Surfnet\StepupMiddleware\ApiBundle\Controller\RaCandidateController

Complexity

Total Complexity

8

Size/Duplication

Total Lines	79
Duplicated Lines	0 %

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	search()	0	35	4
A	__construct()	0	4	1
A	get()	0	28	3

<?php

/**
 * Copyright 2014 SURFnet bv
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

namespace Surfnet\StepupMiddleware\ApiBundle\Controller;

use Surfnet\Stepup\Identity\Value\IdentityId;
use Surfnet\Stepup\Identity\Value\RegistrationAuthorityRole;

The type Surfnet\Stepup\Identity\Value\RegistrationAuthorityRole was not found. Maybe you did not declare it correctly or list all dependencies?

use Surfnet\StepupMiddleware\ApiBundle\Authorization\Service\AuthorizationContextService;
use Surfnet\StepupMiddleware\ApiBundle\Controller\AbstractController;
use Surfnet\StepupMiddleware\ApiBundle\Identity\Query\RaCandidateQuery;
use Surfnet\StepupMiddleware\ApiBundle\Identity\Service\RaCandidateService;
use Surfnet\StepupMiddleware\ApiBundle\Response\JsonCollectionResponse;
use Symfony\Component\HttpFoundation\JsonResponse;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpKernel\Exception\BadRequestHttpException;
use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;

Header blocks must be separated by a single blank line

use function sprintf;

class RaCandidateController extends AbstractController
{
    public function __construct(
        private readonly RaCandidateService $raCandidateService,
        private readonly AuthorizationContextService $authorizationService,
    ) {
    }

    /**
     * @return JsonCollectionResponse
     */
    public function search(Request $request): JsonCollectionResponse
    {
        $this->denyAccessUnlessGrantedOneOff(['ROLE_RA', 'ROLE_READ']);

        $actorIdString = $request->query->get('actorId');
        if (!is_string($actorIdString)) {
            throw new BadRequestHttpException(sprintf('Invalid actorId "%s"', $actorIdString));
        }
        $actorId = new IdentityId($actorIdString);

        $secondFactorTypes = $request->query->all('secondFactorTypes');
        foreach ($secondFactorTypes as $type) {
            if (!is_string($type)) {
                throw new BadRequestHttpException(sprintf('Invalid secondFactorType "%s", string expected.', $type));
            }
        }
        /** @var array<string> $secondFactorTypes */

        $query = new RaCandidateQuery();
        $query->institution = $request->query->get('institution');
        $query->commonName = $request->query->get('commonName');
        $query->email = $request->query->get('email');
        $query->secondFactorTypes = $secondFactorTypes;
        $query->raInstitution = $request->query->get('raInstitution');
        $query->pageNumber = $request->query->getInt('p', 1);

        $query->authorizationContext = $this->authorizationService->buildSelectRaaInstitutionAuthorizationContext(
            $actorId,
        );

        $paginator = $this->raCandidateService->search($query);

        $filters = $this->raCandidateService->getFilterOptions($query);

        return JsonCollectionResponse::fromPaginator($paginator, $filters);
    }

    /**
     * @return JsonResponse
     */
    public function get(Request $request, string $identityId): JsonResponse
    {
        $this->denyAccessUnlessGrantedOneOff(['ROLE_RA', 'ROLE_READ']);

        $actorIdString = $request->query->get('actorId');
        if (!is_string($actorIdString)) {
            throw new BadRequestHttpException(sprintf('Invalid actorId "%s"', $actorIdString));
        }

        $actorId = new IdentityId($actorIdString);


        $authorizationContext = $this->authorizationService->buildInstitutionAuthorizationContext(
            $actorId,
            RegistrationAuthorityRole::ra(),
        );

        $raCandidate = $this->raCandidateService->findOneByIdentityId($identityId);
        if ($raCandidate === null) {
            throw new NotFoundHttpException(sprintf("RaCandidate with IdentityId '%s' does not exist", $identityId));
        }

        // In order to display the correct RA institutions for this ra candidate. We need to display the RA instituions
        // of the actor. But the identity data of the identity. This way we only show the institutions the actor is
        // allowed to make the identity RA(A) for.
        $merged = $this->raCandidateService->setUseRaInstitutionsOnRaCandidate($authorizationContext, $raCandidate);

        return new JsonResponse($merged);
    }
}