Chris@0: <?php
Chris@0: 
Chris@0: namespace Drupal\toolbar\Controller;
Chris@0: 
Chris@0: use Drupal\Component\Utility\Crypt;
Chris@0: use Drupal\Core\Access\AccessResult;
Chris@0: use Drupal\Core\Ajax\AjaxResponse;
Chris@0: use Drupal\Core\Controller\ControllerBase;
Chris@0: use Drupal\toolbar\Ajax\SetSubtreesCommand;
Chris@0: 
Chris@0: /**
Chris@0:  * Defines a controller for the toolbar module.
Chris@0:  */
Chris@0: class ToolbarController extends ControllerBase {
Chris@0: 
Chris@0:   /**
Chris@0:    * Returns an AJAX response to render the toolbar subtrees.
Chris@0:    *
Chris@0:    * @return \Drupal\Core\Ajax\AjaxResponse
Chris@0:    */
Chris@0:   public function subtreesAjax() {
Chris@0:     list($subtrees, $cacheability) = toolbar_get_rendered_subtrees();
Chris@0:     $response = new AjaxResponse();
Chris@0:     $response->addCommand(new SetSubtreesCommand($subtrees));
Chris@0: 
Chris@0:     // The Expires HTTP header is the heart of the client-side HTTP caching. The
Chris@0:     // additional server-side page cache only takes effect when the client
Chris@0:     // accesses the callback URL again (e.g., after clearing the browser cache
Chris@0:     // or when force-reloading a Drupal page).
Chris@0:     $max_age = 365 * 24 * 60 * 60;
Chris@0:     $response->setPrivate();
Chris@0:     $response->setMaxAge($max_age);
Chris@0: 
Chris@0:     $expires = new \DateTime();
Chris@0:     $expires->setTimestamp(REQUEST_TIME + $max_age);
Chris@0:     $response->setExpires($expires);
Chris@0: 
Chris@0:     return $response;
Chris@0:   }
Chris@0: 
Chris@0:   /**
Chris@0:    * Checks access for the subtree controller.
Chris@0:    *
Chris@0:    * @param string $hash
Chris@0:    *   The hash of the toolbar subtrees.
Chris@0:    *
Chris@0:    * @return \Drupal\Core\Access\AccessResultInterface
Chris@0:    *   The access result.
Chris@0:    */
Chris@0:   public function checkSubTreeAccess($hash) {
Chris@0:     $expected_hash = _toolbar_get_subtrees_hash()[0];
Chris@0:     return AccessResult::allowedIf($this->currentUser()->hasPermission('access toolbar') && Crypt::hashEquals($expected_hash, $hash))->cachePerPermissions();
Chris@0:   }
Chris@0: 
Chris@0: }