src/FMT/Infrastructure/Service/Payments/Dwolla/Listener/HandleWebhooksListener.php line 61

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace FMT\Infrastructure\Service\Payments\Dwolla\Listener;
  7. use FMT\Infrastructure\Helper\CaseHelper;
  8. use FMT\Infrastructure\Helper\LogHelper;
  9. use FMT\Infrastructure\Service\Mapper\Mapper;
  10. use FMT\Infrastructure\Service\Payments\Dwolla\Exception\AuthenticationFailedException;
  11. use FMT\Infrastructure\Service\Payments\Dwolla\Item\Webhook;
  12. use Symfony\Component\HttpFoundation\Response;
  13. use Symfony\Component\HttpKernel\Event\RequestEvent;
  15. /**
  16.  * Class HandleWebhooksListener
  17.  */
  18. class HandleWebhooksListener
  19. {
  20.     /**
  21.      * @var Mapper
  22.      */
  23.     protected $mapper;
  25.     /**
  26.      * @var string
  27.      */
  28.     protected $webhooksRoute;
  30.     /**
  31.      * @var string
  32.      */
  33.     protected $webhooksToken;
  35.     /**
  36.      * @var string
  37.      */
  38.     protected $webhooksController;
  40.     /**
  41.      * @param Mapper $mapper
  42.      * @param string $webhooksRoute
  43.      * @param string $webhooksToken
  44.      * @param string $webhooksController
  45.      */
  46.     public function __construct(
  47.         Mapper $mapper,
  48.         string $webhooksRoute,
  49.         string $webhooksToken,
  50.         string $webhooksController
  51.     ) {
  52.         $this->mapper = $mapper;
  53.         $this->webhooksRoute = $webhooksRoute;
  54.         $this->webhooksToken = $webhooksToken;
  55.         $this->webhooksController = $webhooksController;
  56.     }
  58.     /**
  59.      * @param RequestEvent $event
  60.      */
  61.     public function onKernelRequest(RequestEvent $event)
  62.     {
  63.         $request = $event->getRequest();
  65.         if ($this->webhooksRoute !== $request->getRequestUri() || !$request->isMethod('POST')) {
  66.             return;
  67.         }
  69.         try {
  70.             $signature = $request->headers->get('x-request-signature-Sha-256', '');
  71.             $this->authenticate($signature, $request->getContent());
  73.             $topic = $request->headers->get('x-dwolla-topic');
  74.             $action = CaseHelper::toCase($topic, CaseHelper::SNAKE_CASE, CaseHelper::CAMEL_CASE);
  75.             LogHelper::info([sprintf('Received webhook with topic "%s"', $topic)]);
  77.             if (!method_exists($this->webhooksController, $action)) {
  78.                 $action = 'other';
  79.             }
  81.             $webhook = $this->mapper->map($request->toArray(), Webhook::class);
  83.             $request->attributes->set('_controller', $this->webhooksController . '::' . $action);
  84.             $request->attributes->set('webhook', $webhook);
  85.             $request->attributes->set('_dwolla_webhook', true);
  86.             $event->stopPropagation();
  87.         } catch (AuthenticationFailedException $e) {
  88.             $event->setResponse(new Response(null, 403));
  89.         }
  90.     }
  92.     /**
  93.      * @param string $requestSignature
  94.      * @param string $requestBody
  95.      *
  96.      * @throws AuthenticationFailedException
  97.      */
  98.     protected function authenticate(string $requestSignature, string $requestBody): void
  99.     {
  100.         $hmac = hash_hmac('sha256', $requestBody, $this->webhooksToken);
  102.         if ($hmac !== $requestSignature) {
  103.             throw new AuthenticationFailedException();
  104.         }
  105.     }
  106. }