Surfnet\StepupGateway\GatewayBundle\Sso2fa\ValueObject\Configuration::__construct()

Complexity

Conditions	5
Paths	4

Size

Total Lines	34
Code Lines	20

Duplication

Lines	0
Ratio	0 %

Importance

Changes	1
Bugs	0	Features	0

<?php declare(strict_types=1);
    public function __construct(string $name, string $type, int $lifetime, string $encryptionKey)

Missing doc comment for function __construct()

    {
        $this->name = $name;
        $this->type = CookieType::fromConfiguration($type);
        if ($lifetime === 0 && $this->type->isPersistent()) {
            throw new InvalidCookieTypeException(
                'When using a persistent cookie, you must configure a non zero cookie lifetime'
            );
        }
        $this->lifetime = $lifetime;

        // Convert the key from the configuration from hex to binary. sodium_hex2bin
        try {
            $binaryKey = sodium_hex2bin($encryptionKey);
        } catch (Exception $e) {
            // The key contains non-hexadecimal values. Show a custom error message in logs.
            throw new InvalidEncryptionKeyException(
                'The configured SSO on 2FA encryption key contains illegal characters. It should be a 64 digits long ' .
                'hexadecimal value. Example value: 000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f',
                0,
                $e
            );
        }
        // The key length, converted back to binary must be 32 bytes long
        if (Binary::safeStrlen($binaryKey) < SODIUM_CRYPTO_STREAM_KEYBYTES) {
            throw new InvalidEncryptionKeyException(
                sprintf(
                    'The configured SSO on 2FA encryption key must be exactly %d bytes. ' .
                    'This comes down to 64 hex digits value, configured in the sso_encryption_key configuration option',
                    SODIUM_CRYPTO_STREAM_KEYBYTES
                )
            );
        }
        $this->encryptionKey = $binaryKey;
    }