Merge pull request #2 from ecphp/1-handle-ajax-requests

#1: Detect when the request is AJAX and respond using a JSON response.

spec/EcPhp/CasBundle/Security/CasGuardAuthenticatorSpec.php

@@ -14,8 +14,10 @@
 use Nyholm\Psr7\ServerRequest;
 use PhpSpec\ObjectBehavior;
 use Psr\Log\NullLogger;
+use Symfony\Bridge\PsrHttpMessage\Factory\HttpFoundationFactory;
 use Symfony\Component\Cache\Adapter\ArrayAdapter;
 use Symfony\Component\HttpClient\Psr18Client;
+use Symfony\Component\HttpFoundation\JsonResponse;
 use Symfony\Component\HttpFoundation\RedirectResponse;
 use Symfony\Component\HttpFoundation\Request;
 use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
@@ -122,6 +124,19 @@ public function it_can_check_the_credentials(UserInterface $user)
             ->during('checkCredentials', [$response, $user]);
     }
 
+    public function it_can_detect_when_the_request_is_an_ajax_request_and_respond_accordingly()
+    {
+        $request = new ServerRequest(
+            'GET',
+            'http://app/?ticket=ticket',
+            ['X-Requested-With' => 'XMLHttpRequest']
+        );
+
+        $this
+            ->start((new HttpFoundationFactory())->createRequest($request))
+            ->shouldBeAnInstanceOf(JsonResponse::class);
+    }
+
     public function it_can_get_the_user_from_the_response()
     {
         $body = <<< 'EOF'

src/Security/CasGuardAuthenticator.php

@@ -12,8 +12,10 @@
 use InvalidArgumentException;
 use Psr\Http\Message\ServerRequestFactoryInterface;
 use Psr\Http\Message\UriFactoryInterface;
+use Symfony\Component\HttpFoundation\JsonResponse;
 use Symfony\Component\HttpFoundation\RedirectResponse;
 use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Response;
 use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
 use Symfony\Component\Security\Core\Exception\AuthenticationException;
 use Symfony\Component\Security\Core\User\UserInterface;
@@ -169,6 +171,13 @@ public function onLogoutSuccess(Request $request)
      */
     public function start(Request $request, ?AuthenticationException $authException = null)
     {
+        if (true === $request->isXmlHttpRequest()) {
+            return new JsonResponse(
+                ['message' => 'Authentication required'],
+                Response::HTTP_UNAUTHORIZED
+            );
+        }
+
         return new RedirectResponse(
             $this
                 ->cas