Faulancer\Security\Csrf

Complexity

Total Complexity

6

Size/Duplication

Total Lines	64
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	1

Importance

Changes

0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	getToken()	0	11	2
A	isValid()	0	12	2
A	saveToSession()	0	4	1
A	_getSessionManager()	0	4	1

<?php

namespace Faulancer\Security;

use Faulancer\ServiceLocator\ServiceInterface;
use Faulancer\ServiceLocator\ServiceLocator;
use Faulancer\Session\SessionManager;

/**
 * Class Csrf
 *
 * @package Faulancer\Security
 * @author Florian Knapp <office@florianknapp.de>
 */
class Csrf
{
    /**
     * Generates a token and save it to session
     *
     * @param string $identifier
     *
     * @return string
     */
    public static function getToken(string $identifier = '') :string
    {
        $token = self::_getSessionManager()->get('csrf' . $identifier);

        if (!self::_getSessionManager()->has('csrf' . $identifier)) {
            $token = bin2hex(openssl_random_pseudo_bytes(16));
            self::saveToSession($token, $identifier);
        }

        return $token;
    }

    /**
     * Check if token is valid
     *
     * @param string $token
     * @param string $identifier
     *
     * @return bool
     */
    public static function isValid(string $token, string $identifier = '') :bool
    {
        $sessionToken = self::_getSessionManager()->get('csrf' . $identifier);
        $isValid      = $token === $sessionToken;

        if ($isValid) {
            self::_getSessionManager()->delete('csrf' . $identifier);
            return true;
        }

        return false;
    }

    /**
     * Saves token into session
     *
     * @param string $token
     * @param string $identifier
     *
     * @return void
     */
    private static function saveToSession(string $token, string $identifier = '')
    {
        self::_getSessionManager()->set('csrf' . $identifier, $token);
    }

    /**
     * @return SessionManager|ServiceInterface
     */
    private static function _getSessionManager()
    {
        return ServiceLocator::instance()->get(SessionManager::class);
    }

}