Identity::class, 'identityAttribute' => 'identity', 'queryParam' => null, 'unauthenticatedRedirect' => null, ]; /** * Constructor * * @param array $config Configuration options. */ public function __construct(array $config = []) { $this->setConfig($config); } /** * Access the identifier collection * * @return \Authentication\Identifier\IdentifierCollection */ public function identifiers(): IdentifierCollection { if ($this->_identifiers === null) { $this->_identifiers = new IdentifierCollection($this->getConfig('identifiers')); } return $this->_identifiers; } /** * Access the authenticator collection * * @return \Authentication\Authenticator\AuthenticatorCollection */ public function authenticators(): AuthenticatorCollection { if ($this->_authenticators === null) { $identifiers = $this->identifiers(); $authenticators = $this->getConfig('authenticators'); $this->_authenticators = new AuthenticatorCollection($identifiers, $authenticators); } return $this->_authenticators; } /** * Loads an authenticator. * * @param string $name Name or class name. * @param array $config Authenticator configuration. * @return \Authentication\Authenticator\AuthenticatorInterface */ public function loadAuthenticator(string $name, array $config = []): AuthenticatorInterface { return $this->authenticators()->load($name, $config); } /** * Loads an identifier. * * @param string $name Name or class name. * @param array $config Identifier configuration. * @return \Authentication\Identifier\IdentifierInterface Identifier instance */ public function loadIdentifier(string $name, array $config = []): IdentifierInterface { return $this->identifiers()->load($name, $config); } /** * {@inheritDoc} * * @param \Psr\Http\Message\ServerRequestInterface $request The request. * @return \Authentication\Authenticator\ResultInterface The result object. If none of the adapters was a success * the last failed result is returned. * @throws \RuntimeException Throws a runtime exception when no authenticators are loaded. */ public function authenticate(ServerRequestInterface $request): ResultInterface { $result = null; /** @var \Authentication\Authenticator\AuthenticatorInterface $authenticator */ foreach ($this->authenticators() as $authenticator) { $result = $authenticator->authenticate($request); if ($result->isValid()) { $this->_successfulAuthenticator = $authenticator; return $this->_result = $result; } if ($authenticator instanceof StatelessInterface) { $authenticator->unauthorizedChallenge($request); } } if ($result === null) { throw new RuntimeException( 'No authenticators loaded. You need to load at least one authenticator.' ); } $this->_successfulAuthenticator = null; return $this->_result = $result; } /** * Clears the identity from authenticators that store them and the request * * @param \Psr\Http\Message\ServerRequestInterface $request The request. * @param \Psr\Http\Message\ResponseInterface $response The response. * @return array Return an array containing the request and response objects. * @psalm-return array{request: \Psr\Http\Message\ServerRequestInterface, response: \Psr\Http\Message\ResponseInterface} */ public function clearIdentity(ServerRequestInterface $request, ResponseInterface $response): array { foreach ($this->authenticators() as $authenticator) { if ($authenticator instanceof PersistenceInterface) { if ($authenticator instanceof ImpersonationInterface && $authenticator->isImpersonating($request)) { /** @psalm-var array{request: \Cake\Http\ServerRequest, response: \Cake\Http\Response} $stopImpersonationResult */ $stopImpersonationResult = $authenticator->stopImpersonating($request, $response); ['request' => $request, 'response' => $response] = $stopImpersonationResult; } $result = $authenticator->clearIdentity($request, $response); ['request' => $request, 'response' => $response] = $result; } } $this->_successfulAuthenticator = null; return [ 'request' => $request->withoutAttribute($this->getConfig('identityAttribute')), 'response' => $response, ]; } /** * Sets identity data and persists it in the authenticators that support it. * * @param \Psr\Http\Message\ServerRequestInterface $request The request. * @param \Psr\Http\Message\ResponseInterface $response The response. * @param \ArrayAccess|array $identity Identity data. * @return array * @psalm-return array{request: \Psr\Http\Message\ServerRequestInterface, response: \Psr\Http\Message\ResponseInterface} */ public function persistIdentity(ServerRequestInterface $request, ResponseInterface $response, $identity): array { foreach ($this->authenticators() as $authenticator) { if ($authenticator instanceof PersistenceInterface) { $result = $authenticator->persistIdentity($request, $response, $identity); $request = $result['request']; $response = $result['response']; } } $identity = $this->buildIdentity($identity); return [ 'request' => $request->withAttribute($this->getConfig('identityAttribute'), $identity), 'response' => $response, ]; } /** * Gets the successful authenticator instance if one was successful after calling authenticate. * * @return \Authentication\Authenticator\AuthenticatorInterface|null */ public function getAuthenticationProvider(): ?AuthenticatorInterface { return $this->_successfulAuthenticator; } /** * Convenient method to gets the successful identifier instance. * * @return \Authentication\Identifier\IdentifierInterface|null */ public function getIdentificationProvider() { return $this->identifiers()->getIdentificationProvider(); } /** * Gets the result of the last authenticate() call. * * @return \Authentication\Authenticator\ResultInterface|null Authentication result interface */ public function getResult(): ?ResultInterface { return $this->_result; } /** * Gets an identity object * * @return null|\Authentication\IdentityInterface */ public function getIdentity(): ?IdentityInterface { if ($this->_result === null) { return null; } $identityData = $this->_result->getData(); if (!$this->_result->isValid() || $identityData === null) { return null; } return $this->buildIdentity($identityData); } /** * Return the name of the identity attribute. * * @return string */ public function getIdentityAttribute(): string { return $this->getConfig('identityAttribute'); } /** * Builds the identity object * * @param \ArrayAccess|array $identityData Identity data * @return \Authentication\IdentityInterface */ public function buildIdentity($identityData): IdentityInterface { if ($identityData instanceof IdentityInterface) { return $identityData; } $class = $this->getConfig('identityClass'); if (is_callable($class)) { $identity = $class($identityData); } else { $identity = new $class($identityData); } if (!($identity instanceof IdentityInterface)) { throw new RuntimeException(sprintf( 'Object `%s` does not implement `%s`', get_class($identity), IdentityInterface::class )); } return $identity; } /** * Return the URL to redirect unauthenticated users to. * * If the `unauthenticatedRedirect` option is not set, * this method will return null. * * If the `queryParam` option is set a query parameter * will be appended with the denied URL path. * * @param \Psr\Http\Message\ServerRequestInterface $request The request * @return string|null */ public function getUnauthenticatedRedirectUrl(ServerRequestInterface $request): ?string { $param = $this->getConfig('queryParam'); $target = $this->getConfig('unauthenticatedRedirect'); if ($target === null) { return null; } if ($param === null) { return $target; } $uri = $request->getUri(); $redirect = $uri->getPath(); if ($uri->getQuery()) { $redirect .= '?' . $uri->getQuery(); } $query = urlencode($param) . '=' . urlencode($redirect); /** @var array $url */ $url = parse_url($target); if (isset($url['query']) && strlen($url['query'])) { $url['query'] .= '&' . $query; } else { $url['query'] = $query; } $fragment = isset($url['fragment']) ? '#' . $url['fragment'] : ''; $url['path'] = $url['path'] ?? '/'; return $url['path'] . '?' . $url['query'] . $fragment; } /** * Return the URL that an authenticated user came from or null. * * This reads from the URL parameter defined in the `queryParam` option. * Will return null if this parameter doesn't exist or is invalid. * * @param \Psr\Http\Message\ServerRequestInterface $request The request * @return string|null */ public function getLoginRedirect(ServerRequestInterface $request): ?string { $redirectParam = $this->getConfig('queryParam'); $params = $request->getQueryParams(); if ( empty($redirectParam) || !isset($params[$redirectParam]) || strlen($params[$redirectParam]) === 0 ) { return null; } $parsed = parse_url($params[$redirectParam]); if ($parsed === false) { return null; } if (!empty($parsed['host']) || !empty($parsed['scheme'])) { return null; } $parsed += ['path' => '/', 'query' => '']; /** @psalm-suppress PossiblyUndefinedArrayOffset */ if (strlen($parsed['path']) && $parsed['path'][0] !== '/') { $parsed['path'] = "/{$parsed['path']}"; } /** @psalm-suppress PossiblyUndefinedArrayOffset */ if ($parsed['query']) { $parsed['query'] = "?{$parsed['query']}"; } return $parsed['path'] . $parsed['query']; } /** * Impersonates a user * * @param \Psr\Http\Message\ServerRequestInterface $request The request * @param \Psr\Http\Message\ResponseInterface $response The response * @param \ArrayAccess $impersonator User who impersonates * @param \ArrayAccess $impersonated User impersonated * @return array */ public function impersonate( ServerRequestInterface $request, ResponseInterface $response, \ArrayAccess $impersonator, \ArrayAccess $impersonated ): array { $provider = $this->getImpersonationProvider(); return $provider->impersonate($request, $response, $impersonator, $impersonated); } /** * Stops impersonation * * @param \Psr\Http\Message\ServerRequestInterface $request The request * @param \Psr\Http\Message\ResponseInterface $response The response * @return array */ public function stopImpersonating(ServerRequestInterface $request, ResponseInterface $response): array { $provider = $this->getImpersonationProvider(); return $provider->stopImpersonating($request, $response); } /** * Returns true if impersonation is being done * * @param \Psr\Http\Message\ServerRequestInterface $request The request * @return bool */ public function isImpersonating(ServerRequestInterface $request): bool { $provider = $this->getImpersonationProvider(); return $provider->isImpersonating($request); } /** * Get impersonation provider * * @return \Authentication\Authenticator\ImpersonationInterface * @throws \InvalidArgumentException */ protected function getImpersonationProvider(): ImpersonationInterface { /** @var \Authentication\Authenticator\ImpersonationInterface $provider */ $provider = $this->getAuthenticationProvider(); if (!($provider instanceof ImpersonationInterface)) { $className = get_class($provider); throw new \InvalidArgumentException( "The {$className} Provider must implement ImpersonationInterface in order to use impersonation." ); } return $provider; } }