CartLoadRoute is called with unauthenticated SalesChannelContext via CacheResponseSubscriber after LoginRoute about shopware

[shopware-issue-bot]

We found the following existing issues which may help or are related to your topic:

• SalesChannelRequestContextResolver does not resolve logged user after xhr request
• Unnecessary memoize cache for sales channel context in SalesChannelRequestContextResolver
• Loses Session in store-api/register route
• After logging out customer_id is now set to NULL in the sales_channel_api_context table
• CartPersister::load has unnecessary sales channel context requirement
• SalesChannel API guest-order does not login customer correctly
• refactor: Cleanup internals of SalesChannelRequestContextResolver
• [GitHub] refactor: Cleanup internals of SalesChannelRequestContextResolver
• Cookie-Consent for single Saleschannel doesn't work
• HandlePaymentMethodRoute does not contain correct RedirectResponse

[shyim]

Maybe we need to move this into the Login Route? 🤔

shopware/src/Storefront/Controller/AuthController.php

Lines 164 to 176 in 3ba890a

	$newContext = $this->salesChannelContextService->get(
	new SalesChannelContextServiceParameters(
	$context->getSalesChannelId(),
	$token,
	$context->getLanguageId(),
	$context->getCurrencyId(),
	$context->getDomainId(),
	$context->getContext()
	)
	);
	// Update the sales channel context for CacheResponseSubscriber
	$request->attributes->set(PlatformRequest::ATTRIBUTE_SALES_CHANNEL_CONTEXT_OBJECT, $newContext);

[nyze2oo9]

I can confirm, that it work with a RouteDecorator for the LoginRoute

  #[Route(path: '/store-api/account/login', name: 'store-api.account.login', methods: ['POST'])]
  public function login(RequestDataBag $data, SalesChannelContext $context): ContextTokenResponse
  {
    $result = $this->decorated->login($data, $context);

    $newContext = $this->salesChannelContextService->get(
      new SalesChannelContextServiceParameters(
        $context->getSalesChannelId(),
        $result->getToken(),
        $context->getLanguageId(),
        $context->getCurrencyId(),
        $context->getDomainId(),
        $context->getContext()
      )
    );
    $request = $this->requestStack->getCurrentRequest();
    $request->attributes->set(PlatformRequest::ATTRIBUTE_SALES_CHANNEL_CONTEXT_OBJECT, $newContext);

    return $result;
  }

One thing I don't like is the fact that I had to inject the RequestStack into the decorator because the login method only gets passed the RequestDataBag.

If desired, I can work on a PR in the next few days to get this fix into the original route and get rid of the decorator?

[shyim]

sounds good :)

I would also check that getCurrentRequest is not null, before using it