Surfnet\StepupGateway\SecondFactorOnlyBundle\Service\SecondFactorOnlyNameIdValidationService

Complexity

Total Complexity

5

Size/Duplication

Total Lines	68
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	3

Importance

Changes	1
Bugs	0	Features	0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	5	1
A	with()	0	5	1
B	validate()	0	32	3

<?php

namespace Surfnet\StepupGateway\SecondFactorOnlyBundle\Service;

use Psr\Log\LoggerInterface;
use Surfnet\StepupGateway\GatewayBundle\Service\SamlEntityService;

final class SecondFactorOnlyNameIdValidationService
{
    /**
     * @var LoggerInterface
     */
    private $logger;

    /**
     * @var SamlEntityService
     */
    private $entityService;

    public function __construct(LoggerInterface $logger, SamlEntityService $entityService)
    {
        $this->logger = $logger;
        $this->entityService = $entityService;
    }

    /**
     * @param LoggerInterface $logger
     * @return $this
     */
    public function with(LoggerInterface $logger)
    {
        $this->logger = $logger;
        return $this;
    }

    /**
     * Is the given SP allowed to authenticate via Second Factor Only for the given NameID?
     *
     * @param string $spEntityId
     * @param string $nameId
     * @return bool
     */
    public function validate($spEntityId, $nameId)
    {
        if (!$nameId) {
            $this->logger->info(
                'No NameID provided, sending response with status Requester Error'
            );
            return false;
        }

        $serviceProvider = $this->entityService->getServiceProvider($spEntityId);

        if (!$serviceProvider->isAllowedToUseSecondFactorOnlyFor($nameId)) {
            $this->logger->info(
                sprintf(
                    'SP "%s" may not use SecondFactorOnly mode for nameid "%s", sending response with status Requester Error',

This line exceeds maximum limit of 120 characters; contains 126 characters

                    $spEntityId,
                    $nameId
                )
            );
            return false;
        }

        $this->logger->info(
            sprintf(
                'SP "%s" is allowed to use SecondFactorOnly mode for nameid "%s"',
                $spEntityId,
                $nameId
            )
        );

        return true;
    }
}