OpenConext / Stepup-Middleware

        $this->eventSourcedRepository->save($identity);

    }

    public function handleProveYubikeyPossessionCommand(ProveYubikeyPossessionCommand $command)

    {

        /** @var IdentityApi $identity */

        $identity = $this->eventSourcedRepository->load(new IdentityId($command->identityId));

        $identity->setMaxNumberOfTokens($this->numberOfTokensPerIdentity);

        $this->assertSecondFactorIsAllowedFor(new SecondFactorType('yubikey'), $identity->getInstitution());

        $identity->provePossessionOfYubikey(

            new SecondFactorId($command->secondFactorId),

            new YubikeyPublicId($command->yubikeyPublicId),

            $this->emailVerificationIsRequired($identity),

            $this->configurableSettings->createNewEmailVerificationWindow()

        );

        $this->eventSourcedRepository->save($identity);

    }

    /**

     * @param ProvePhonePossessionCommand $command

    /**

     * @param ProvePhonePossessionCommand $command

     */

    public function handleProvePhonePossessionCommand(ProvePhonePossessionCommand $command)

    {

        /** @var IdentityApi $identity */

        $identity = $this->eventSourcedRepository->load(new IdentityId($command->identityId));

        $this->assertSecondFactorIsAllowedFor(new SecondFactorType('sms'), $identity->getInstitution());

        $identity->setMaxNumberOfTokens($this->numberOfTokensPerIdentity);

        $identity->provePossessionOfPhone(

            new SecondFactorId($command->secondFactorId),

            new PhoneNumber($command->phoneNumber),

            $this->emailVerificationIsRequired($identity),

            $this->configurableSettings->createNewEmailVerificationWindow()

        );

        $this->eventSourcedRepository->save($identity);

    }

    /**

     * @param ProveGssfPossessionCommand $command

    /**

     * @param ProveGssfPossessionCommand $command

     */

    public function handleProveGssfPossessionCommand(ProveGssfPossessionCommand $command)

    {

        /** @var IdentityApi $identity */

        $identity = $this->eventSourcedRepository->load(new IdentityId($command->identityId));

        // Assume tiqr is being used as it is the only GSSF currently supported

        $this->assertSecondFactorIsAllowedFor(new SecondFactorType('tiqr'), $identity->getInstitution());

        $identity->setMaxNumberOfTokens($this->numberOfTokensPerIdentity);

        $identity->provePossessionOfGssf(

            new SecondFactorId($command->secondFactorId),

            new StepupProvider($command->stepupProvider),

            new GssfId($command->gssfId),

            $this->emailVerificationIsRequired($identity),

            $this->configurableSettings->createNewEmailVerificationWindow()

        );

        $this->eventSourcedRepository->save($identity);

    }

    public function handleProveU2fDevicePossessionCommand(ProveU2fDevicePossessionCommand $command)

    {

        $this->eventSourcedRepository->save($identity);

    }

    public function handleProveU2fDevicePossessionCommand(ProveU2fDevicePossessionCommand $command)

    {

        /** @var IdentityApi $identity */

        $identity = $this->eventSourcedRepository->load(new IdentityId($command->identityId));

        $this->assertSecondFactorIsAllowedFor(new SecondFactorType('u2f'), $identity->getInstitution());

        $identity->setMaxNumberOfTokens($this->numberOfTokensPerIdentity);

        $identity->provePossessionOfU2fDevice(

            new SecondFactorId($command->secondFactorId),

            new U2fKeyHandle($command->keyHandle),

            $this->emailVerificationIsRequired($identity),

            $this->configurableSettings->createNewEmailVerificationWindow()

        );

        $this->eventSourcedRepository->save($identity);

    }

    /**

     * @param VerifyEmailCommand $command