function QueryParameterWorkspaceNegotiator::getActiveWorkspaceId

Overrides SessionWorkspaceNegotiator::getActiveWorkspaceId

File

core/modules/workspaces/src/Negotiator/QueryParameterWorkspaceNegotiator.php, line 26

Class

QueryParameterWorkspaceNegotiator

Defines the query parameter workspace negotiator.

Namespace

Code

public function getActiveWorkspaceId(Request $request) : ?string {
    $workspace_id = (string) $request->query
        ->get('workspace');
    $token = (string) $request->query
        ->get('token');
    $is_valid_token = hash_equals($this->getQueryToken($workspace_id), $token);
    // This negotiator receives a workspace ID from user input, so a minimal
    // validation is needed to ensure that we protect against fake input before
    // the workspace manager fully validates the negotiated workspace ID.
    // @see \Drupal\workspaces\WorkspaceManager::getActiveWorkspace()
    return $is_valid_token ? $workspace_id : NULL;
}