App\Middleware\VerifyCsrfToken

Complexity

Total Complexity

5

Size/Duplication

Total Lines	25
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	handle()	0	4	2
A	__construct()	0	3	1
A	getToken()	0	4	1
A	isCsrfTokenValid()	0	3	1

<?php

declare(strict_types=1);

namespace App\Middleware;

use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\Security\Csrf\CsrfToken;
use Symfony\Component\Security\Csrf\CsrfTokenManagerInterface;
use Symfony\Component\Security\Csrf\Exception\TokenNotFoundException;

final class VerifyCsrfToken
{
    private CsrfTokenManagerInterface $tokenManager;

    public function __construct(CsrfTokenManagerInterface $tokenManager)
    {
        $this->tokenManager = $tokenManager;
    }

    public function handle(Request $request): void
    {
        if (!$this->isCsrfTokenValid($this->getToken($request))) {
            throw new TokenNotFoundException('Sorry, your session has expired. Please refresh and try again.');
        }
    }

    private function isCsrfTokenValid(?string $token): bool
    {
        return $this->tokenManager->isTokenValid(new CsrfToken('csrf_token', $token));
    }

    private function getToken(Request $request)
    {
        return $request->query->get('csrf_token')
            ?? $request->get('csrf_token');
    }
}