vendor/shopware/storefront/Framework/Routing/ResponseHeaderListener.php line 22

Open in your IDE?
  1. <?php declare(strict_types=1);
  3. namespace Shopware\Storefront\Framework\Routing;
  5. use Shopware\Core\Framework\Routing\Annotation\RouteScope;
  6. use Shopware\Core\PlatformRequest;
  7. use Shopware\Storefront\Framework\Routing\Annotation\NoStore;
  8. use Symfony\Component\HttpKernel\Event\ResponseEvent;
  10. class ResponseHeaderListener
  11. {
  12.     private const REMOVAL_HEADERS = [
  13.         PlatformRequest::HEADER_VERSION_ID,
  14.         PlatformRequest::HEADER_LANGUAGE_ID,
  15.         PlatformRequest::HEADER_CONTEXT_TOKEN,
  16.         'Access-Control-Allow-Origin',
  17.         'Access-Control-Allow-Methods',
  18.         'Access-Control-Allow-Headers',
  19.         'Access-Control-Expose-Headers',
  20.     ];
  22.     public function __invoke(ResponseEvent $event): void
  23.     {
  24.         /** @var RouteScope|array $scopes */
  25.         $scopes = $event->getRequest()->attributes->get(PlatformRequest::ATTRIBUTE_ROUTE_SCOPE, []);
  27.         if ($scopes instanceof RouteScope) {
  28.             $scopes = $scopes->getScopes();
  29.         }
  31.         if (!\in_array(StorefrontRouteScope::ID, $scopes, true)) {
  32.             return;
  33.         }
  35.         $this->removeHeaders($event);
  36.         $this->addNoStoreHeader($event);
  37.     }
  39.     private function removeHeaders(ResponseEvent $event): void
  40.     {
  41.         foreach (self::REMOVAL_HEADERS as $headerKey) {
  42.             $event->getResponse()->headers->remove($headerKey);
  43.         }
  44.     }
  46.     private function addNoStoreHeader(ResponseEvent $event): void
  47.     {
  48.         if (!$event->getRequest()->attributes->has('_' . NoStore::ALIAS)) {
  49.             return;
  50.         }
  52.         $event->getResponse()->setMaxAge(0);
  53.         $event->getResponse()->headers->addCacheControlDirective('no-cache');
  54.         $event->getResponse()->headers->addCacheControlDirective('no-store');
  55.         $event->getResponse()->headers->addCacheControlDirective('must-revalidate');
  56.         $event->getResponse()->setExpires(new \DateTime('@0'));
  57.     }
  58. }