This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | namespace Arrilot\Api\Skeleton; |
||
| 4 | |||
| 5 | use Illuminate\Http\Request; |
||
| 6 | use Illuminate\Routing\Controller as LaravelController; |
||
| 7 | use Illuminate\Support\Facades\Response; |
||
| 8 | use Illuminate\Support\Facades\Validator; |
||
| 9 | use League\Fractal\Manager; |
||
| 10 | use League\Fractal\Pagination\Cursor; |
||
| 11 | use League\Fractal\Resource\Collection; |
||
| 12 | use League\Fractal\Resource\Item; |
||
| 13 | use League\Fractal\Serializer\DataArraySerializer; |
||
| 14 | |||
| 15 | abstract class BaseController extends LaravelController |
||
| 16 | { |
||
| 17 | /** |
||
| 18 | * HTTP header status code. |
||
| 19 | * |
||
| 20 | * @var int |
||
| 21 | */ |
||
| 22 | protected $statusCode = 200; |
||
| 23 | |||
| 24 | /** |
||
| 25 | * Fractal Manager instance. |
||
| 26 | * |
||
| 27 | * @var Manager |
||
| 28 | */ |
||
| 29 | protected $fractal; |
||
| 30 | |||
| 31 | /** |
||
| 32 | * Eloquent model instance. |
||
| 33 | * |
||
| 34 | * @var \Illuminate\Database\Eloquent\Model; |
||
| 35 | */ |
||
| 36 | protected $model; |
||
| 37 | |||
| 38 | /** |
||
| 39 | * Fractal Transformer instance. |
||
| 40 | * |
||
| 41 | * @var \League\Fractal\TransformerAbstract |
||
| 42 | */ |
||
| 43 | protected $transformer; |
||
| 44 | |||
| 45 | /** |
||
| 46 | * Illuminate\Http\Request instance. |
||
| 47 | * |
||
| 48 | * @var Request |
||
| 49 | */ |
||
| 50 | protected $request; |
||
| 51 | |||
| 52 | /** |
||
| 53 | * Do we need to unguard the model before create/update? |
||
| 54 | * |
||
| 55 | * @var bool |
||
| 56 | */ |
||
| 57 | protected $unguard = false; |
||
| 58 | |||
| 59 | /** |
||
| 60 | * Number of items displayed at once if not specified. |
||
| 61 | * There is no limit if it is 0 or false. |
||
| 62 | * |
||
| 63 | * @var int|bool |
||
| 64 | */ |
||
| 65 | protected $defaultLimit = false; |
||
| 66 | |||
| 67 | /** |
||
| 68 | * Maximum limit that can be set via $_GET['limit']. |
||
| 69 | * |
||
| 70 | * @var int|bool |
||
| 71 | */ |
||
| 72 | protected $maximumLimit = false; |
||
| 73 | |||
| 74 | /** |
||
| 75 | * Resource key for an item. |
||
| 76 | * |
||
| 77 | * @var string |
||
| 78 | */ |
||
| 79 | protected $resourceKeySingular = 'data'; |
||
| 80 | |||
| 81 | /** |
||
| 82 | * Resource key for a collection. |
||
| 83 | * |
||
| 84 | * @var string |
||
| 85 | */ |
||
| 86 | protected $resourceKeyPlural = 'data'; |
||
| 87 | |||
| 88 | /** |
||
| 89 | * Constructor. |
||
| 90 | * |
||
| 91 | * @param Request $request |
||
| 92 | */ |
||
| 93 | public function __construct(Request $request) |
||
| 94 | { |
||
| 95 | $this->model = $this->model(); |
||
| 96 | $this->transformer = $this->transformer(); |
||
| 97 | |||
| 98 | $this->fractal = new Manager(); |
||
| 99 | $this->fractal->setSerializer($this->serializer()); |
||
| 100 | |||
| 101 | $this->request = $request; |
||
| 102 | |||
| 103 | if ($this->request->has('include')) { |
||
| 104 | $this->fractal->parseIncludes(camel_case($this->request->input('include'))); |
||
| 105 | } |
||
| 106 | } |
||
| 107 | |||
| 108 | /** |
||
| 109 | * Eloquent model. |
||
| 110 | * |
||
| 111 | * @return \Illuminate\Database\Eloquent\Model |
||
| 112 | */ |
||
| 113 | abstract protected function model(); |
||
| 114 | |||
| 115 | /** |
||
| 116 | * Transformer for the current model. |
||
| 117 | * |
||
| 118 | * @return \League\Fractal\TransformerAbstract |
||
| 119 | */ |
||
| 120 | abstract protected function transformer(); |
||
| 121 | |||
| 122 | /** |
||
| 123 | * Serializer for the current model. |
||
| 124 | * |
||
| 125 | * @return \League\Fractal\Serializer\SerializerAbstract |
||
| 126 | */ |
||
| 127 | protected function serializer() |
||
| 128 | { |
||
| 129 | return new DataArraySerializer(); |
||
| 130 | } |
||
| 131 | |||
| 132 | /** |
||
| 133 | * Display a listing of the resource. |
||
| 134 | * GET /api/{resource}. |
||
| 135 | * |
||
| 136 | * @return Response |
||
| 137 | */ |
||
| 138 | public function index() |
||
| 139 | { |
||
| 140 | $with = $this->getEagerLoad(); |
||
| 141 | $skip = (int) $this->request->input('skip', 0); |
||
| 142 | $limit = $this->calculateLimit(); |
||
| 143 | |||
| 144 | $items = $limit |
||
| 145 | ? $this->model->with($with)->skip($skip)->limit($limit)->get() |
||
| 146 | : $this->model->with($with)->get(); |
||
| 147 | |||
| 148 | return $this->respondWithCollection($items, $skip, $limit); |
||
| 149 | } |
||
| 150 | |||
| 151 | /** |
||
| 152 | * Store a newly created resource in storage. |
||
| 153 | * POST /api/{resource}. |
||
| 154 | * |
||
| 155 | * @return Response |
||
| 156 | */ |
||
| 157 | public function store() |
||
| 158 | { |
||
| 159 | $data = $this->request->json()->get($this->resourceKeySingular); |
||
| 160 | |||
| 161 | if (!$data) { |
||
| 162 | return $this->errorWrongArgs('Empty data'); |
||
| 163 | } |
||
| 164 | |||
| 165 | $validator = Validator::make($data, $this->rulesForCreate()); |
||
| 166 | if ($validator->fails()) { |
||
| 167 | return $this->errorWrongArgs($validator->messages()); |
||
|
0 ignored issues
–
show
|
|||
| 168 | } |
||
| 169 | |||
| 170 | $this->unguardIfNeeded(); |
||
| 171 | |||
| 172 | $item = $this->model->create($data); |
||
| 173 | |||
| 174 | return $this->respondWithItem($item); |
||
| 175 | } |
||
| 176 | |||
| 177 | /** |
||
| 178 | * Display the specified resource. |
||
| 179 | * GET /api/{resource}/{id}. |
||
| 180 | * |
||
| 181 | * @param int $id |
||
| 182 | * |
||
| 183 | * @return Response |
||
| 184 | */ |
||
| 185 | public function show($id) |
||
| 186 | { |
||
| 187 | $with = $this->getEagerLoad(); |
||
| 188 | |||
| 189 | $item = $this->findItem($id, $with); |
||
| 190 | if (!$item) { |
||
| 191 | return $this->errorNotFound(); |
||
| 192 | } |
||
| 193 | |||
| 194 | return $this->respondWithItem($item); |
||
| 195 | } |
||
| 196 | |||
| 197 | /** |
||
| 198 | * Update the specified resource in storage. |
||
| 199 | * PUT /api/{resource}/{id}. |
||
| 200 | * |
||
| 201 | * @param int $id |
||
| 202 | * |
||
| 203 | * @return Response |
||
| 204 | */ |
||
| 205 | public function update($id) |
||
| 206 | { |
||
| 207 | $data = $this->request->json()->get($this->resourceKeySingular); |
||
| 208 | |||
| 209 | if (!$data) { |
||
| 210 | return $this->errorWrongArgs('Empty data'); |
||
| 211 | } |
||
| 212 | |||
| 213 | $item = $this->findItem($id); |
||
| 214 | if (!$item) { |
||
| 215 | return $this->errorNotFound(); |
||
| 216 | } |
||
| 217 | |||
| 218 | $validator = Validator::make($data, $this->rulesForUpdate($item->id)); |
||
| 219 | if ($validator->fails()) { |
||
| 220 | return $this->errorWrongArgs($validator->messages()); |
||
|
0 ignored issues
–
show
The method
messages() does not seem to exist on object<Illuminate\Contracts\Validation\Validator>.
This check looks for calls to methods that do not seem to exist on a given type. It looks for the method on the type itself as well as in inherited classes or implemented interfaces. This is most likely a typographical error or the method has been renamed. Loading history...
|
|||
| 221 | } |
||
| 222 | |||
| 223 | $this->unguardIfNeeded(); |
||
| 224 | |||
| 225 | $item->fill($data); |
||
| 226 | $item->save(); |
||
| 227 | |||
| 228 | return $this->respondWithItem($item); |
||
| 229 | } |
||
| 230 | |||
| 231 | /** |
||
| 232 | * Remove the specified resource from storage. |
||
| 233 | * DELETE /api/{resource}/{id}. |
||
| 234 | * |
||
| 235 | * @param int $id |
||
| 236 | * |
||
| 237 | * @return Response |
||
| 238 | */ |
||
| 239 | public function destroy($id) |
||
| 240 | { |
||
| 241 | $item = $this->findItem($id); |
||
| 242 | |||
| 243 | if (!$item) { |
||
| 244 | return $this->errorNotFound(); |
||
| 245 | } |
||
| 246 | |||
| 247 | $item->delete(); |
||
| 248 | |||
| 249 | return response()->json(['message' => 'Deleted']); |
||
| 250 | } |
||
| 251 | |||
| 252 | /** |
||
| 253 | * Show the form for creating the specified resource. |
||
| 254 | * |
||
| 255 | * @return Response |
||
| 256 | */ |
||
| 257 | public function create() |
||
| 258 | { |
||
| 259 | return $this->errorNotImplemented(); |
||
| 260 | } |
||
| 261 | |||
| 262 | /** |
||
| 263 | * Show the form for editing the specified resource. |
||
| 264 | * |
||
| 265 | * @param int $id |
||
| 266 | * |
||
| 267 | * @return Response |
||
| 268 | */ |
||
| 269 | public function edit($id) |
||
| 270 | { |
||
| 271 | return $this->errorNotImplemented(); |
||
| 272 | } |
||
| 273 | |||
| 274 | /** |
||
| 275 | * Getter for statusCode. |
||
| 276 | * |
||
| 277 | * @return int |
||
| 278 | */ |
||
| 279 | protected function getStatusCode() |
||
| 280 | { |
||
| 281 | return $this->statusCode; |
||
| 282 | } |
||
| 283 | |||
| 284 | /** |
||
| 285 | * Setter for statusCode. |
||
| 286 | * |
||
| 287 | * @param int $statusCode Value to set |
||
| 288 | * |
||
| 289 | * @return self |
||
| 290 | */ |
||
| 291 | protected function setStatusCode($statusCode) |
||
| 292 | { |
||
| 293 | $this->statusCode = $statusCode; |
||
| 294 | |||
| 295 | return $this; |
||
| 296 | } |
||
| 297 | |||
| 298 | /** |
||
| 299 | * Respond with a given item. |
||
| 300 | * |
||
| 301 | * @param $item |
||
| 302 | * |
||
| 303 | * @return mixed |
||
| 304 | */ |
||
| 305 | protected function respondWithItem($item) |
||
| 306 | { |
||
| 307 | $resource = new Item($item, $this->transformer, $this->resourceKeySingular); |
||
| 308 | |||
| 309 | $rootScope = $this->prepareRootScope($resource); |
||
| 310 | |||
| 311 | return $this->respondWithArray($rootScope->toArray()); |
||
| 312 | } |
||
| 313 | |||
| 314 | /** |
||
| 315 | * Respond with a given collection. |
||
| 316 | * |
||
| 317 | * @param $collection |
||
| 318 | * @param int $skip |
||
| 319 | * @param int $limit |
||
| 320 | * |
||
| 321 | * @return mixed |
||
| 322 | */ |
||
| 323 | protected function respondWithCollection($collection, $skip = 0, $limit = 0) |
||
| 324 | { |
||
| 325 | $resource = new Collection($collection, $this->transformer, $this->resourceKeyPlural); |
||
| 326 | |||
| 327 | if ($limit) { |
||
| 328 | $cursor = new Cursor($skip, $skip + $limit, $collection->count()); |
||
| 329 | $resource->setCursor($cursor); |
||
| 330 | } |
||
| 331 | |||
| 332 | $rootScope = $this->prepareRootScope($resource); |
||
| 333 | |||
| 334 | return $this->respondWithArray($rootScope->toArray()); |
||
| 335 | } |
||
| 336 | |||
| 337 | /** |
||
| 338 | * Respond with a given array of items. |
||
| 339 | * |
||
| 340 | * @param array $array |
||
| 341 | * @param array $headers |
||
| 342 | * |
||
| 343 | * @return mixed |
||
| 344 | */ |
||
| 345 | protected function respondWithArray(array $array, array $headers = []) |
||
| 346 | { |
||
| 347 | return response()->json($array, $this->statusCode, $headers); |
||
| 348 | } |
||
| 349 | |||
| 350 | /** |
||
| 351 | * Response with the current error. |
||
| 352 | * |
||
| 353 | * @param string $message |
||
| 354 | * |
||
| 355 | * @return mixed |
||
| 356 | */ |
||
| 357 | protected function respondWithError($message) |
||
| 358 | { |
||
| 359 | return $this->respondWithArray([ |
||
| 360 | 'error' => [ |
||
| 361 | 'http_code' => $this->statusCode, |
||
| 362 | 'message' => $message, |
||
| 363 | ], |
||
| 364 | ]); |
||
| 365 | } |
||
| 366 | |||
| 367 | /** |
||
| 368 | * Prepare root scope and set some meta information. |
||
| 369 | * |
||
| 370 | * @param Item|Collection $resource |
||
| 371 | * |
||
| 372 | * @return \League\Fractal\Scope |
||
| 373 | */ |
||
| 374 | protected function prepareRootScope($resource) |
||
| 375 | { |
||
| 376 | $resource->setMetaValue('available_includes', $this->transformer->getAvailableIncludes()); |
||
| 377 | $resource->setMetaValue('default_includes', $this->transformer->getDefaultIncludes()); |
||
| 378 | |||
| 379 | return $this->fractal->createData($resource); |
||
| 380 | } |
||
| 381 | |||
| 382 | /** |
||
| 383 | * Get the validation rules for create. |
||
| 384 | * |
||
| 385 | * @return array |
||
| 386 | */ |
||
| 387 | protected function rulesForCreate() |
||
| 388 | { |
||
| 389 | return []; |
||
| 390 | } |
||
| 391 | |||
| 392 | /** |
||
| 393 | * Get the validation rules for update. |
||
| 394 | * |
||
| 395 | * @param int $id |
||
| 396 | * |
||
| 397 | * @return array |
||
| 398 | */ |
||
| 399 | protected function rulesForUpdate($id) |
||
| 400 | { |
||
| 401 | return []; |
||
| 402 | } |
||
| 403 | |||
| 404 | /** |
||
| 405 | * Generate a Response with a 403 HTTP header and a given message. |
||
| 406 | * |
||
| 407 | * @param $message |
||
| 408 | * |
||
| 409 | * @return Response |
||
| 410 | */ |
||
| 411 | protected function errorForbidden($message = 'Forbidden') |
||
| 412 | { |
||
| 413 | return $this->setStatusCode(403)->respondWithError($message); |
||
| 414 | } |
||
| 415 | |||
| 416 | /** |
||
| 417 | * Generate a Response with a 500 HTTP header and a given message. |
||
| 418 | * |
||
| 419 | * @param string $message |
||
| 420 | * |
||
| 421 | * @return Response |
||
| 422 | */ |
||
| 423 | protected function errorInternalError($message = 'Internal Error') |
||
| 424 | { |
||
| 425 | return $this->setStatusCode(500)->respondWithError($message); |
||
| 426 | } |
||
| 427 | |||
| 428 | /** |
||
| 429 | * Generate a Response with a 404 HTTP header and a given message. |
||
| 430 | * |
||
| 431 | * @param string $message |
||
| 432 | * |
||
| 433 | * @return Response |
||
| 434 | */ |
||
| 435 | protected function errorNotFound($message = 'Resource Not Found') |
||
| 436 | { |
||
| 437 | return $this->setStatusCode(404)->respondWithError($message); |
||
| 438 | } |
||
| 439 | |||
| 440 | /** |
||
| 441 | * Generate a Response with a 401 HTTP header and a given message. |
||
| 442 | * |
||
| 443 | * @param string $message |
||
| 444 | * |
||
| 445 | * @return Response |
||
| 446 | */ |
||
| 447 | protected function errorUnauthorized($message = 'Unauthorized') |
||
| 448 | { |
||
| 449 | return $this->setStatusCode(401)->respondWithError($message); |
||
| 450 | } |
||
| 451 | |||
| 452 | /** |
||
| 453 | * Generate a Response with a 400 HTTP header and a given message. |
||
| 454 | * |
||
| 455 | * @param string$message |
||
| 456 | * |
||
| 457 | * @return Response |
||
| 458 | */ |
||
| 459 | protected function errorWrongArgs($message = 'Wrong Arguments') |
||
| 460 | { |
||
| 461 | return $this->setStatusCode(400)->respondWithError($message); |
||
| 462 | } |
||
| 463 | |||
| 464 | /** |
||
| 465 | * Generate a Response with a 501 HTTP header and a given message. |
||
| 466 | * |
||
| 467 | * @param string $message |
||
| 468 | * |
||
| 469 | * @return Response |
||
| 470 | */ |
||
| 471 | protected function errorNotImplemented($message = 'Not implemented') |
||
| 472 | { |
||
| 473 | return $this->setStatusCode(501)->respondWithError($message); |
||
| 474 | } |
||
| 475 | |||
| 476 | /** |
||
| 477 | * Specify relations for eager loading. |
||
| 478 | * |
||
| 479 | * @return array |
||
| 480 | */ |
||
| 481 | protected function getEagerLoad() |
||
| 482 | { |
||
| 483 | $include = camel_case($this->request->input('include', '')); |
||
| 484 | $includes = explode(',', $include); |
||
| 485 | $includes = array_filter($includes); |
||
| 486 | |||
| 487 | return $includes ?: []; |
||
| 488 | } |
||
| 489 | |||
| 490 | /** |
||
| 491 | * Get item according to mode. |
||
| 492 | * |
||
| 493 | * @param int $id |
||
| 494 | * @param array $with |
||
| 495 | * |
||
| 496 | * @return mixed |
||
| 497 | */ |
||
| 498 | protected function findItem($id, array $with = []) |
||
| 499 | { |
||
| 500 | if ($this->request->has('use_as_id')) { |
||
| 501 | return $this->model->with($with)->where($this->request->input('use_as_id'), '=', $id)->first(); |
||
| 502 | } |
||
| 503 | |||
| 504 | return $this->model->with($with)->find($id); |
||
| 505 | } |
||
| 506 | |||
| 507 | /** |
||
| 508 | * Unguard eloquent model if needed. |
||
| 509 | */ |
||
| 510 | protected function unguardIfNeeded() |
||
| 511 | { |
||
| 512 | if ($this->unguard) { |
||
| 513 | $this->model->unguard(); |
||
| 514 | } |
||
| 515 | } |
||
| 516 | |||
| 517 | /** |
||
| 518 | * Calculates limit for a number of items displayed in list. |
||
| 519 | * |
||
| 520 | * @return int |
||
| 521 | */ |
||
| 522 | protected function calculateLimit() |
||
| 523 | { |
||
| 524 | $limit = (int) $this->request->input('limit', $this->defaultLimit); |
||
| 525 | |||
| 526 | return ($this->maximumLimit && $this->maximumLimit < $limit) ? $this->maximumLimit : $limit; |
||
| 527 | } |
||
| 528 | } |
This check looks for calls to methods that do not seem to exist on a given type. It looks for the method on the type itself as well as in inherited classes or implemented interfaces.
This is most likely a typographical error or the method has been renamed.