OpenConext / Stepup-SelfService

        /** @var SecondFactorService $service */

        $service = $this->get('surfnet_stepup_self_service_self_service.service.second_factor');

        if (!$service->identityHasSecondFactorOfStateWithId($identity->id, $state, $secondFactorId)) {

            $this->get('logger')->error(sprintf(

                'Identity "%s" tried to revoke "%s" second factor "%s", but does not own that second factor',

                $identity->id,

                $state,

                $secondFactorId

            ));

            throw new NotFoundHttpException();

        }

        switch ($state) {

            case 'unverified':

        $secondFactorService = $this->get('surfnet_stepup_self_service_self_service.service.second_factor');

        $identity            = $this->getIdentity();

        if (!$secondFactorService->identityHasSecondFactorOfStateWithId($identity->id, 'vetted', $secondFactorId)) {

            $this->get('logger')->error(

                sprintf(

                    'Identity "%s" tried to test second factor "%s", but does not own that second factor or it is not vetted',

                    $identity->id,

                    $secondFactorId

                )

            );

            throw $this->createNotFoundException();

        }

        $loaResolutionService         = $this->get('surfnet_stepup.service.loa_resolution');

        $authenticationRequestFactory = $this->get('self_service.test_second_factor_authentication_request_factory');