function AuthenticationSubscriber::onExceptionSendChallenge

Respond with a challenge on access denied exceptions if appropriate.

On a 403 (access denied), if there are no credentials on the request, some authentication methods (e.g. basic auth) require that a challenge is sent to the client.

Parameters

\Symfony\Component\HttpKernel\Event\ExceptionEvent $event: The exception event.

File

core/lib/Drupal/Core/EventSubscriber/AuthenticationSubscriber.php, line 111

Class

AuthenticationSubscriber

Authentication subscriber.

Namespace

Code

public function onExceptionSendChallenge(ExceptionEvent $event) {
    if (isset($this->challengeProvider) && $event->isMainRequest()) {
        $request = $event->getRequest();
        $exception = $event->getThrowable();
        if ($exception instanceof AccessDeniedHttpException && !$this->authenticationProvider
            ->applies($request) && (!isset($this->filter) || $this->filter
            ->appliesToRoutedRequest($request, FALSE))) {
            $challenge_exception = $this->challengeProvider
                ->challengeException($request, $exception);
            if ($challenge_exception) {
                $event->setThrowable($challenge_exception);
            }
        }
    }
}