Merge branch 'release/2.0.0'

Classes/Annotations/ReadOnly.php

@@ -1,10 +1,12 @@
 <?php
 
+declare(strict_types=1);
+
 namespace DigiComp\FlowSessionLock\Annotations;
 
 /**
  * @Annotation
- * @Target("METHOD")
+ * @Target({"METHOD"})
  */
 final class ReadOnly
 {

Classes/Aspects/ReadOnlyAspect.php

@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace DigiComp\FlowSessionLock\Aspects;
 
 use DigiComp\FlowSessionLock\Http\SessionLockRequestComponent;
@@ -36,37 +38,43 @@ class ReadOnlyAspect
     /**
      * @Flow\Around("methodAnnotatedWith(DigiComp\FlowSessionLock\Annotations\ReadOnly) || filter(DigiComp\FlowSessionLock\Aspects\ReadOnlyFilter)")
      * @param JoinPointInterface $joinPoint
-     *
+     * @return mixed
-     * @return void
      */
     public function demoteLockToReadOnly(JoinPointInterface $joinPoint)
     {
-        $handler = $this->bootstrap->getActiveRequestHandler();
+        $activeRequestHandler = $this->bootstrap->getActiveRequestHandler();
-        if (! $handler instanceof HttpRequestHandlerInterface) {
+        if (!$activeRequestHandler instanceof HttpRequestHandlerInterface) {
-            $this->logger->debug(\get_class($handler));
+            $this->logger->debug('SessionLock: ' . \get_class($activeRequestHandler));
+
             return $joinPoint->getAdviceChain()->proceed($joinPoint);
         }
-        $componentContext = $handler->getComponentContext();
+
-        /** @var Lock $lock */
-        $lock = $componentContext->getParameter(SessionLockRequestComponent::class, 'sessionLock');
         $this->readOnly = true;
-        if ($lock) {
+
-            $this->logger->debug('SessionLock: Release, as this is marked read only');
+        /** @var Lock|null $lock */
+        $lock = $activeRequestHandler->getComponentContext()->getParameter(
+            SessionLockRequestComponent::class,
+            SessionLockRequestComponent::PARAMETER_NAME
+        );
+        if ($lock !== null) {
+            $this->logger->debug('SessionLock: Release, as this is marked read only.');
             $lock->release();
         }
+
         return $joinPoint->getAdviceChain()->proceed($joinPoint);
     }
 
     /**
      * @Flow\Around("method(Neos\Flow\Session\Session->shutdownObject())")
-     *
      * @param JoinPointInterface $joinPoint
+     * @return mixed|void
      */
     public function doNotSaveSession(JoinPointInterface $joinPoint)
     {
         if ($this->readOnly) {
             return;
         }
-        $joinPoint->getAdviceChain()->proceed($joinPoint);
+
+        return $joinPoint->getAdviceChain()->proceed($joinPoint);
     }
 }

Classes/Aspects/ReadOnlyFilter.php

@@ -1,12 +1,17 @@
 <?php
 
+declare(strict_types=1);
+
 namespace DigiComp\FlowSessionLock\Aspects;
 
 use Neos\Flow\Annotations as Flow;
 use Neos\Flow\Aop\Builder\ClassNameIndex;
+use Neos\Flow\Aop\Exception as NeosFlowAopException;
+use Neos\Flow\Aop\Exception\InvalidPointcutExpressionException;
 use Neos\Flow\Aop\Pointcut\PointcutFilterComposite;
 use Neos\Flow\Aop\Pointcut\PointcutFilterInterface;
 use Neos\Flow\Configuration\ConfigurationManager;
+use Neos\Flow\Configuration\Exception\InvalidConfigurationTypeException;
 use Neos\Flow\Security\Authorization\Privilege\Method\MethodTargetExpressionParser;
 
 /**
@@ -15,20 +20,32 @@ use Neos\Flow\Security\Authorization\Privilege\Method\MethodTargetExpressionPars
  */
 class ReadOnlyFilter implements PointcutFilterInterface
 {
+    /**
+     * @var ConfigurationManager
+     */
     protected ConfigurationManager $configurationManager;
 
+    /**
+     * @var MethodTargetExpressionParser
+     */
     protected MethodTargetExpressionParser $methodTargetExpressionParser;
 
     /**
      * @var PointcutFilterComposite[]
      */
-    protected ?array $filters = null;
+    protected ?array $pointcutFilterComposites = null;
 
+    /**
+     * @param ConfigurationManager $configurationManager
+     */
     public function injectConfigurationManager(ConfigurationManager $configurationManager): void
     {
         $this->configurationManager = $configurationManager;
     }
 
+    /**
+     * @param MethodTargetExpressionParser $methodTargetExpressionParser
+     */
     public function injectMethodTargetExpressionParser(MethodTargetExpressionParser $methodTargetExpressionParser): void
     {
         $this->methodTargetExpressionParser = $methodTargetExpressionParser;
@@ -36,31 +53,29 @@ class ReadOnlyFilter implements PointcutFilterInterface
 
     /**
      * @inheritDoc
+     * @throws InvalidConfigurationTypeException
+     * @throws InvalidPointcutExpressionException
+     * @throws NeosFlowAopException
      */
     public function matches($className, $methodName, $methodDeclaringClassName, $pointcutQueryIdentifier): bool
     {
-        if ($this->filters === null) {
         $this->buildPointcutFilters();
-        }
 
-        $matchingFilters = \array_filter(
+        foreach ($this->pointcutFilterComposites as $pointcutFilterComposite) {
-            $this->filters,
+            if (
-            function (PointcutFilterInterface $filter) use (
+                $pointcutFilterComposite->matches(
                     $className,
                     $methodName,
                     $methodDeclaringClassName,
                     $pointcutQueryIdentifier
-            ): bool {
+                )
-                return $filter->matches($className, $methodName, $methodDeclaringClassName, $pointcutQueryIdentifier);
+            ) {
-            }
-        );
-
-        if ($matchingFilters === []) {
-            return false;
-        }
-
                 return true;
             }
+        }
+
+        return false;
+    }
 
     /**
      * @inheritDoc
@@ -80,33 +95,47 @@ class ReadOnlyFilter implements PointcutFilterInterface
 
     /**
      * @inheritDoc
+     * @throws InvalidConfigurationTypeException
+     * @throws InvalidPointcutExpressionException
+     * @throws NeosFlowAopException
      */
     public function reduceTargetClassNames(ClassNameIndex $classNameIndex): ClassNameIndex
     {
-        if ($this->filters === null) {
         $this->buildPointcutFilters();
-        }
 
         $result = new ClassNameIndex();
-        foreach ($this->filters as $filter) {
+
-            $result->applyUnion($filter->reduceTargetClassNames($classNameIndex));
+        foreach ($this->pointcutFilterComposites as $pointcutFilterComposite) {
+            $result->applyUnion($pointcutFilterComposite->reduceTargetClassNames($classNameIndex));
         }
+
         return $result;
     }
 
+    /**
+     * @throws InvalidConfigurationTypeException
+     * @throws InvalidPointcutExpressionException
+     * @throws NeosFlowAopException
+     */
     protected function buildPointcutFilters(): void
     {
-        $this->filters = [];
+        if ($this->pointcutFilterComposites !== null) {
-        $readOnlyExpressions = $this->configurationManager->getConfiguration(
+            return;
+        }
+
+        $this->pointcutFilterComposites = [];
+        foreach (
+            $this->configurationManager->getConfiguration(
                 ConfigurationManager::CONFIGURATION_TYPE_SETTINGS,
                 'DigiComp.FlowSessionLock.readOnlyExpressions'
-        ) ?? [];
+            ) as $key => $pointcutExpression
-        foreach ($readOnlyExpressions as $key => $pointcut) {
+        ) {
-            if ($pointcut === null) {
+            if ($pointcutExpression === null) {
                 continue;
             }
-            $this->filters[] = $this->methodTargetExpressionParser->parse(
+
-                $pointcut,
+            $this->pointcutFilterComposites[] = $this->methodTargetExpressionParser->parse(
+                $pointcutExpression,
                 'Settings.yaml at "DigiComp.FlowSessionLock.readOnlyExpressions", key: "' . $key . '"'
             );
         }

Classes/Http/SessionLockRequestComponent.php

@@ -1,26 +1,22 @@
 <?php
 
+declare(strict_types=1);
+
 namespace DigiComp\FlowSessionLock\Http;
 
 use Neos\Flow\Annotations as Flow;
 use Neos\Flow\Http\Component\ComponentContext;
 use Neos\Flow\Http\Component\ComponentInterface;
-use Neos\Flow\Utility\Environment;
-use Neos\Utility\Files;
 use Psr\Log\LoggerInterface;
 use Symfony\Component\Lock\Key;
 use Symfony\Component\Lock\LockFactory;
 
 class SessionLockRequestComponent implements ComponentInterface
 {
-    /**
+    public const PARAMETER_NAME = 'sessionLock';
-     * @Flow\InjectConfiguration(package="Neos.Flow", path="session")
-     * @var array
-     */
-    protected $sessionSettings;
 
     /**
-     * @Flow\Inject(lazy=false)
+     * @Flow\Inject
      * @var LoggerInterface
      */
     protected $logger;
@@ -31,28 +27,42 @@ class SessionLockRequestComponent implements ComponentInterface
      */
     protected $lockFactory;
 
+    /**
+     * @Flow\InjectConfiguration(package="Neos.Flow", path="session")
+     * @var array
+     */
+    protected array $sessionSettings;
+
+    /**
+     * @Flow\InjectConfiguration(package="DigiComp.FlowSessionLock", path="timeToLive")
+     * @var float
+     */
+    protected float $timeToLive;
+
+    /**
+     * @Flow\InjectConfiguration(package="DigiComp.FlowSessionLock", path="autoRelease")
+     * @var bool
+     */
+    protected bool $autoRelease;
+
     /**
      * @inheritDoc
      */
-    public function handle(ComponentContext $componentContext)
+    public function handle(ComponentContext $componentContext): void
     {
         $sessionCookieName = $this->sessionSettings['name'];
-        $request = $componentContext->getHttpRequest();
-        $cookies = $request->getCookieParams();
 
+        $cookies = $componentContext->getHttpRequest()->getCookieParams();
         if (!isset($cookies[$sessionCookieName])) {
             return;
         }
 
-        $sessionIdentifier = $cookies[$sessionCookieName];
+        // TODO: sessionIdentifier might be wrong, probably it should probably be storage identifier
+        $key = new Key('session-' . $cookies[$sessionCookieName]);
 
-        $key = new Key(
+        $lock = $this->lockFactory->createLockFromKey($key, $this->timeToLive, $this->autoRelease);
-            'session-' . $sessionIdentifier
-        ); //TODO: sessionIdentifier might be wrong, probably it should probably be storage identifier
 
-        $lock = $this->lockFactory->createLockFromKey($key, 300, false);
+        $componentContext->setParameter(SessionLockRequestComponent::class, static::PARAMETER_NAME, $lock);
-
-        $componentContext->setParameter(SessionLockRequestComponent::class, 'sessionLock', $lock);
 
         $this->logger->debug('SessionLock: Get ' . $key);
         $lock->acquire(true);

Classes/Package.php

@@ -1,31 +0,0 @@
-<?php
-
-namespace DigiComp\FlowSessionLock;
-
-use Neos\Flow\Configuration\ConfigurationManager;
-use Neos\Flow\Core\Bootstrap;
-use Neos\Flow\Package\Package as BasePackage;
-use Neos\Utility\Files;
-
-class Package extends BasePackage
-{
-    public function boot(Bootstrap $bootstrap)
-    {
-        parent::boot($bootstrap);
-        $dispatcher = $bootstrap->getSignalSlotDispatcher();
-
-        $dispatcher->connect(
-            ConfigurationManager::class,
-            'configurationManagerReady',
-            function (ConfigurationManager $configurationManager) {
-                $lockStoreDir = $configurationManager->getConfiguration(
-                    ConfigurationManager::CONFIGURATION_TYPE_SETTINGS,
-                    'DigiComp.FlowSessionLock.lockStoreDir'
-                );
-                if (is_string($lockStoreDir)) {
-                    Files::createDirectoryRecursively($lockStoreDir);
-                }
-            }
-        );
-    }
-}

Configuration/Development/Settings.yaml

@@ -1,3 +1,3 @@
 DigiComp:
   FlowSessionLock:
-    lockStoreDir: '%FLOW_PATH_DATA%Temporary/Development/SessionLocks'
+    lockStoreConnection: "flock://%FLOW_PATH_DATA%Temporary/Development/SessionLocks/"

Configuration/Objects.yaml

@@ -1,12 +1,10 @@
 DigiComp.FlowSessionLock:LockFactory:
-  className: 'Symfony\Component\Lock\LockFactory'
+  className: "Symfony\\Component\\Lock\\LockFactory"
   arguments:
     1:
-      object: 'DigiComp.FlowSessionLock:LockStore'
+      object:
-
+        factoryObjectName: "Symfony\\Component\\Lock\\Store\\StoreFactory"
-DigiComp.FlowSessionLock:LockStore:
+        factoryMethodName: "createStore"
-  className: 'Symfony\Component\Lock\Store\FlockStore'
-  scope: 'singleton'
         arguments:
           1:
-      setting: 'DigiComp.FlowSessionLock.lockStoreDir'
+            setting: "DigiComp.FlowSessionLock.lockStoreConnection"

Configuration/Settings.yaml

@@ -1,3 +1,10 @@
+DigiComp:
+  FlowSessionLock:
+    lockStoreConnection: "flock://%FLOW_PATH_DATA%Temporary/Production/SessionLocks/"
+    timeToLive: 300.0
+    autoRelease: true
+    readOnlyExpressions: {}
+
 Neos:
   Flow:
     http:
@@ -5,10 +12,5 @@ Neos:
         preprocess:
           chain:
             lockSession:
-              position: 'before getSessionCookieFromRequest'
+              position: "before getSessionCookieFromRequest"
-              component: 'DigiComp\FlowSessionLock\Http\SessionLockRequestComponent'
+              component: "DigiComp\\FlowSessionLock\\Http\\SessionLockRequestComponent"
-
-DigiComp:
-  FlowSessionLock:
-    lockStoreDir: '%FLOW_PATH_DATA%Temporary/Production/SessionLocks'
-    readOnlyExpressions: []

Configuration/Testing/Settings.yaml

@@ -0,0 +1,3 @@
+DigiComp:
+  FlowSessionLock:
+    lockStoreConnection: "flock://%FLOW_PATH_DATA%Temporary/Testing/SessionLocks/"

README.md

@@ -1,13 +1,16 @@
 DigiComp.FlowSessionLock
 ------------------------
 
-By default the session established by Flow is not "protected" in any way.
+By default, the session established by Flow is not "protected" in any way. This package restricts every request to load
-This package restricts every request to load the session only, if there are no other requests having it in access currently.
+the session only, if there are no other requests having it in access currently. It allows to set custom pointcut which 
-It allows to set custom pointcut which will set the session in "ReadOnly" mode, which allows concurrent requests to read, but disallows the current request to write the session.
+will set the session in "ReadOnly" mode, which allows concurrent requests to read, but disallows the current request to 
+write the session.
 
-If you want to allow concurrent access somewhere, you can add your trigger pointcut in Settings.yaml like such:
+If you want to allow concurrent access somewhere, you can add your trigger pointcut in `Settings.yaml` like such:
 
-    DigiComp:
+```yaml
+DigiComp:
   FlowSessionLock:
     readOnlyExpressions:
-          'AcmeLock': 'method(Acme/SuperPackage/Controller/ConcurrentController->concurrentAction())'
+      MyLock: "method(My\\Package\\Controller\\MyController->myAction())"
+```

composer.json

@@ -1,25 +1,11 @@
 {
     "name": "digicomp/flowsessionlock",
+    "description": "Session locking for Neos Flow - it secures the session becoming corrupted by concurrent access to the same session by different requests",
     "type": "neos-package",
-    "description": "Sesion locking for Neos Flow - it secures the session becoming corrupted by concurrent access to the same session by different requests",
-    "keywords": [
-        "flow",
-        "neos"
-    ],
-    "authors": [
-        {
-            "name": "Ferdinand Kuhl",
-            "email": "f.kuhl@digital-competence.de",
-            "homepage": "http://www.digital-competence.de",
-            "role": "Developer"
-        }
-    ],
-    "license": "MIT",
-    "homepage": "https://github.com/digicomp/DigiComp.FlowSessionLock",
     "require": {
-        "neos/flow": "^6.2",
+        "neos/flow": "^6.3.0",
-        "php": "^7.4",
+        "php": ">=7.4",
-        "symfony/lock": "^5.2"
+        "symfony/lock": "^5.2.0"
     },
     "autoload": {
         "psr-4": {
@@ -31,7 +17,21 @@
             "package-key": "DigiComp.FlowSessionLock"
         },
         "branch-alias": {
-            "dev-develop": "1.0.x-dev"
+            "dev-develop": "2.0.x-dev"
         }
+    },
+    "authors": [
+        {
+            "name": "Ferdinand Kuhl",
+            "email": "f.kuhl@digital-competence.de",
+            "homepage": "https://www.digital-competence.de",
+            "role": "Developer"
         }
+    ],
+    "license": "MIT",
+    "homepage": "https://github.com/digital-competence/FlowSessionLock",
+    "keywords": [
+        "Neos",
+        "Flow"
+    ]
 }