PHP Класс Neos\Flow\Mvc\Controller\MvcPropertyMappingConfigurationService
It is used when forms are generated and submitted:
After a form has been generated, the method "generateRequestHash" is called with the names of all form fields.
It cleans up the array of form fields and creates another representation of it, which is then serialized and hashed.
Both serialized form field list and the added hash form the request hash, which will be sent over the wire (as an argument __hmac).
On the validation side, the validation happens in two steps:
1) Check if the request hash is consistent (the hash value fits to the serialized string)
2) Check that _all_ GET/POST parameters submitted occur inside the form field list of the request hash.
Note: It is crucially important that a private key is computed into the hash value! This is done inside the HashService.
Показать файл
Открыть проект
Примеры использования класса
Защищенные свойства (Protected)
Свойство |
Тип |
Описание |
|
$hashService |
Neos\Flow\Security\Cryptography\HashService |
|
|
Открытые методы
Защищенные методы
Метод |
Описание |
|
modifyPropertyMappingConfiguration ( array $propertyConfiguration, PropertyMappingConfiguration $propertyMappingConfiguration ) : void |
Modify the passed $propertyMappingConfiguration according to the $propertyConfiguration which
has been generated by Fluid. In detail, if the $propertyConfiguration contains
an __identity field, we allow modification of objects; else we allow creation. |
|
serializeAndHashFormFieldArray ( array $formFieldArray ) : string |
Serialize and hash the form field array |
|
Описание методов
generateTrustedPropertiesToken()
публичный Метод
Generate a request hash for a list of form fields
initializePropertyMappingConfigurationFromRequest()
публичный Метод
Initialize the property mapping configuration in $controllerArguments if
the trusted properties are set inside the request.
modifyPropertyMappingConfiguration()
защищенный Метод
All other properties are specified as allowed properties.
protected modifyPropertyMappingConfiguration ( array $propertyConfiguration, PropertyMappingConfiguration $propertyMappingConfiguration ) : void |
$propertyConfiguration |
array |
|
$propertyMappingConfiguration |
Neos\Flow\Property\PropertyMappingConfiguration |
|
Результат |
void |
|
Описание свойств
$hashService защищенное свойство
protected HashService,Neos\Flow\Security\Cryptography $hashService |
Результат |
Neos\Flow\Security\Cryptography\HashService |
|