ControleOnline\Security\TokenAuthenticator

Complexity

Total Complexity

10

Size/Duplication

Total Lines	65
Duplicated Lines	0 %

Importance

Changes	3
Bugs	0	Features	0

9 Methods

Rating	Name	Duplication	Size	Complexity
A	authenticate()	0	16	2
A	__construct()	0	3	1
A	supports()	0	3	1
A	createAuthenticatedToken()	0	4	1
A	getKey()	0	3	1
A	onAuthenticationFailure()	0	4	1
A	start()	0	4	1
A	onAuthenticationSuccess()	0	3	1
A	createToken()	0	3	1

<?php

namespace ControleOnline\Security;

use ControleOnline\Entity\User;
use Doctrine\ORM\EntityManagerInterface;

The type Doctrine\ORM\EntityManagerInterface was not found. Maybe you did not declare it correctly or list all dependencies?

use Symfony\Component\HttpFoundation\JsonResponse;

The type Symfony\Component\HttpFoundation\JsonResponse was not found. Maybe you did not declare it correctly or list all dependencies?

use Symfony\Component\HttpFoundation\Request;

The type Symfony\Component\HttpFoundation\Request was not found. Maybe you did not declare it correctly or list all dependencies?

use Symfony\Component\HttpFoundation\Response;

The type Symfony\Component\HttpFoundation\Response was not found. Maybe you did not declare it correctly or list all dependencies?

use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;

The type Symfony\Component\Security\Core\Authentication\Token\TokenInterface was not found. Maybe you did not declare it correctly or list all dependencies?

use Symfony\Component\Security\Core\Exception\AuthenticationException;

The type Symfony\Component\Security\Core\Exception\AuthenticationException was not found. Maybe you did not declare it correctly or list all dependencies?

use Symfony\Component\Security\Core\Exception\CustomUserMessageAuthenticationException;

The type Symfony\Component\Security\Core\Exception\CustomUserMessageAuthenticationException was not found. Maybe you did not declare it correctly or list all dependencies?

use Symfony\Component\Security\Core\User\UserInterface;

The type Symfony\Component\Security\Core\User\UserInterface was not found. Maybe you did not declare it correctly or list all dependencies?

use Symfony\Component\Security\Core\User\UserProviderInterface;

The type Symfony\Component\Security\Core\User\UserProviderInterface was not found. Maybe you did not declare it correctly or list all dependencies?

use Symfony\Component\Security\Http\Authenticator\AuthenticatorInterface;

The type Symfony\Component\Security\Http\Authenticator\AuthenticatorInterface was not found. Maybe you did not declare it correctly or list all dependencies?

use Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge;

The type Symfony\Component\Security\Http\Authenticator\Passport\Badge\UserBadge was not found. Maybe you did not declare it correctly or list all dependencies?

use Symfony\Component\Security\Http\Authenticator\Passport\Credentials\CustomCredentials;

The type Symfony\Component\Security\Http\Authenticator\Passport\Credentials\CustomCredentials was not found. Maybe you did not declare it correctly or list all dependencies?

use Symfony\Component\Security\Http\Authenticator\Passport\Passport;

The type Symfony\Component\Security\Http\Authenticator\Passport\Passport was not found. Maybe you did not declare it correctly or list all dependencies?

use Symfony\Component\Security\Http\EntryPoint\AuthenticationEntryPointInterface;

The type Symfony\Component\Security\Http\EntryPoint\AuthenticationEntryPointInterface was not found. Maybe you did not declare it correctly or list all dependencies?

use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;

The type Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface was not found. Maybe you did not declare it correctly or list all dependencies?

use Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken;

The type Symfony\Component\Security\Core\Authentication\Token\UsernamePasswordToken was not found. Maybe you did not declare it correctly or list all dependencies?

class TokenAuthenticator implements AuthenticatorInterface, AuthenticationEntryPointInterface
{
    private TokenStorageInterface $tokenStorage;

    public function __construct(private EntityManagerInterface $em, TokenStorageInterface $tokenStorage)
    {
        $this->tokenStorage = $tokenStorage;
    }

    public function supports(Request $request): ?bool
    {
        return $this->getKey($request) !== null;
    }

    public function authenticate(Request $request): Passport
    {
        $apiToken = $this->getKey($request);
        if (null === $apiToken) {
            throw new CustomUserMessageAuthenticationException('No API token provided');
        }

        return new Passport(
            new UserBadge($apiToken, function ($apiToken) {
                return $this->em->getRepository(User::class)->findOneBy(['apiKey' => $apiToken]);
            }),
            new CustomCredentials(
                function ($credentials, UserInterface $user) {

The parameter $user is not used and could be removed.

The parameter $credentials is not used and could be removed.

                    return true;
                },
                $apiToken
            )
        );
    }

    public function createAuthenticatedToken(Passport $passport, string $firewallName): ?TokenInterface
    {
        $user = $passport->getUser();
        return new UsernamePasswordToken($user, $firewallName, $user->getRoles());
    }

    public function createToken(Passport $passport, string $firewallName): TokenInterface
    {
        return $this->createAuthenticatedToken($passport, $firewallName);

The expression return $this->createAuthenticatedToken($passport, $firewallName) could return the type null which is incompatible with the type-hinted return Symfony\Component\Security\Core\Authentication\Token\TokenInterface. Consider adding an additional type-check to rule them out.

    }

    public function onAuthenticationSuccess(Request $request, TokenInterface $token, string $firewallName): ?Response
    {
        return null;
    }

    public function onAuthenticationFailure(Request $request, AuthenticationException $exception): ?Response
    {
        $data = ['message' => strtr($exception->getMessageKey(), $exception->getMessageData())];
        return new JsonResponse($data, Response::HTTP_UNAUTHORIZED);
    }

    public function start(Request $request, AuthenticationException $authException = null): Response
    {
        $data = ['message' => 'Authentication Required'];
        return new JsonResponse($data, Response::HTTP_UNAUTHORIZED);
    }

    private function getKey(Request $request)
    {
        return $request->headers->get('Authorization') ?? $request->headers->get('API-TOKEN') ?? $request->headers->get('API-KEY');
    }
}