CSRFTokenController.php 1.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960
  1. <?php
  2. declare(strict_types=1);
  3. /**
  4. * @copyright 2017 Christoph Wurst <christoph@winzerhof-wurst.at>
  5. *
  6. * @author Christoph Wurst <christoph@winzerhof-wurst.at>
  7. * @author Roeland Jago Douma <roeland@famdouma.nl>
  8. *
  9. * @license GNU AGPL version 3 or any later version
  10. *
  11. * This program is free software: you can redistribute it and/or modify
  12. * it under the terms of the GNU Affero General Public License as
  13. * published by the Free Software Foundation, either version 3 of the
  14. * License, or (at your option) any later version.
  15. *
  16. * This program is distributed in the hope that it will be useful,
  17. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  18. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  19. * GNU Affero General Public License for more details.
  20. *
  21. * You should have received a copy of the GNU Affero General Public License
  22. * along with this program. If not, see <http://www.gnu.org/licenses/>.
  23. *
  24. */
  25. namespace OC\Core\Controller;
  26. use OC\Security\CSRF\CsrfTokenManager;
  27. use OCP\AppFramework\Controller;
  28. use OCP\AppFramework\Http;
  29. use OCP\AppFramework\Http\JSONResponse;
  30. use OCP\IRequest;
  31. class CSRFTokenController extends Controller {
  32. private CsrfTokenManager $tokenManager;
  33. public function __construct(string $appName, IRequest $request,
  34. CsrfTokenManager $tokenManager) {
  35. parent::__construct($appName, $request);
  36. $this->tokenManager = $tokenManager;
  37. }
  38. /**
  39. * @NoAdminRequired
  40. * @NoCSRFRequired
  41. * @PublicPage
  42. */
  43. public function index(): JSONResponse {
  44. if (!$this->request->passesStrictCookieCheck()) {
  45. return new JSONResponse([], Http::STATUS_FORBIDDEN);
  46. }
  47. $requestToken = $this->tokenManager->getToken();
  48. return new JSONResponse([
  49. 'token' => $requestToken->getEncryptedValue(),
  50. ]);
  51. }
  52. }