Firesphere\GraphQLJWT\RefreshTokenMutationCreator

Complexity

Total Complexity

13

Size/Duplication

Total Lines	68
Duplicated Lines	4.41 %

Coupling/Cohesion

Components	0
Dependencies	10

Importance

Changes

0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	attributes()	0	7	1
A	type()	0	4	1
A	args()	0	4	1
D	resolve()	3	37	10

<?php

namespace Firesphere\GraphQLJWT;

use GraphQL\Type\Definition\ResolveInfo;
use Lcobucci\JWT\Parser;
use SilverStripe\Control\Controller;
use SilverStripe\Core\Injector\Injector;
use SilverStripe\GraphQL\MutationCreator;
use SilverStripe\GraphQL\OperationResolver;
use SilverStripe\ORM\ValidationResult;
use SilverStripe\Security\Member;

class RefreshTokenMutationCreator extends MutationCreator implements OperationResolver
{
    public function attributes()
    {
        return [
            'name' => 'refreshToken',
            'description' => 'Refreshes a JWT token for a valid user. To be done'
        ];
    }

    public function type()
    {
        return $this->manager->getType('MemberToken');
    }

    public function args()
    {
        return [];
    }

    /**
     * @todo Make it refresh things
     * @param mixed $object
     * @param array $args
     * @param mixed $context
     * @param ResolveInfo $info
     * @return Member|null
     * @throws \BadMethodCallException
     * @throws \OutOfBoundsException
     */
    public function resolve($object, array $args, $context, ResolveInfo $info)
    {
        $request = Controller::curr()->getRequest();
        $authHeader = $request->getHeader('Authorization');
        $authenticator = Injector::inst()->get(JWTAuthenticator::class);
        $member = null;
        $result = new ValidationResult();
        if ($authHeader && preg_match('/Bearer\s+(.*)$/i', $authHeader, $matches)) {

This code seems to be duplicated across your project.

            $member = $authenticator->authenticate(['token' => $matches[1]], $request, $result);
        }

        $expired = false;
        if ($member === null) {
            foreach ($result->getMessages() as $message) {
                if ($message['message'] === 'Token is expired') {
                    // If expired is true, the rest of the token is valid, so we can refresh
                    $expired = true;
                    // @todo fix code duplication
                    if (!$member && preg_match('/Bearer\s+(.*)$/i', $authHeader, $matches)) {
                        // We need a member, even if the result is false
                        $parser = new Parser();
                        $parsedToken = $parser->parse((string)$matches[1]);
                        $member = Member::get()->byID($parsedToken->getClaim('uid'));

The method Lcobucci\JWT\Token::getClaim() has been deprecated with message: This method will be removed on v4

                    }
                }
            }
        }

        if ($expired && $member) {
            $member->Token = $authenticator->generateToken($member);
        } else {
            // Everything is wrong, give an empty member without token
            $member = Member::create();
        }

        return $member;
    }
}