SixtyEightPublishers\User\Authentication\Csrf\CsrfTokenFactory

Complexity

Total Complexity

3

Size/Duplication

Total Lines	33
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	0

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	create()	0	12	2

<?php

declare(strict_types=1);

namespace SixtyEightPublishers\User\Authentication\Csrf;

use Nette;

final class CsrfTokenFactory implements ICsrfTokenFactory
{
	use Nette\SmartObject;

	/** @var \Nette\Http\Session  */
	private $session;

	/**
	 * @param \Nette\Http\Session $session
	 */
	public function __construct(Nette\Http\Session $session)
	{
		$this->session = $session;
	}

	/************** interface \SixtyEightPublishers\User\Authentication\Csrf\ICsrfTokenFactory **************/

	/**
	 * {@inheritdoc}
	 */
	public function create(string $component = ''): string
	{
		$section = $this->session->getSection(__CLASS__);

		if (!isset($session['token'])) {

The variable $session seems to never exist, and therefore isset should always return false. Did you maybe rename this variable?

			$section['token'] = Nette\Utils\Random::generate(10);
		}

		$hash = hash_hmac('sha1', $component . $this->session->getId(), $section['token'], TRUE);

		return str_replace(substr(base64_encode($hash), 0, 8), '/', '_');
	}
}