From ef8a55c5c91a3878d3973be3dccd9fbfc0aa60ff Mon Sep 17 00:00:00 2001
From: Laurent VOULLEMIER <laurent.voullemier@gmail.com>
Date: Wed, 3 May 2023 22:46:52 +0200
Subject: [PATCH] Add documentation to integrate middlewares

---
 Resources/doc/index.rst       |  1 +
 Resources/doc/middlewares.rst | 90 +++++++++++++++++++++++++++++++++++
 2 files changed, 91 insertions(+)
 create mode 100644 Resources/doc/middlewares.rst

diff --git a/Resources/doc/index.rst b/Resources/doc/index.rst
index f4bc0c18d..a96897086 100644
--- a/Resources/doc/index.rst
+++ b/Resources/doc/index.rst
@@ -10,4 +10,5 @@ configuration options, console commands and even a web debug toolbar collector.
     entity-listeners
     event-listeners
     custom-id-generators
+    middlewares
     configuration
diff --git a/Resources/doc/middlewares.rst b/Resources/doc/middlewares.rst
new file mode 100644
index 000000000..1b6138c5e
--- /dev/null
+++ b/Resources/doc/middlewares.rst
@@ -0,0 +1,90 @@
+Middlewares
+===========
+
+Doctrine DBAL supports middlewares. According to the `Doctrine documentation`_:
+
+    "A middleware sits in the middle between the wrapper components and the driver"
+
+They allows to decorates the following DBAL classes:
+
+- Doctrine\\DBAL\\Driver
+- Doctrine\\DBAL\\Driver\\Connection
+- Doctrine\\DBAL\\Driver\\Statement
+- Doctrine\\DBAL\\Driver\\Result
+
+Symfony, for instance, uses a middleware to harvest the queries executed by the current page and make them available in the profiler.
+
+.. _`Doctrine documentation`: https://www.doctrine-project.org/projects/doctrine-dbal/en/current/reference/architecture.html#middlewares
+
+You can also create your own middleware. This is an example of a (very) simple middleware that prevent database connection with the root user.
+The first step is to create the middleware:
+
+.. code-block:: php
+
+    <?php
+
+    namespace App\Middleware;
+
+    use Doctrine\DBAL\Driver;
+    use Doctrine\DBAL\Driver\Middleware;
+
+    class PreventRootConnectionMiddleware implements Middleware
+    {
+        public function wrap(Driver $driver): Driver
+        {
+            return new PreventRootConnectionDriver($driver);
+        }
+    }
+
+As you can see in the ``wrap`` method, middlewares principle is to decorate Doctrine objects with your own objects bearing the logic you need. Now, the connect method of the driver must be decorated in ``PreventRootConnectionDriver`` to prevent connection with the root user:
+
+.. code-block:: php
+
+    <?php
+
+    namespace App\Middleware;
+
+    use Doctrine\DBAL\Driver\Connection;
+    use Doctrine\DBAL\Driver\Middleware\AbstractDriverMiddleware;
+    use SensitiveParameter;
+
+    final class PreventRootConnectionDriver extends AbstractDriverMiddleware
+    {
+        public function connect(array $params): Connection
+        {
+            if (isset($params['user']) && $params['user'] === 'root') {
+                throw new \LogicException('Connecting database with root user is not allowed.');
+            }
+
+            return parent::connect($params);
+        }
+    }
+
+That's all ! Connection with the root user is not possible anymore. Note that ``connect`` is not the only method you can decorate in a ``Connection``. But thanks to the ``AbstractDriverMiddleware`` default implementation, you only need to decorate the methods for which you want to add some logic. Too see a more advanced example with a decoration of the ``Statement`` class, you can look at the middleware implementation starting in the class :class:`Symfony\\Bridge\\Doctrine\\Middleware\\Debug\\Middleware` of the Doctrine Bridge. Decorating the ``Result`` class follows the same principle.
+
+The middleware we've just created applies by default to all the connections. If your application has several dbal connections, you can limit the middleware scope to a subset of connections thanks to the ``AsMiddleware`` PHP attribute. Let's limit our middleware to a connection named ``legacy``:
+
+.. code-block:: php
+
+    <?php
+
+    namespace App\Middleware;
+
+    use Doctrine\Bundle\DoctrineBundle\Attribute\AsMiddleware;
+    use Doctrine\DBAL\Driver;
+    use Doctrine\DBAL\Driver\Middleware;
+
+    #[AsMiddleware(connections: ['legacy'])]
+    class PreventRootConnectionMiddleware implements Middleware
+    {
+        public function wrap(Driver $driver): Driver
+        {
+            return new PreventRootConnectionDriver($driver);
+        }
+    }
+
+All the examples presented above assume ``autoconfigure`` is enabled. If ``autoconfigure`` is disabled, the ``doctrine.middleware`` tag must be added to the middleware. This tag supports a ``connections`` attribute to limit the scope of the middleware.
+
+.. note::
+
+    Middlewares has been introduced in the version 3.2 of ``doctrine/dbal`` and at least the 2.6 version of ``doctrine/doctrine-bundle`` is needed to integrate them in Symfony as shown above.