Failed Conditions
Push — ng ( ca946d...fcb055 )
by Florent
10:43
created

SoftwareStatementSource::getNodeDefinition()   B

Complexity

Conditions 3
Paths 1

Size

Total Lines 31
Code Lines 27

Duplication

Lines 0
Ratio 0 %

Importance

Changes 0
Metric Value
dl 0
loc 31
rs 8.8571
c 0
b 0
f 0
cc 3
eloc 27
nc 1
nop 1
1
<?php
2
3
declare(strict_types=1);
4
5
/*
6
 * The MIT License (MIT)
7
 *
8
 * Copyright (c) 2014-2018 Spomky-Labs
9
 *
10
 * This software may be modified and distributed under the terms
11
 * of the MIT license.  See the LICENSE file for details.
12
 */
13
14
namespace OAuth2Framework\Bundle\DependencyInjection\Component\Endpoint\ClientRegistration;
15
16
use Jose\Bundle\JoseFramework\Helper\ConfigurationHelper;
17
use OAuth2Framework\Bundle\DependencyInjection\Component\Component;
18
use Symfony\Component\Config\Definition\Builder\NodeDefinition;
19
use Symfony\Component\Config\FileLocator;
20
use Symfony\Component\DependencyInjection\ContainerBuilder;
21
use Symfony\Component\DependencyInjection\Loader\PhpFileLoader;
22
23
class SoftwareStatementSource implements Component
24
{
25
    /**
26
     * @return string
27
     */
28
    public function name(): string
29
    {
30
        return 'software_statement';
31
    }
32
33
    /**
34
     * {@inheritdoc}
35
     */
36
    public function load(array $configs, ContainerBuilder $container)
37
    {
38
        if (!$configs['endpoint']['client_registration']['software_statement']['enabled']) {
39
            return;
40
        }
41
        $container->setParameter('oauth2_server.endpoint.client_registration.software_statement.required', $configs['endpoint']['client_registration']['software_statement']['required']);
42
        $container->setParameter('oauth2_server.endpoint.client_registration.software_statement.allowed_signature_algorithms', $configs['endpoint']['client_registration']['software_statement']['allowed_signature_algorithms']);
43
        $container->setParameter('oauth2_server.endpoint.client_registration.software_statement.key_set', $configs['endpoint']['client_registration']['software_statement']['key_set']);
44
45
        $loader = new PhpFileLoader($container, new FileLocator(__DIR__ . '/../../../../Resources/config/endpoint/client_registration'));
46
        $loader->load('software_statement.php');
47
    }
48
49
    /**
50
     * {@inheritdoc}
51
     */
52
    public function getNodeDefinition(NodeDefinition $node)
53
    {
54
        $node->children()
0 ignored issues
show
Bug introduced by
It seems like you code against a specific sub-type and not the parent class Symfony\Component\Config...\Builder\NodeDefinition as the method children() does only exist in the following sub-classes of Symfony\Component\Config...\Builder\NodeDefinition: Symfony\Component\Config...der\ArrayNodeDefinition. Maybe you want to instanceof check for one of these explicitly?

Let’s take a look at an example:

abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}

In the above example, the authenticate() method works fine as long as you just pass instances of MyUser. However, if you now also want to pass a different sub-classes of User which does not have a getDisplayName() method, the code will break.

Available Fixes

  1. Change the type-hint for the parameter:

    class AuthSystem
    {
        public function authenticate(MyUser $user) { /* ... */ }
    }
    
  2. Add an additional type-check:

    class AuthSystem
    {
        public function authenticate(User $user)
        {
            if ($user instanceof MyUser) {
                $this->logger->info(/** ... */);
            }
    
            // or alternatively
            if ( ! $user instanceof MyUser) {
                throw new \LogicException(
                    '$user must be an instance of MyUser, '
                   .'other instances are not supported.'
                );
            }
    
        }
    }
    
Note: PHP Analyzer uses reverse abstract interpretation to narrow down the types inside the if block in such a case.
  1. Add the method to the parent class:

    abstract class User
    {
        /** @return string */
        abstract public function getPassword();
    
        /** @return string */
        abstract public function getDisplayName();
    }
    
Loading history...
55
            ->arrayNode($this->name())
56
                ->addDefaultsIfNotSet()
57
                ->canBeEnabled()
58
                ->validate()
59
                    ->ifTrue(function ($config) {
60
                        return true === $config['enabled'] && empty($config['key_set']);
61
                    })
62
                    ->thenInvalid('The option "key_set" must be set.')
63
                ->end()
64
                ->validate()
65
                    ->ifTrue(function ($config) {
66
                        return true === $config['enabled'] && empty($config['allowed_signature_algorithms']);
67
                    })
68
                    ->thenInvalid('At least one signature algorithm must be set.')
69
                ->end()
70
                ->children()
71
                    ->booleanNode('required')->defaultFalse()->end()
72
                    ->scalarNode('key_set')->end()
73
                    ->arrayNode('allowed_signature_algorithms')
74
                        ->info('Signature algorithms allowed for the software statements. The algorithm "none" should not be used.')
75
                        ->useAttributeAsKey('name')
76
                        ->prototype('scalar')->end()
77
                        ->treatNullLike([])
78
                    ->end()
79
                ->end()
80
            ->end()
81
        ->end();
82
    }
83
84
    /**
85
     * {@inheritdoc}
86
     */
87
    public function prepend(ContainerBuilder $container, array $config): array
88
    {
89
        /*$currentPath = $path.'['.$this->name().']';
0 ignored issues
show
Unused Code Comprehensibility introduced by
62% of this comment could be valid code. Did you maybe forget this after debugging?

Sometimes obsolete code just ends up commented out instead of removed. In this case it is better to remove the code once you have checked you do not need it.

The code might also have been commented out for debugging purposes. In this case it is vital that someone uncomments it again or your project may behave in very unexpected ways in production.

This check looks for comments that seem to be mostly valid code and reports them.

Loading history...
90
        $accessor = PropertyAccess::createPropertyAccessor();
91
        $sourceConfig = $accessor->getValue($bundleConfig, $currentPath);
92
93
        if (true === $sourceConfig['enabled']) {
94
            // FIXME
95
            ConfigurationHelper::addJWSLoader($container, $this->name(), $sourceConfig['allowed_signature_algorithms'], [], ['jws_compact'], false);
96
            ConfigurationHelper::addKeyset($container, 'client_registration_software_statement.key_set.signature', 'jwkset', ['value' => $sourceConfig['key_set']]);
97
        }*/
98
        return [];
99
    }
100
}
101