Maelstromeous /
ps2alerts-api
This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 2 | |||
| 3 | namespace Ps2alerts\Api\Utility; |
||
| 4 | |||
| 5 | use League\Fractal\TransformerAbstract; |
||
| 6 | use Ps2alerts\Api\Contract\EndpointInterface; |
||
| 7 | use Ps2alerts\Api\Contract\FractalAwareInterface; |
||
| 8 | use Ps2alerts\Api\Contract\FractalAwareTrait; |
||
| 9 | use Ps2alerts\Api\Contract\UtilityAwareInterface; |
||
| 10 | use Ps2alerts\Api\Contract\UtilityAwareTrait; |
||
| 11 | use Psr\Http\Message\ResponseInterface; |
||
| 12 | use Ps2alerts\Api\Contract\HttpMessageAwareInterface; |
||
| 13 | use Ps2alerts\Api\Contract\HttpMessageAwareTrait; |
||
| 14 | |||
| 15 | abstract class ResponseHandler implements |
||
| 16 | FractalAwareInterface, |
||
| 17 | EndpointInterface, |
||
| 18 | HttpMessageAwareInterface, |
||
| 19 | UtilityAwareInterface |
||
| 20 | { |
||
| 21 | use FractalAwareTrait; |
||
| 22 | use HttpMessageAwareTrait; |
||
| 23 | use UtilityAwareTrait; |
||
| 24 | |||
| 25 | const CODE_WRONG_ARGS = 'API-MALFORMED-REQUEST'; |
||
| 26 | const CODE_NOT_FOUND = 'API-NOT-FOUND'; |
||
| 27 | const CODE_INTERNAL_ERROR = 'API-DOH'; |
||
| 28 | const CODE_EXTERNAL_ERROR = 'API-NOT-MY-PROBLEM'; |
||
| 29 | const CODE_UNAUTHORIZED = 'API-UNAUTHORIZED'; |
||
| 30 | const CODE_FORBIDDEN = 'API-DENIED'; |
||
| 31 | const CODE_EMPTY = 'API-EMPTY'; |
||
| 32 | |||
| 33 | /** |
||
| 34 | * Stores the status code |
||
| 35 | * |
||
| 36 | * @var integer |
||
| 37 | */ |
||
| 38 | protected $statusCode = 200; |
||
| 39 | |||
| 40 | /** |
||
| 41 | * Flag whether to send back a "is cached" header |
||
| 42 | * |
||
| 43 | * @var boolean |
||
| 44 | */ |
||
| 45 | protected $sendCachedHeader = false; |
||
| 46 | |||
| 47 | /** |
||
| 48 | * Getter for statusCode |
||
| 49 | * |
||
| 50 | * @return int |
||
| 51 | */ |
||
| 52 | public function getStatusCode() |
||
| 53 | { |
||
| 54 | return $this->statusCode; |
||
| 55 | } |
||
| 56 | |||
| 57 | /** |
||
| 58 | * Setter for statusCode |
||
| 59 | * |
||
| 60 | * @param integer $statusCode Value to set |
||
| 61 | * |
||
| 62 | * @return self |
||
| 63 | */ |
||
| 64 | public function setStatusCode(int $statusCode) |
||
| 65 | { |
||
| 66 | $this->statusCode = (int) $statusCode; |
||
| 67 | return $this; |
||
| 68 | } |
||
| 69 | |||
| 70 | /** |
||
| 71 | * Master function to split out appropriate calls |
||
| 72 | * |
||
| 73 | * @param string $kind The kind of data we wish to return |
||
| 74 | * @param array $data The data itself |
||
| 75 | * @param TransformerAbstract $transformer The transformer class to call |
||
| 76 | * |
||
| 77 | * @return ResponseInterface |
||
| 78 | */ |
||
| 79 | public function respond(string $kind, array $data, TransformerAbstract $transformer) |
||
|
0 ignored issues
–
show
|
|||
| 80 | { |
||
| 81 | // Detect what embeds we need |
||
| 82 | if (!empty($_GET['embed'])) { |
||
| 83 | $this->getFractalManager()->parseIncludes($_GET['embed']); |
||
| 84 | } |
||
| 85 | |||
| 86 | switch ($kind) { |
||
| 87 | case 'item': |
||
| 88 | return $this->respondWithItem($data, $transformer); |
||
| 89 | case 'collection': |
||
| 90 | return $this->respondWithCollection($data, $transformer); |
||
| 91 | default: |
||
| 92 | return $this->respondWithError('No Response was defined. Please report this!', self::CODE_INTERNAL_ERROR); |
||
| 93 | } |
||
| 94 | } |
||
| 95 | |||
| 96 | /** |
||
| 97 | * Builds an item response in Fractal then hands off to the responder |
||
| 98 | * |
||
| 99 | * @param array $item The item to transform |
||
| 100 | * @param TransformerAbstract $transformer The Transformer to pass through to Fractal |
||
| 101 | * |
||
| 102 | * @return ResponseInterface |
||
| 103 | */ |
||
| 104 | public function respondWithItem(array $item, TransformerAbstract $transformer) |
||
| 105 | { |
||
| 106 | return $this->respondWithData($this->getFractalUtility()->createItem($item, $transformer)); |
||
| 107 | } |
||
| 108 | |||
| 109 | /** |
||
| 110 | * Builds a collection of items from Fractal then hands off to the responder |
||
| 111 | * |
||
| 112 | * @param array $collection The collection to transform |
||
| 113 | * @param TransformerAbstract $transformer The Transformer to pass through to Fractal |
||
| 114 | * |
||
| 115 | * @return ResponseInterface |
||
| 116 | */ |
||
| 117 | public function respondWithCollection(array $collection, TransformerAbstract $transformer) |
||
| 118 | { |
||
| 119 | return $this->respondWithData($this->getFractalUtility()->createCollection($collection, $transformer)); |
||
| 120 | } |
||
| 121 | |||
| 122 | /** |
||
| 123 | * Responds gracefully with an error. |
||
| 124 | * |
||
| 125 | * @param string $message Response message to put in the error |
||
| 126 | * @param int $code Error code to set |
||
| 127 | * |
||
| 128 | * @return ResponseInterface |
||
| 129 | */ |
||
| 130 | public function respondWithError(string $message, $code) |
||
| 131 | { |
||
| 132 | switch ($code) { |
||
| 133 | case self::CODE_WRONG_ARGS: |
||
| 134 | $this->setStatusCode(400); |
||
| 135 | break; |
||
| 136 | case self::CODE_UNAUTHORIZED: |
||
| 137 | $this->setStatusCode(401); |
||
| 138 | break; |
||
| 139 | case self::CODE_FORBIDDEN: |
||
| 140 | $this->setStatusCode(403); |
||
| 141 | break; |
||
| 142 | case self::CODE_EMPTY: |
||
| 143 | case self::CODE_NOT_FOUND: |
||
| 144 | $this->setStatusCode(404); |
||
| 145 | break; |
||
| 146 | case self::CODE_INTERNAL_ERROR: |
||
| 147 | case self::CODE_EXTERNAL_ERROR: |
||
| 148 | $this->setStatusCode(500); |
||
| 149 | break; |
||
| 150 | } |
||
| 151 | |||
| 152 | if ($this->getStatusCode() === 200) { |
||
| 153 | trigger_error( |
||
| 154 | '200 code sent when we\'re attempting to respond with an error!', |
||
| 155 | E_USER_ERROR |
||
| 156 | ); |
||
| 157 | } |
||
| 158 | |||
| 159 | // Pass to responder |
||
| 160 | return $this->respondWithData([ |
||
| 161 | 'error' => [ |
||
| 162 | 'code' => $code, |
||
| 163 | 'http_code' => $this->getStatusCode(), |
||
| 164 | 'message' => $message, |
||
| 165 | ] |
||
| 166 | ]); |
||
| 167 | } |
||
| 168 | |||
| 169 | /** |
||
| 170 | * The final step where the formatted array is now sent back as a response in JSON form |
||
| 171 | * |
||
| 172 | * @param array $data |
||
| 173 | * |
||
| 174 | * @return ResponseInterface |
||
| 175 | */ |
||
| 176 | public function respondWithData(array $data) |
||
| 177 | { |
||
| 178 | $response = $this->getResponse(); |
||
| 179 | |||
| 180 | $response->getBody()->write(json_encode($data)); |
||
| 181 | |||
| 182 | $response = $response->withStatus($this->getStatusCode()); |
||
| 183 | $response = $response->withHeader('Content-Type', 'application/json'); |
||
| 184 | $response = $response->withHeader('X-Redis-Cache-Status', $this->getRedisUtility()->getFlag()); |
||
| 185 | $response = $response->withHeader('X-Redis-Cache-Hits', $this->getRedisUtility()->getHitCount()); |
||
| 186 | $response = $response->withHeader('X-Redis-Cache-Misses', $this->getRedisUtility()->getMissCount()); |
||
| 187 | |||
| 188 | // This is the end of the road. FIRE ZE RESPONSE! |
||
| 189 | return $response; |
||
| 190 | } |
||
| 191 | } |
Instead of super-globals, we recommend to explicitly inject the dependencies of your class. This makes your code less dependent on global state and it becomes generally more testable: