OpenConext\ProfileBundle\Service\AttributeAggregationService

Complexity

Total Complexity

10

Size/Duplication

Total Lines	111
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	7

Importance

Changes

0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	9	1
A	findByUser()	0	39	4
A	disconnectAttributeFor()	0	11	3
A	isValidRequest()	0	14	2

<?php

/**
 * Copyright 2017 SURFnet B.V.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

namespace OpenConext\ProfileBundle\Service;

use Exception;
use OpenConext\Profile\Entity\AuthenticatedUser;
use OpenConext\Profile\Repository\AttributeAggregationRepositoryInterface;
use OpenConext\Profile\Value\AttributeAggregation\AttributeAggregationAttribute;
use OpenConext\Profile\Value\AttributeAggregation\AttributeAggregationAttributesList;
use OpenConext\Profile\Value\AttributeAggregation\AttributeAggregationEnabledAttributes;
use Psr\Log\LoggerInterface;

final class AttributeAggregationService
{
    /**
     * @var AttributeAggregationRepositoryInterface
     */
    private $repository;

    /**
     * @var AttributeAggregationEnabledAttributes
     */
    private $attributeAggregationEnabledAttributes;

    /**
     * @var LoggerInterface
     */
    private $logger;

    public function __construct(
        AttributeAggregationRepositoryInterface $repository,
        AttributeAggregationEnabledAttributes $attributeAggregationEnabledAttributes,
        LoggerInterface $logger
    ) {
        $this->repository = $repository;
        $this->attributeAggregationEnabledAttributes = $attributeAggregationEnabledAttributes;
        $this->logger = $logger;
    }

    /**
     * @param AuthenticatedUser $user
     * @return null|AttributeAggregationAttributesList
     */
    public function findByUser(AuthenticatedUser $user)
    {
        $enabledAttributes = $this->attributeAggregationEnabledAttributes;

        try {
            $collection = [];

            $attributeAggregationAttributes = $this->repository->findAllFor($user->getNameId());

            foreach ($enabledAttributes->getAttributes() as $enabledAttribute) {
                $accountType = $enabledAttribute->getAccountType();
                if ($attributeAggregationAttributes->hasAttribute($accountType)) {
                    $aaAttribute = $attributeAggregationAttributes->getAttribute($accountType);
                    $collection[] = AttributeAggregationAttribute::fromConfig(
                        $enabledAttribute,
                        true,
                        $aaAttribute->getId(),
                        $aaAttribute->getUserNameId(),
                        $aaAttribute->getLinkedId()
                    );
                } else {
                    $collection[] = AttributeAggregationAttribute::fromConfig($enabledAttribute, false, -1, '');
                }
            }

            return new AttributeAggregationAttributesList($collection);
        } catch (Exception $e) {
            $this->logger->error(
                sprintf(
                    'Error while finding AA attributes. Original error message: "%s"',
                    $e->getMessage()
                )
            );
            return null;
        }

        $this->logger->notice('No enabled attribute aggregation attributes found.');

$this->logger->notice('No enabled attribute aggregation attributes found.'); does not seem to be reachable.

        return null;
    }

    /**
     * @param AuthenticatedUser $user
     * @param AttributeAggregationAttribute $orcidAttribute
     *
     * @return bool returns false when deletion failed
     */
    public function disconnectAttributeFor(AuthenticatedUser $user, AttributeAggregationAttribute $orcidAttribute)
    {
        if ($this->isValidRequest($user, $orcidAttribute)) {
            $result = $this->repository->unsubscribeAccount($orcidAttribute->getId());
            if (!$result) {
                $this->logger->error('Error while unsubscribing the AA attribute for the authenticating user.');
            }
            return $result;
        }
        return false;
    }

    /**
     * Validate the users identity matches that of the identity set on the ORCID attribute retrieved from AA.
     *
     * @param AttributeAggregationAttribute $orcidAttribute
     *
     * @return bool
     */
    private function isValidRequest(AuthenticatedUser $user, AttributeAggregationAttribute $orcidAttribute)
    {
        $nameId = $user->getNameId();

        if ($nameId !== $orcidAttribute->getUserNameId()) {
            $this->logger->error(
                'The users NameId associated with ORCID iD account does not match the NameId of the 
                authenticated user.'
            );
            return false;
        }

        return true;
    }
}