OAuth2Framework\Component\ClientRegistrationEndpoint\InitialAccessTokenMiddleware

Complexity

Total Complexity

8

Size/Duplication

Total Lines	64
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	5

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	6	1
C	process()	0	29	7

<?php

declare(strict_types=1);

/*
 * The MIT License (MIT)
 *
 * Copyright (c) 2014-2018 Spomky-Labs
 *
 * This software may be modified and distributed under the terms
 * of the MIT license.  See the LICENSE file for details.
 */

namespace OAuth2Framework\Component\ClientRegistrationEndpoint;

use Psr\Http\Server\RequestHandlerInterface;
use Psr\Http\Server\MiddlewareInterface;
use OAuth2Framework\Component\BearerTokenType\BearerToken;
use OAuth2Framework\Component\Core\Message\OAuth2Message;
use Psr\Http\Message\ResponseInterface;
use Psr\Http\Message\ServerRequestInterface;

final class InitialAccessTokenMiddleware implements MiddlewareInterface
{
    /**
     * @var BearerToken
     */
    private $bearerToken;

    /**
     * @var InitialAccessTokenRepository
     */
    private $initialAccessTokenRepository;

    /**
     * @var bool
     */
    private $isRequired;

    /**
     * InitialAccessTokenMiddleware constructor.
     *
     * @param BearerToken                  $bearerToken
     * @param InitialAccessTokenRepository $initialAccessTokenRepository
     * @param bool                         $isRequired
     */
    public function __construct(BearerToken $bearerToken, InitialAccessTokenRepository $initialAccessTokenRepository, bool $isRequired)
    {
        $this->bearerToken = $bearerToken;
        $this->initialAccessTokenRepository = $initialAccessTokenRepository;
        $this->isRequired = $isRequired;
    }

    /**
     * {@inheritdoc}
     */
    public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
    {
        try {
            $values = [];
            $token = $this->bearerToken->find($request, $values);
            if (null === $token) {
                if (!$this->isRequired) {
                    return $handler->handle($request);
                }

                throw new \InvalidArgumentException('Initial Access Token is missing or invalid.');
            }

            $initialAccessToken = $this->initialAccessTokenRepository->find(InitialAccessTokenId::create($token));

            if (null === $initialAccessToken || $initialAccessToken->isRevoked()) {
                throw new \InvalidArgumentException('Initial Access Token is missing or invalid.');
            }
            if ($initialAccessToken->hasExpired()) {
                throw new \InvalidArgumentException('Initial Access Token expired.');
            }

            $request = $request->withAttribute('initial_access_token', $initialAccessToken);
        } catch (\InvalidArgumentException $e) {
            throw new OAuth2Message(400, OAuth2Message::ERROR_INVALID_REQUEST, $e->getMessage(), [], $e);
        }

        return $handler->handle($request);
    }
}