<?php
/**
 * Shopware 5
 * Copyright (c) shopware AG
 *
 * According to our dual licensing model, this program can be used either
 * under the terms of the GNU Affero General Public License, version 3,
 * or under a proprietary license.
 *
 * The texts of the GNU Affero General Public License with an additional
 * permission and of our proprietary license can be found at and
 * in the LICENSE file you have received along with this program.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Affero General Public License for more details.
 *
 * "Shopware" is a registered trademark of shopware AG.
 * The licensing of the program under the AGPLv3 does not imply a
 * trademark license. Therefore any rights, title and interest in
 * our trademarks remain entirely with us.
 */

class Shopware_Controllers_Frontend_Csrftoken extends Enlight_Controller_Action
{
    /**
     * Loads auth and script renderer resource
     */
    public function preDispatch()
    {
        $this->Front()->Plugins()->ViewRenderer()->setNoRender(true);
    }

    /**
     * Generates a token and fills the cookie and session
     */
    public function indexAction()
    {
        /** @var Enlight_Components_Session_Namespace $session */
        $session = Shopware()->Session();

        if (!$token = $session->offsetGet('X-CSRF-Token')) {
            $token = \Shopware\Components\Random::getAlphanumericString(30);
            $session->offsetSet('X-CSRF-Token', $token);
        }

        $this->Response()->setHeader('X-CSRF-Token', $token);
    }
}
