Auth::setTenant() - Code Metrics - Inspection of "[3.x] New major release" - 24Slides/laravel-saml2 - Measure and Improve Code Quality continuously with Scrutinizer

Test Failed
Pull Request — master (#88)

by Artem
created 2024-04-13 17:29 UTC
Auth::setTenant() A

↳ Parent: Auth
Complexity

Conditions	1
Paths	1
Size

Total Lines	3
Code Lines	1
Duplication

Lines	0
Ratio	0 %
Code Coverage

Tests	0
CRAP Score	2
Importance

Changes
Metric	Value
cc	1
eloc	1
c	0
b	0
f	0
nc	1
nop	1
dl	0
loc	3
ccs	0
cts	2
cp	0
crap	2
rs	10
<?php

namespace Slides\Saml2;

use OneLogin\Saml2\Auth as OneLoginAuth;
use OneLogin\Saml2\Error as OneLoginError;
use Slides\Saml2\Contracts\IdentityProvidable;
use Slides\Saml2\Events\SignedOut;

class Auth
{
    /**
     * The base authentication handler.
     *
     * @var OneLoginAuth
     */
    protected OneLoginAuth $base;

    /**
     * The resolved tenant.
     *
     * @var IdentityProvidable
     */
    protected IdentityProvidable $idp;

    /**
     * Auth constructor.
     *
     * @param OneLoginAuth $auth
     * @param IdentityProvidable $idp
     */
    public function __construct(OneLoginAuth $auth, IdentityProvidable $idp)
    {
        $this->base = $auth;
        $this->idp = $idp;
    }

    /**
     * Checks whether a user is authenticated.
     *
     * @return bool
     */
    public function isAuthenticated(): bool
    {
        return $this->base->isAuthenticated();
    }

    /**
     * Create a SAML2 user.
     *
     * @return Saml2User
     */
    public function getSaml2User(): Saml2User
    {
        return new Saml2User($this->base, $this->idp);
    }

    /**
     * The ID of the last message processed.
     *
     * @return string
     */
    public function getLastMessageId(): string
    {
        return $this->base->getLastMessageId();
    }

    /**
     * Initiate a saml2 login flow.
     *
     * It will redirect! Before calling this, check if user is
     * authenticated (here in saml2). That would be true when the assertion was received this request.
     *
     * @param string|null $returnTo The target URL the user should be returned to after login.
     * @param array $parameters Extra parameters to be added to the GET
     * @param bool $forceAuthn When true the AuthNReuqest will set the ForceAuthn='true'
     * @param bool $isPassive When true the AuthNReuqest will set the Ispassive='true'
     * @param bool $stay True if we want to stay (returns the url string) False to redirect
     * @param bool $setNameIdPolicy When true the AuthNReuqest will set a nameIdPolicy element
     *
     * @return string|null If $stay is True, it return a string with the SLO URL + LogoutRequest + parameters
     *
     * @throws OneLoginError
     */
    public function login(
        string $returnTo = null,
        array $parameters = [],
        bool $forceAuthn = false,
        bool $isPassive = false,
        bool $stay = false,
        bool $setNameIdPolicy = true
    ): ?string
    {
        return $this->base->login($returnTo, $parameters, $forceAuthn, $isPassive, $stay, $setNameIdPolicy);
    }

    /**
     * Initiate a saml2 logout flow. It will close session on all other SSO services.
     * You should close local session if applicable.
     *
     * @param string|null $returnTo The target URL the user should be returned to after logout.
     * @param string|null $nameId The NameID that will be set in the LogoutRequest.
     * @param string|null $sessionIndex The SessionIndex (taken from the SAML Response in the SSO process).
     * @param string|null $nameIdFormat The NameID Format will be set in the LogoutRequest.
     * @param bool $stay True if we want to stay (returns the url string) False to redirect
     * @param string|null $nameIdNameQualifier The NameID NameQualifier will be set in the LogoutRequest.
     *
     * @return string|null If $stay is true, it returns a string with the SLO URL + LogoutRequest + parameters
     *
     * @throws OneLoginError
     */
    public function logout(
        string $returnTo = null,
        string $nameId = null,
        string $sessionIndex = null,
        string $nameIdFormat = null,
        bool $stay = false,
        string $nameIdNameQualifier = null
    ): ?string
    {
        $auth = $this->base;

        return $auth->logout($returnTo, [], $nameId, $sessionIndex, $stay, $nameIdFormat, $nameIdNameQualifier);
    }

    /**
     * Process the SAML Response sent by the IdP.
     *
     * @return array|null
     *
     * @throws OneLoginError
     * @throws \OneLogin\Saml2\ValidationError
     */
    public function acs(): ?array
    {
        $this->base->processResponse();

        $errors = $this->base->getErrors();

        if (!$errors) {
            return $errors;
        }

        if (!$this->base->isAuthenticated()) {
            return ['error' => 'Could not authenticate'];
        }

        return null;
    }

    /**
     * Process the SAML Logout Response / Logout Request sent by the IdP.
     *
     * Returns an array with errors if it cannot log out.
     *
     * @param bool $retrieveParametersFromServer
     *
     * @return array
     *
     * @throws \OneLogin\Saml2\Error
     */
    public function sls(bool $retrieveParametersFromServer = false): array
    {
        $this->base->processSLO(false, null, $retrieveParametersFromServer, function () {
            event(new SignedOut());
            event(new SignedOut());
        });

        $errors = $this->base->getErrors();

        return $errors;
    }

    /**
     * Get metadata about the local SP. Use this to configure your Saml2 IdP.
     *
     * @return string
     *
     * @throws \OneLogin\Saml2\Error
     * @throws \Exception
     * @throws \InvalidArgumentException If metadata is not correctly set
     */
    public function getMetadata(): string
    {
        $settings = $this->base->getSettings();
        $metadata = $settings->getSPMetadata();
        $errors = $settings->validateMetadata($metadata);

        if (!$errors) {
            return $metadata;
        }

        throw new \InvalidArgumentException(
            'Invalid SP metadata: ' . implode(', ', $errors),
            OneLoginError::METADATA_SP_INVALID
        );
    }

    /**
     * Get the last error reason from \OneLogin_Saml2_Auth, useful for error debugging.
     *
     * @return string|null
     */
    public function getLastErrorReason(): ?string
    {
        return $this->base->getLastErrorReason();
    }

    /**
     * Get the base authentication handler.
     *
     * @return OneLoginAuth
     */
    public function getBase(): OneLoginAuth
    {
        return $this->base;
    }

    /**
     * Set a tenant
     *
     * @param IdentityProvidable $idp
     *
     * @return void
     */
    public function setIdp(IdentityProvidable $idp)
    {
        $this->idp = $idp;
    }

    /**
     * Get a resolved tenant.
     *
     * @return IdentityProvidable|null
     */
    public function getIdp(): ?IdentityProvidable
    {
        return $this->idp;
    }
}

24Slides / laravel-saml2

Pull Request — master (#88)

Auth::setTenant() A

Complexity

Size

Duplication

Code Coverage

Importance

Duplication Side-by-Side

Filter issues like
