Chris@18: <?php
Chris@18: 
Chris@18: namespace Drupal\jsonapi\Routing;
Chris@18: 
Chris@18: use Drupal\Core\Routing\EnhancerInterface;
Chris@18: use Symfony\Component\HttpFoundation\Request;
Chris@18: use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
Chris@18: 
Chris@18: /**
Chris@18:  * Ensures the loaded entity matches the requested resource type.
Chris@18:  *
Chris@18:  * @internal JSON:API maintains no PHP API since its API is the HTTP API. This
Chris@18:  *   class may change at any time and this will break any dependencies on it.
Chris@18:  *
Chris@18:  * @see https://www.drupal.org/project/jsonapi/issues/3032787
Chris@18:  * @see jsonapi.api.php
Chris@18:  */
Chris@18: class RouteEnhancer implements EnhancerInterface {
Chris@18: 
Chris@18:   /**
Chris@18:    * {@inheritdoc}
Chris@18:    */
Chris@18:   public function enhance(array $defaults, Request $request) {
Chris@18:     if (!Routes::isJsonApiRequest($defaults)) {
Chris@18:       return $defaults;
Chris@18:     }
Chris@18: 
Chris@18:     $resource_type = Routes::getResourceTypeNameFromParameters($defaults);
Chris@18:     $entity_type_id = $resource_type->getEntityTypeId();
Chris@18:     if (!isset($defaults[$entity_type_id]) || !($entity = $defaults[$entity_type_id])) {
Chris@18:       return $defaults;
Chris@18:     }
Chris@18:     $retrieved_bundle = $entity->bundle();
Chris@18:     $configured_bundle = $resource_type->getBundle();
Chris@18:     if ($retrieved_bundle != $configured_bundle) {
Chris@18:       // If the bundle in the loaded entity does not match the bundle in the
Chris@18:       // route (which is set based on the corresponding ResourceType), then
Chris@18:       // throw an exception.
Chris@18:       throw new NotFoundHttpException(sprintf('The loaded entity bundle (%s) does not match the configured resource (%s).', $retrieved_bundle, $configured_bundle));
Chris@18:     }
Chris@18:     return $defaults;
Chris@18:   }
Chris@18: 
Chris@18: }