App\Support\Google2FAAuthenticator::isDeviceTrusted()

Complexity

Conditions	6
Paths	9

Size

Total Lines	30
Code Lines	14

Duplication

Lines	0
Ratio	0 %

Importance

Changes	1
Bugs	1	Features	0

<?php
    protected function isDeviceTrusted(): bool
    {
        $cookie = request()->cookie('2fa_trusted_device');

        if (! $cookie) {
            return false;
        }

        try {
            $data = json_decode($cookie, true);

It seems like $cookie can also be of type array; however, parameter $json of json_decode() does only seem to accept string, maybe add an additional type check?

            // Check if cookie contains the required data
            if (! isset($data['user_id'], $data['token'], $data['expires_at'])) {
                return false;
            }

            // Check if the token belongs to the current user
            if ((int) $data['user_id'] !== (int) $this->getUser()->id) {
                return false;
            }

            // Check if the token is expired
            if (time() > $data['expires_at']) {
                return false;
            }

            // Device is trusted and token is valid
            return true;
        } catch (\Exception $e) {
            return false;
        }