custom/plugins/EtrpCurrencyGeoIp/src/Subscriber/DetectCountryUser.php line 63

Open in your IDE?
  1. <?php declare(strict_types=1);
  3. namespace EtrpCurrencyGeoIp\Subscriber;
  5. use EtrpCurrencyGeoIp\Service\GeoipServices;
  6. use Shopware\Core\PlatformRequest;
  7. use Shopware\Core\System\SystemConfig\SystemConfigService;
  8. use Shopware\Core\System\SalesChannel\SalesChannelContext;
  9. use Shopware\Storefront\Framework\Routing\RequestTransformer;
  10. use Shopware\Storefront\Framework\Routing\Router;
  11. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  12. use Symfony\Component\HttpFoundation\Cookie;
  13. use Symfony\Component\HttpFoundation\RedirectResponse;
  14. use Symfony\Component\HttpKernel\Event\ResponseEvent;
  15. use Symfony\Component\HttpKernel\KernelEvents;
  17. class DetectCountryUser implements EventSubscriberInterface
  18. {
  19.     /**
  20.      * @var GeoipServices
  21.      */
  22.     private $GeoipServices;
  24.     /**
  25.      * @var Router
  26.      */
  27.     private $router;
  29.     /**
  30.      * @var SystemConfigService
  31.      */
  32.     private $systemConfigService;
  34.     /**
  35.      * DetectCountryUser constructor.
  36.      * @param GeoipServices $GeoipServices
  37.      * @param Router $router
  38.      * @param SystemConfigService $systemConfigService
  39.      */
  40.     public function __construct(
  41.         GeoipServices $GeoipServices,
  42.         Router $router,
  43.         SystemConfigService $systemConfigService
  44.     ) {
  45.         $this->GeoipServices = $GeoipServices;
  46.         $this->router = $router;
  47.         $this->systemConfigService = $systemConfigService;
  48.     }
  50.     /**
  51.      * @return array[]
  52.      */
  53.     public static function getSubscribedEvents(): array
  54.     {
  55.         return [
  56.             KernelEvents::RESPONSE => ['isoCurrentUser', 9999],
  57.         ];
  58.     }
  60.     /**
  61.      * @param ResponseEvent $event
  62.      */
  63.     public function isoCurrentUser(ResponseEvent $event): void
  64.     {
  65.         // Escludi i sub-request interni di Symfony/Shopware (redirect lingua, dominio, ecc.)
  66.         // Senza questo check il guard intercetta redirect interni privi di SalesChannelContext
  67.         // → customer=null → loop infinito di redirect
  68.         if (!$event->isMainRequest()) {
  69.             return;
  70.         }
  72.         // Verifica che siamo in un contesto storefront
  73.         $salesChannelContext = $event->getRequest()->attributes->get(PlatformRequest::ATTRIBUTE_SALES_CHANNEL_CONTEXT_OBJECT);
  74.         if (!$salesChannelContext instanceof SalesChannelContext) {
  75.             return;
  76.         }
  78.         $salesChannel = $salesChannelContext->getSalesChannel();
  79.         if ($salesChannel === null) {
  80.             return;
  81.         }
  83.         $salesChannelId = $event->getRequest()->attributes->get('sw-sales-channel-id');
  84.         $salesChannelName = $salesChannel->getTranslated()['name'];
  86.         $currentDomain = $event->getRequest()->attributes->get(RequestTransformer::SALES_CHANNEL_BASE_URL);
  87.         $currentDomain = $currentDomain === '' ? '/it' : $currentDomain;
  88.         $currentUri    = $event->getRequest()->getRequestUri();
  89.         $currentRouteName = $event->getRequest()->attributes->get('_route');
  90.         $maindomain    = $event->getRequest()->attributes->get(RequestTransformer::SALES_CHANNEL_ABSOLUTE_BASE_URL);
  92.         // ---------------------------------------------------------------
  93.         // FLUSSO B2B
  94.         // Attivato quando il nome del sales channel contiene "B2B"
  95.         // ---------------------------------------------------------------
  96.         if (str_contains($salesChannelName, 'B2B')) {
  97.             $customer = $salesChannelContext->getCustomer();
  99.             if ($customer === null) {
  100.                 // ── Step 1: geo-detect per indirizzare al corretto store B2B ──
  101.                 // Usa un cookie dedicato (b2b_geodomain) per evitare lookup ad ogni richiesta.
  102.                 $b2bGeoPath = $event->getRequest()->cookies->get('b2b_geodomain');
  103.                 if ($b2bGeoPath === null) {
  104.                     $ip = $event->getRequest()->getClientIp();
  105.                     if ('127.0.0.1' === $ip) {
  106.                         $ip = '94.89.28.10'; // override sviluppo locale
  107.                     }
  108.                     $countryIso = $this->GeoipServices->ip2country($ip);
  109.                     $b2bGeoPath = $this->b2bDomainForCountry($countryIso ?? '');
  110.                 }
  112.                 // Se siamo sul percorso sbagliato → redirect al percorso geo-corretto
  113.                 // (il login guard entrerà poi in gioco sulla nuova URL)
  114.                 if ($currentDomain !== $b2bGeoPath) {
  115.                     $newUrl = $maindomain . $b2bGeoPath . $currentUri;
  116.                     $redirectResponse = new RedirectResponse($newUrl);
  117.                     $redirectResponse->headers->setCookie(Cookie::create('b2b_geodomain', $b2bGeoPath));
  118.                     $event->setResponse($redirectResponse);
  119.                     return;
  120.                 }
  122.                 // Sul percorso corretto: rinnova il cookie
  123.                 $event->getResponse()->headers->setCookie(Cookie::create('b2b_geodomain', $b2bGeoPath));
  125.                 // ── Step 2: login guard ──
  126.                 // Rotte pubbliche accessibili senza login nel B2B
  127.                 $allowedRoutes = [
  128.                     'frontend.home.page',
  129.                     'frontend.login',
  130.                     'frontend.account.login',              // POST login handler — CRITICO
  131.                     'frontend.account.login.page',         // GET pagina login
  132.                     'frontend.account.register.page',
  133.                     'frontend.account.register.save',      // POST registrazione
  134.                     'frontend.account.recover.page',
  135.                     'frontend.account.recover.password.page',
  136.                     'frontend.account.recover.request',
  137.                     'frontend.account.recover.password.reset',
  138.                 ];
  140.                 if (in_array($currentRouteName, $allowedRoutes, true)) {
  141.                     return;
  142.                 }
  144.                 // Richieste AJAX passano senza redirect
  145.                 if ($event->getRequest()->attributes->getBoolean('XmlHttpRequest', false)) {
  146.                     return;
  147.                 }
  149.                 // Utente non loggato su pagina protetta → redirect al login
  150.                 $event->setResponse(new RedirectResponse($this->router->generate('frontend.account.login.page')));
  151.                 return;
  152.             }
  154.             // Utente loggato: determina il sales channel dal customer group
  155.             $customerGroupId  = $customer->getGroupId();
  156.             $domainForCustomer = $this->domainForCustomer($customerGroupId);
  158.             if ($domainForCustomer !== false) {
  159.                 // Il gruppo ha un dominio associato → redirect se necessario
  160.                 if ($currentDomain !== $domainForCustomer) {
  161.                     $newUrl = $maindomain . $domainForCustomer . $currentUri;
  162.                     $event->setResponse(new RedirectResponse($newUrl));
  163.                 }
  164.                 return;
  165.             }
  167.             // Gruppo senza dominio specifico (es. amministratori) → account home
  168.             if ($currentRouteName !== 'frontend.account.home.page') {
  169.                 if ($event->getRequest()->attributes->getBoolean('XmlHttpRequest', false)) {
  170.                     return;
  171.                 }
  172.                 $event->setResponse(new RedirectResponse($this->router->generate('frontend.account.home.page')));
  173.             }
  175.             return;
  176.         }
  178.         // ---------------------------------------------------------------
  179.         // FLUSSO B2C
  180.         // Geo-redirect basato sull'IP dell'utente.
  181.         // Controllato dal flag "active" nel pannello admin (il flusso B2B
  182.         // gira sempre indipendentemente da questo toggle).
  183.         // ---------------------------------------------------------------
  184.         $isActive = $this->systemConfigService->getBool('EtrpCurrencyGeoIp.config.active', $salesChannelId);
  185.         if (!$isActive) {
  186.             return;
  187.         }
  189.         $ip = $event->getRequest()->getClientIp();
  190.         // Override per sviluppo locale
  191.         if ('127.0.0.1' === $ip) {
  192.             $ip = '94.89.28.10';
  193.         }
  195.         // Usa il cookie per evitare la geo-lookup ad ogni richiesta
  196.         $cookieset = $event->getRequest()->cookies->get('domainref');
  197.         if ($cookieset === null) {
  198.             $countryIso      = $this->GeoipServices->ip2country($ip);
  199.             $domainForCountry = $this->domainForCountry($countryIso ?? '');
  200.         } else {
  201.             $domainForCountry = $cookieset;
  202.         }
  204.         if ($currentDomain !== $domainForCountry) {
  205.             $newUrl = $maindomain . $domainForCountry . $currentUri;
  206.             // FIX: il cookie viene impostato sulla RedirectResponse stessa,
  207.             // altrimenti andrebbe perso quando la risposta originale viene sostituita
  208.             $redirectResponse = new RedirectResponse($newUrl);
  209.             $redirectResponse->headers->setCookie(Cookie::create('domainref', $domainForCountry));
  210.             $event->setResponse($redirectResponse);
  211.             return;
  212.         }
  214.         // Già sul dominio corretto: imposta/rinnova il cookie
  215.         $event->getResponse()->headers->setCookie(Cookie::create('domainref', $domainForCountry));
  216.     }
  218.     /**
  219.      * Restituisce il path del sales channel B2B in base al codice ISO del paese
  220.      * per utenti non ancora autenticati (geo-detect iniziale).
  221.      *
  222.      * - Italia    → /it   (b2b.alexmax.net/it  oppure root se prefix vuoto)
  223.      * - USA / CA  → /usa  (b2b.alexmax.net/usa)
  224.      * - Tutto il resto → /en (b2b.alexmax.net/en)
  225.      *
  226.      * @param string $country Codice ISO del paese (es. "IT", "US")
  227.      * @return string
  228.      */
  229.     public function b2bDomainForCountry(string $country): string
  230.     {
  231.         switch ($country) {
  232.             case 'IT':
  233.                 return '/it';
  234.             case 'US':
  235.             case 'CA':
  236.                 return '/usa';
  237.             default:
  238.                 return '/en';
  239.         }
  240.     }
  242.     /**
  243.      * Restituisce il path del sales channel in base al codice ISO del paese.
  244.      *
  245.      * @param string $country Codice ISO del paese (es. "IT", "GB", "US")
  246.      * @return string
  247.      */
  248.     public function domainForCountry(string $country): string
  249.     {
  250.         switch ($country) {
  251.             case 'GB':
  252.             case 'UK':
  253.                 return '/uk';
  254.             case 'US':
  255.             case 'CA':
  256.                 return '/usa';
  257.             case 'IT':
  258.                 return '/it';
  259.             default:
  260.                 return '/en';
  261.         }
  262.     }
  264.     /**
  265.      * Restituisce il path del sales channel in base al customer group ID B2B.
  266.      * Ritorna false se il gruppo non ha un dominio dedicato (es. gruppi admin/interni).
  267.      *
  268.      * @param string $categoryUser UUID del customer group
  269.      * @return string|false
  270.      */
  271.     public function domainForCustomer(string $categoryUser)
  272.     {
  273.         switch ($categoryUser) {
  274.             // Gruppi USA / DAP
  275.             case 'ce2c04e5fa89404ebc2b9f133a81e3e1': // B2B-DAP
  276.             case '0173864dfe1744ceb3fbc7dce2b843c6': // B2B-USA
  277.                 return '/usa';
  279.             // Gruppi Italia
  280.             case '8d37666518ff479c8453855c061e3571': // B2B-Italia
  281.             case 'e88dfa92e9e54de194cea0d5332f27ca': // B2B-ita-all
  282.             case '01a3a5fa086343d6bed217f542874213': // B2B-iva-sempre
  283.             case '6386fa194c64468197b076897e22f048': // B2B-Italia-alessia
  284.                 return '/it';
  286.             
  288.             // Gruppi Europa / World → canale inglese
  289.                 case '93275f3e244c424ca9594b8a5cdf93df':
  290.             case 'fd292a1f125e45ada94979f8dd10e720': // B2B-Europa
  291.             case '335c4ac7b66246b9b2fd85c0588c1d4b': // B2B-Europa-all ← aggiunto
  292.             case '4823802da3eb4d14bcf90baa57b63072': // B2B-World
  293.                 return '/en';
  295.             // Gruppi senza dominio dedicato (redirect ad account home)
  296.             case 'abd998f9c25a450fa64662348294d4a3': // B2B request
  297.             case '57fd39492c974bc3aaa4e3c6d635c903': // General
  298.             case '0ac146b10d064ceea5fe63032520d122': // Retailer
  299.                 return false;
  301.             default:
  302.                 return '/en';
  303.         }
  304.     }
  305. }