Firesphere\GraphQLJWT\JWTAuthenticationHandler

Complexity

Total Complexity

9

Size/Duplication

Total Lines	67
Duplicated Lines	4.48 %

Coupling/Cohesion

Components	1
Dependencies	4

Importance

Changes

0

5 Methods

Rating	Name	Duplication	Size	Complexity
A	getAuthenticator()	0	4	1
A	setAuthenticator()	0	4	1
A	authenticateRequest()	3	16	4
A	logIn()	0	4	1
A	logOut()	0	8	2

<?php

namespace Firesphere\GraphQLJWT;

use SilverStripe\Control\HTTPRequest;
use SilverStripe\Core\Injector\Injector;
use SilverStripe\Security\AuthenticationHandler;
use SilverStripe\Security\IdentityStore;
use SilverStripe\Security\Member;
use SilverStripe\Security\Security;

/**
 * Class JWTAuthenticationHandler
 *
 *
 * @package Firesphere\GraphQLJWT
 */
class JWTAuthenticationHandler implements AuthenticationHandler
{

    /**
     * @var JWTAuthenticator
     */
    protected $authenticator;

    /**
     * @return mixed
     */
    public function getAuthenticator()
    {
        return $this->authenticator;
    }

    /**
     * @param mixed $authenticator
     */
    public function setAuthenticator($authenticator)
    {
        $this->authenticator = $authenticator;
    }

    /**
     * @param HTTPRequest $request
     * @return null|Member
     */
    public function authenticateRequest(HTTPRequest $request)
    {
        $authHeader = $request->getHeader('Authorization');
        $member = null;
        if ($authHeader && preg_match('/Bearer\s+(.*)$/i', $authHeader, $matches)) {

This code seems to be duplicated across your project.

            $member = $this->authenticator->authenticate(['token' => $matches[1]], $request);
        }
        if ($member) {
            $this->logIn($member);
        } else {
            // Get the default user currently logged in via a different way, could be BasicAuth/normal login
            $member = Security::getCurrentUser();
        }

        return $member;
    }

    /**
     * @param Member $member
     * @param bool $persistent
     * @param HTTPRequest|null $request
     */
    public function logIn(Member $member, $persistent = false, HTTPRequest $request = null)
    {
        Security::setCurrentUser($member);
    }

    /**
     * @param HTTPRequest|null $request
     */
    public function logOut(HTTPRequest $request = null)
    {
        // A token can actually not be invalidated, only blacklisted
        if ($request !== null) {
            $request->getSession()->clear('jwt');
        }
        Security::setCurrentUser(null);
    }
}