Chris@0: <?php
Chris@0: 
Chris@0: namespace Drupal\system;
Chris@0: 
Chris@0: use Drupal\Core\Controller\ControllerBase;
Chris@0: use Symfony\Component\HttpFoundation\Request;
Chris@0: use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
Chris@0: use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
Chris@0: use Symfony\Component\HttpFoundation\BinaryFileResponse;
Chris@0: 
Chris@0: /**
Chris@0:  * System file controller.
Chris@0:  */
Chris@0: class FileDownloadController extends ControllerBase {
Chris@0: 
Chris@0:   /**
Chris@0:    * Handles private file transfers.
Chris@0:    *
Chris@0:    * Call modules that implement hook_file_download() to find out if a file is
Chris@0:    * accessible and what headers it should be transferred with. If one or more
Chris@0:    * modules returned headers the download will start with the returned headers.
Chris@0:    * If a module returns -1 an AccessDeniedHttpException will be thrown. If the
Chris@0:    * file exists but no modules responded an AccessDeniedHttpException will be
Chris@0:    * thrown. If the file does not exist a NotFoundHttpException will be thrown.
Chris@0:    *
Chris@0:    * @see hook_file_download()
Chris@0:    *
Chris@0:    * @param \Symfony\Component\HttpFoundation\Request $request
Chris@0:    *   The request object.
Chris@0:    * @param string $scheme
Chris@0:    *   The file scheme, defaults to 'private'.
Chris@0:    *
Chris@0:    * @return \Symfony\Component\HttpFoundation\BinaryFileResponse
Chris@0:    *   The transferred file as response.
Chris@0:    *
Chris@0:    * @throws \Symfony\Component\HttpKernel\Exception\NotFoundHttpException
Chris@0:    *   Thrown when the requested file does not exist.
Chris@0:    * @throws \Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException
Chris@0:    *   Thrown when the user does not have access to the file.
Chris@0:    */
Chris@0:   public function download(Request $request, $scheme = 'private') {
Chris@0:     $target = $request->query->get('file');
Chris@0:     // Merge remaining path arguments into relative file path.
Chris@0:     $uri = $scheme . '://' . $target;
Chris@0: 
Chris@0:     if (file_stream_wrapper_valid_scheme($scheme) && file_exists($uri)) {
Chris@0:       // Let other modules provide headers and controls access to the file.
Chris@0:       $headers = $this->moduleHandler()->invokeAll('file_download', [$uri]);
Chris@0: 
Chris@0:       foreach ($headers as $result) {
Chris@0:         if ($result == -1) {
Chris@0:           throw new AccessDeniedHttpException();
Chris@0:         }
Chris@0:       }
Chris@0: 
Chris@0:       if (count($headers)) {
Chris@0:         // \Drupal\Core\EventSubscriber\FinishResponseSubscriber::onRespond()
Chris@0:         // sets response as not cacheable if the Cache-Control header is not
Chris@0:         // already modified. We pass in FALSE for non-private schemes for the
Chris@0:         // $public parameter to make sure we don't change the headers.
Chris@0:         return new BinaryFileResponse($uri, 200, $headers, $scheme !== 'private');
Chris@0:       }
Chris@0: 
Chris@0:       throw new AccessDeniedHttpException();
Chris@0:     }
Chris@0: 
Chris@0:     throw new NotFoundHttpException();
Chris@0:   }
Chris@0: 
Chris@0: }