authentication.php

<?php
 
 
namespace Bitrix\Main\Engine\ActionFilter;
 
 
use Bitrix\Main\Context;
use Bitrix\Main\Error;
use Bitrix\Main\Event;
use Bitrix\Main\EventResult;
use Bitrix\Main\Localization\Loc;
 
final class Authentication extends Base
{
    const ERROR_INVALID_AUTHENTICATION = 'invalid_authentication';
 
    private $enableRedirect;
 
    public function __construct($enableRedirect = false)
    {
        $this->enableRedirect = $enableRedirect;
        parent::__construct();
    }
 
    public function onBeforeAction(Event $event)
    {
        global $USER;
 
        if (!($USER instanceof \CUser) || !$USER->getId())
        {
            $isAjax = $this->getAction()->getController()->getRequest()->getHeader('BX-Ajax');
            if ($this->enableRedirect && !$isAjax)
            {
                LocalRedirect(
                    SITE_DIR .
                    'auth/?backurl=' .
                    urlencode(\Bitrix\Main\Application::getInstance()->getContext()->getRequest()->getRequestUri())
                );
 
                return new EventResult(EventResult::ERROR, null, null, $this);
            }
 
            Context::getCurrent()->getResponse()->setStatus(401);
            $this->addError(new Error(
                Loc::getMessage("MAIN_ENGINE_FILTER_AUTHENTICATION_ERROR"), self::ERROR_INVALID_AUTHENTICATION)
            );
 
            return new EventResult(EventResult::ERROR, null, null, $this);
        }
 
        return null;
    }
}