JwtValidator::__construct() - Code Metrics - Inspection of "/localized_urls: Localized pages work" - GCTC-NTGC/TalentCloud - Measure and Improve Code Quality continuously with Scrutinizer

Completed

Pull Request — dev (#321)

by Tristan

created 2018-09-14 19:33 UTC

JwtValidator::__construct() A

↳ Parent: JwtValidator

Complexity

Conditions	1
Paths	1

Size

Total Lines	3
Code Lines	2

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	0
CRAP Score	2

Importance

Changes

Metric	Value
eloc	2
dl	0
loc	3
ccs	0
cts	3
cp	0
rs	10
c	0
b	0
f	0
cc	1
nc	1
nop	2
crap	2

<?php
namespace App\Services\Auth;


use Lcobucci\JWT\Token;
use Lcobucci\JWT\Signer\Rsa\Sha256;
use App\Services\Auth\JwtKeysFetcher;

class JwtValidator {

    
    /**
     * Will fetch and cache JWT keys
     * @var JwtKeysFetcher 

     */
    protected $keyFetcher;
    
    /**
     * A map of valid Issuer->Audience pairs
     * @var array 

     */
    protected $validIssAud;
    
    public function __construct(JwtKeysFetcher $keyFetcher, array $validIssAud) {

        $this->keyFetcher = $keyFetcher;
        $this->validIssAud = $validIssAud;
    }
    
    public function signatureIsValid(Token $token) {

        $kid = $token->getHeader("kid");
        $alg = $token->getHeader("alg");
        $publicKey = $this->keyFetcher->getByKID($kid);
        
        switch ($alg) {
            case "RS256":
                $signer = new Sha256();
                break;
            default:
                $signer = new Sha256();
                break;
        }

        $signatureIsValid = $token->verify($signer, $publicKey);
        $signatureIsValid = $token->verify($signer, /** @scrutinizer ignore-type */ $publicKey);
        return $signatureIsValid;
    }
    
    public function isExpired(Token $token) {

        return $token->isExpired();
    }
    
    public function claimsAreValid(Token $token) {

        $iss = $token->getClaim("iss");
        $aud = $token->getClaim("aud");
        return array_has($this->validIssAud, $iss) && 
                $this->validIssAud[$iss] === $aud;
    }
}


GCTC-NTGC / TalentCloud

Pull Request — dev (#321)

JwtValidator::__construct() A

Complexity

Size

Duplication

Code Coverage

Importance

Duplication Side-by-Side

Filter issues like