Surfnet\StepupGateway\GatewayBundle\Sso2fa\ValueObject\CookieValue

Complexity

Total Complexity

11

Size/Duplication

Total Lines	82
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

9 Methods

Rating	Name	Duplication	Size	Complexity
A	getIdentityId()	0	3	1
A	from()	0	9	1
A	authenticationTime()	0	10	3
A	secondFactorId()	0	3	1
A	deserialize()	0	10	1
A	getLoa()	0	3	1
A	meetsRequiredLoa()	0	3	1
A	serialize()	0	7	1
A	issuedTo()	0	3	1

<?php declare(strict_types=1);

/**
 * Copyright 2022 SURFnet bv
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

namespace Surfnet\StepupGateway\GatewayBundle\Sso2fa\ValueObject;

use DateTime;
use Surfnet\StepupGateway\GatewayBundle\Sso2fa\Exception\InvalidAuthenticationTimeException;
use function strtolower;
use function strtotime;

class CookieValue implements CookieValueInterface
{
    private $tokenId;
    private $identityId;
    private $loa;
    private $authenticationTime;

    /**
     * The cookie value consists of:
     * - Token used: SecondFactorId from SecondFactor
     * - Identifier: IdentityId from SecondFactor
     * - The resolved LoA: LoA (resolved using Loa resolution service)
     * - Authentication time (Atom formatted date time string)
     */
    public static function from(string $identityId, string $secondFactorId, float $loa): self
    {
        $cookieValue = new self;
        $cookieValue->tokenId = $secondFactorId;
        $cookieValue->identityId = $identityId;
        $cookieValue->loa = $loa;
        $dateTime = new DateTime();
        $cookieValue->authenticationTime = $dateTime->format(DATE_RFC3339_EXTENDED);
        return $cookieValue;
    }

    public static function deserialize(string $serializedData): CookieValueInterface
    {
        $data = json_decode($serializedData, true);
        $cookieValue = new self;
        $cookieValue->tokenId = $data['tokenId'];
        $cookieValue->identityId = $data['identityId'];
        $cookieValue->loa = (float) $data['loa'];
        $cookieValue->authenticationTime = $data['authenticationTime'];

        return $cookieValue;
    }

    public function serialize(): string
    {
        return json_encode([
            'tokenId' => $this->tokenId,
            'identityId' => $this->identityId,
            'loa' => $this->loa,
            'authenticationTime' => $this->authenticationTime,
        ]);
    }

    public function meetsRequiredLoa(float $requiredLoa): bool
    {
        return $this->loa >= $requiredLoa;
    }

    public function getLoa(): float
    {
        return $this->loa;
    }

    public function getIdentityId(): string
    {
        return $this->identityId;
    }

    public function secondFactorId(): string
    {
        return $this->tokenId;
    }

    public function issuedTo(string $identityNameId): bool
    {
        return strtolower($identityNameId) === strtolower($this->identityId);
    }

    public function authenticationTime(): int
    {
        $dateTime = DateTime::createFromFormat(DATE_RFC3339_EXTENDED, $this->authenticationTime);
        if (!$dateTime) {

$dateTime is of type DateTime, thus it always evaluated to true.

            $dateTime = DateTime::createFromFormat(DATE_RFC3339, $this->authenticationTime);
        }
        if (!$dateTime) {

$dateTime is of type DateTime, thus it always evaluated to true.

            throw new InvalidAuthenticationTimeException();
        }
        return $dateTime->getTimestamp();
    }
}