OAuth2Framework\Component\Server\Scope\ScopeParameterChecker

Complexity

Total Complexity

5

Size/Duplication

Total Lines	49
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	4

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	5	1
A	process()	0	21	4

<?php

declare(strict_types=1);

/*
 * The MIT License (MIT)
 *
 * Copyright (c) 2014-2018 Spomky-Labs
 *
 * This software may be modified and distributed under the terms
 * of the MIT license.  See the LICENSE file for details.
 */

namespace OAuth2Framework\Component\Server\Scope;

use OAuth2Framework\Component\Server\AuthorizationEndpoint\Authorization;
use OAuth2Framework\Component\Server\AuthorizationEndpoint\ParameterChecker\ParameterChecker;
use OAuth2Framework\Component\Server\Scope\Policy\ScopePolicyManager;
use OAuth2Framework\Component\Server\Core\Response\OAuth2Exception;

final class ScopeParameterChecker implements ParameterChecker
{
    /**
     * @var ScopeRepository
     */
    private $scopeRepository;

    /**
     * @var null|ScopePolicyManager
     */
    private $scopePolicyManager;

    /**
     * ScopeParameterChecker constructor.
     *
     * @param ScopeRepository         $scopeRepository
     * @param null|ScopePolicyManager $scopePolicyManager
     */
    public function __construct(ScopeRepository $scopeRepository, ? ScopePolicyManager $scopePolicyManager)
    {
        $this->scopeRepository = $scopeRepository;
        $this->scopePolicyManager = $scopePolicyManager;
    }

    /**
     * {@inheritdoc}
     */
    public function process(Authorization $authorization, callable $next): Authorization
    {
        try {
            if ($authorization->hasQueryParam('scope')) {
                Assertion::regex($authorization->getQueryParam('scope'), '/^[\x20\x23-\x5B\x5D-\x7E]+$/', 'Invalid characters found in the \'scope\' parameter.');
                $scope = explode(' ', $authorization->getQueryParam('scope'));
            } else {
                $scope = [];
            }
            if (null !== $this->scopePolicyManager) {
                $scope = $this->scopePolicyManager->apply($scope, $authorization->getClient());

$scope is of type array, but the function expects a string.

            }
            $availableScope = $this->scopeRepository->getAvailableScopesForClient($authorization->getClient());
            Assertion::true($this->scopeRepository->areRequestedScopesAvailable($scope, $availableScope), sprintf('An unsupported scope was requested. Available scopes for the client are %s.', implode(', ', $availableScope)));

$scope is of type string|array, but the function expects a array<integer,string>.

            $authorization = $authorization->withScopes($scope);

The method withScopes() does not seem to exist on object<OAuth2Framework\Component\Server\AuthorizationEndpoint\Authorization>.

            return $next($authorization);
        } catch (\InvalidArgumentException $e) {
            throw new OAuth2Exception(400, OAuth2Exception::ERROR_INVALID_SCOPE, $e->getMessage(), $authorization, $e);
        }
    }
}