function __invoke($req, $res, $next)
{
$apip = apip::getInstance();
$userId = utils::getRequestHeader($req, 'AliceSPA-UserID');
$webToken = utils::getRequestHeader($req, 'AliceSPA-WebToken');
$userId = empty($userId) ? null : $userId[0];
$webToken = empty($webToken) ? null : $webToken[0];
if ($userId === null || $webToken === null) {
$apip->pushError(3);
return $res;
}
$r = utils::disposeAPIException(function () use($userId, $webToken) {
return authService::getInstance()->authenticateByWebToken($userId, $webToken);
}, [1 => ['dispel' => 3, 'dispelPushError' => false]]);
if ($r === false) {
$apip->pushError(3);
return $res;
}
$roles = $req->getAttribute('route')->getArgument('AliceSPA_Roles');
$r = authService::getInstance()->checkRoles($roles);
if ($r === false) {
$apip->pushError(5);
return $res;
}
return $next($req, $res);
}
function __invoke($req, $res, $next)
{
if ($req->isOptions()) {
return $res;
}
$sessionId = utils::getRequestHeader($req, 'AliceSPA-SessionID');
if (!empty($sessionId)) {
$sessionId = $sessionId[0];
}
$sessionId = sessionServ::getInstance()->loadSession($sessionId);
apip::getInstance()->setSessionId($sessionId);
$res = $next($req, $res);
sessionServ::getInstance()->storeSession($sessionId);
return $res;
}
