Http\Rest\CORSMiddleware

Complexity

Total Complexity

7

Size/Duplication

Total Lines	52
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	1

Importance

Changes	1
Bugs	0	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	11	1
B	__invoke()	0	34	6

<?php
namespace Http\Rest;

use \Psr\Http\Message\ServerRequestInterface as Request;
use \Psr\Http\Message\ResponseInterface as Response;

require 'vendor/autoload.php';

class CORSMiddleware
{
    protected $container;
    protected $allowedOrigins;

    public function __construct($c)
    {
        $settings = \Settings::getInstance();
        $this->container = $c;
        $this->allowedOrigins = array(
            $settings->getGlobalSetting('www_url', 'https://www.burningflipside.com'),
            $settings->getGlobalSetting('wiki_url', 'https://wiki.burningflipside.com'),
            $settings->getGlobalSetting('profiles_url', 'https://profiles.burningflipside.com'),
            $settings->getGlobalSetting('secure_url', 'https://secure.burningflipside.com')
        );
    }

    public function __invoke($request, $response, $next)
    {
        $route = $request->getAttribute("route");
        $methods = [];

        if(!empty($route))
        {
            $pattern = $route->getPattern();
            foreach($this->container->router->getRoutes() as $route)
            {
                if($pattern === $route->getPattern())
                {
                    $methods = array_merge_recursive($methods, $route->getMethods());
                }
            }
        }
        else
        {
            array_push($methods, $request->getMethod());
        }
        $response = $next($request, $response);
        $origin = $request->getHeaderLine('origin');
        if($origin === '')
        {
            return $response;
        }
        if(in_array($origin, $this->allowedOrigins))
        {
            $response = $response->withHeader('Access-Control-Allow-Origin', $origin);
            $response = $response->withHeader('Access-Control-Allow-Credentials', 'true');
        }
        $response = $response->withHeader('Access-Control-Allow-Headers', 'Authorization,Cookie,apikey');
        return $response->withHeader("Access-Control-Allow-Methods", implode(",", $methods));
    }
}