Surfnet\StepupMiddleware\ApiBundle\Controller\ProfileController

Complexity

Total Complexity

4

Size/Duplication

Total Lines	26
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	3	1
A	get()	0	19	3

<?php

/**
 * Copyright 2019 SURFnet B.V.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

Missing @link tag in file comment

namespace Surfnet\StepupMiddleware\ApiBundle\Controller;

use Surfnet\StepupMiddleware\ApiBundle\Identity\Service\ProfileService;
use Surfnet\StepupMiddleware\ApiBundle\Identity\Value\Profile;
use Surfnet\StepupMiddleware\ApiBundle\Controller\AbstractController;
use Symfony\Component\HttpFoundation\JsonResponse;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;

class ProfileController extends AbstractController

Missing doc comment for class ProfileController

{
    public function __construct(
        private readonly ProfileService $profileService,
    ) {
    }

    public function get(Request $request, string $identityId): JsonResponse
    {
        $this->denyAccessUnlessGrantedOneOff(['ROLE_RA', 'ROLE_READ']);

        // Is the actor allowed to view the profile page?
        $actorId = $request->get('actorId');
        if ($identityId !== $actorId) {
            throw new AccessDeniedHttpException(
                "Identity and actor id should match. It is not yet allowed to view the profile of somebody else.",
            );
        }

        $profile = $this->profileService->createProfile($identityId);
        if (!$profile instanceof Profile) {
            throw new NotFoundHttpException(
                "The profile cannot be created, the identity id did not match an identity.",
            );
        }
        return new JsonResponse($profile);
    }
}