src/Controller/WebhookController.php line 70

Open in your IDE?
  1. <?php
  3. namespace App\Controller;
  5. use App\Service\DoceboLearnerSync;
  6. use Psr\Log\LoggerInterface;
  7. use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
  8. use Symfony\Component\HttpFoundation\JsonResponse;
  9. use Symfony\Component\HttpFoundation\Request;
  10. use Symfony\Component\Routing\Annotation\Route;
  12. /**
  13. * Webhooks Docebo
  14. */
  15. class WebhookController extends AbstractController
  16. {
  17. private $syncUser;
  18. private $syncPassword;
  20. public function __construct(string $syncUser, string $syncPassword)
  21. {
  22. $this->syncUser = $syncUser;
  23. $this->syncPassword = $syncPassword;
  24. }
  26. /**
  27. * Webhook Docebo "sync-users-in-dash-app" : branch.user.added / branch.user.removed / user.updated / user.created / branch.created
  28. *
  29. * @Route("/sync-learners", name="sync_learners", methods={"POST"})
  30. */
  31. public function syncLearners(Request $request, DoceboLearnerSync $sync, LoggerInterface $logger)
  32. {
  33. if (!$this->isAuthorized($request)) {
  34. return new JsonResponse(['success' => false, 'message' => 'Unauthorized'], 401, ['WWW-Authenticate' => 'Basic realm="sync-learners"']);
  35. }
  37. $data = json_decode($request->getContent(), true);
  39. if (!is_array($data) || empty($data['event'])) {
  40. return new JsonResponse(['success' => false, 'message' => 'Invalid payload'], 400);
  41. }
  43. $event = $data['event'];
  44. $required = [
  45. 'branch.user.added' => ['user_id', 'branch_id'],
  46. 'branch.user.removed' => ['user_id', 'branch_id'],
  47. 'user.updated' => ['user_id'],
  48. 'user.created' => ['user_id'],
  49. 'branch.created' => ['branch_id'],
  50. ];
  51. $items = $data['payloads'] ?? [$data['payload'] ?? null];
  52. $results = [];
  54. try {
  55. foreach ($items as $item) {
  56. if (!is_array($item) || !$this->hasRequired($item, $required[$event] ?? [])
  57. || ($event === 'branch.created' && !isset($item['parent_id']))) {
  58. $results[] = ['status' => 'invalid_item'];
  59. continue;
  60. }
  62. switch ($event) {
  63. case 'branch.user.added':
  64. $results[] = $sync->addToBranch((int) $item['user_id'], (int) $item['branch_id'], $item['username'] ?? null);
  65. break;
  66. case 'branch.user.removed':
  67. $results[] = $sync->removeFromBranch((int) $item['user_id'], (int) $item['branch_id']);
  68. break;
  69. case 'user.updated':
  70. $results[] = $sync->updateUser((int) $item['user_id'], $item);
  71. break;
  72. case 'user.created':
  73. $results[] = $sync->createUser((int) $item['user_id'], $item);
  74. break;
  75. case 'branch.created':
  76. $results[] = $sync->branchCreated((int) $item['branch_id'], (int) $item['parent_id'], $item['code'] ?? null, $item['name'] ?? null);
  77. break;
  78. default:
  79. $results[] = ['status' => 'ignored'];
  80. break;
  81. }
  82. }
  83. } catch (\Throwable $e) {
  84. $logger->error('[sync-learners] ' . $e->getMessage(), [
  85. 'event' => $event,
  86. 'message_id' => $data['message_id'] ?? null,
  87. 'exception' => $e,
  88. ]);
  90. return new JsonResponse(['success' => false, 'message' => 'Internal error'], 500);
  91. }
  93. return new JsonResponse([
  94. 'success' => true,
  95. 'event' => $event,
  96. 'message_id' => $data['message_id'] ?? null,
  97. 'results' => $results,
  98. ]);
  99. }
  101. private function hasRequired(array $item, array $fields): bool
  102. {
  103. foreach ($fields as $field) {
  104. if (empty($item[$field])) {
  105. return false;
  106. }
  107. }
  109. return true;
  110. }
  112. private function isAuthorized(Request $request): bool
  113. {
  114. if ($this->syncUser === '' || $this->syncPassword === '') {
  115. return false;
  116. }
  118. $user = $request->getUser();
  119. $password = $request->getPassword();
  121. // Fallback si PHP_AUTH_USER n'est pas renseigné (CGI / proxy)
  122. if ($user === null) {
  123. $header = $request->headers->get('Authorization', '');
  124. if (stripos($header, 'Basic ') === 0) {
  125. $decoded = base64_decode(substr($header, 6), true);
  126. if ($decoded !== false && strpos($decoded, ':') !== false) {
  127. list($user, $password) = explode(':', $decoded, 2);
  128. }
  129. }
  130. }
  132. return hash_equals($this->syncUser, (string) $user) && hash_equals($this->syncPassword, (string) $password);
  133. }
  134. }