Completed
Push — feature/expected-saml-issuer-c... ( b84478 )
by A.
09:30
created

Configuration::appendRemoteIdpConfiguration()   A

Complexity

Conditions 1
Paths 1

Size

Total Lines 7
Code Lines 5

Duplication

Lines 0
Ratio 0 %

Importance

Changes 0
Metric Value
c 0
b 0
f 0
dl 0
loc 7
rs 9.4285
cc 1
eloc 5
nc 1
nop 1
1
<?php
2
3
/**
4
 * Copyright 2015 SURFnet bv
5
 *
6
 * Licensed under the Apache License, Version 2.0 (the "License");
7
 * you may not use this file except in compliance with the License.
8
 * You may obtain a copy of the License at
9
 *
10
 *     http://www.apache.org/licenses/LICENSE-2.0
11
 *
12
 * Unless required by applicable law or agreed to in writing, software
13
 * distributed under the License is distributed on an "AS IS" BASIS,
14
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15
 * See the License for the specific language governing permissions and
16
 * limitations under the License.
17
 */
18
19
namespace Surfnet\StepupSelfService\SelfServiceBundle\DependencyInjection;
20
21
use Surfnet\StepupBundle\Exception\DomainException;
22
use Surfnet\StepupBundle\Exception\InvalidArgumentException;
23
use Surfnet\StepupBundle\Value\SecondFactorType;
24
use Symfony\Component\Config\Definition\Builder\NodeBuilder;
25
use Symfony\Component\Config\Definition\Builder\TreeBuilder;
26
use Symfony\Component\Config\Definition\ConfigurationInterface;
27
28
class Configuration implements ConfigurationInterface
29
{
30
    public function getConfigTreeBuilder()
31
    {
32
        $treeBuilder = new TreeBuilder();
33
        $rootNode = $treeBuilder->root('surfnet_stepup_self_service_self_service');
34
35
        $childNodes = $rootNode->children();
36
        $this->appendEnabledSecondFactorTypesConfiguration($childNodes);
37
        $this->appendSessionConfiguration($childNodes);
38
        $this->appendRemoteIdpConfiguration($childNodes);
39
40
        return $treeBuilder;
41
    }
42
43
    /**
44
     * @param NodeBuilder $childNodes
45
     */
46
    private function appendSessionConfiguration(NodeBuilder $childNodes)
47
    {
48
        $childNodes
0 ignored issues
show
Bug introduced by
It seems like you code against a specific sub-type and not the parent class Symfony\Component\Config...\Builder\NodeDefinition as the method children() does only exist in the following sub-classes of Symfony\Component\Config...\Builder\NodeDefinition: Symfony\Component\Config...der\ArrayNodeDefinition. Maybe you want to instanceof check for one of these explicitly?

Let’s take a look at an example:

abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}

In the above example, the authenticate() method works fine as long as you just pass instances of MyUser. However, if you now also want to pass a different sub-classes of User which does not have a getDisplayName() method, the code will break.

Available Fixes

  1. Change the type-hint for the parameter:

    class AuthSystem
    {
        public function authenticate(MyUser $user) { /* ... */ }
    }
    
  2. Add an additional type-check:

    class AuthSystem
    {
        public function authenticate(User $user)
        {
            if ($user instanceof MyUser) {
                $this->logger->info(/** ... */);
            }
    
            // or alternatively
            if ( ! $user instanceof MyUser) {
                throw new \LogicException(
                    '$user must be an instance of MyUser, '
                   .'other instances are not supported.'
                );
            }
    
        }
    }
    
Note: PHP Analyzer uses reverse abstract interpretation to narrow down the types inside the if block in such a case.
  1. Add the method to the parent class:

    abstract class User
    {
        /** @return string */
        abstract public function getPassword();
    
        /** @return string */
        abstract public function getDisplayName();
    }
    
Loading history...
49
            ->arrayNode('session_lifetimes')
50
                ->isRequired()
51
                ->children()
52
                    ->integerNode('max_absolute_lifetime')
53
                        ->isRequired()
54
                        ->defaultValue(3600)
55
                        ->info('The maximum lifetime of a session regardless of interaction by the user, in seconds.')
56
                        ->example('3600 -> 1 hour * 60 minutes * 60 seconds')
57
                        ->validate()
58
                            ->ifTrue(
59
                                function ($lifetime) {
60
                                    return !is_int($lifetime);
61
                                }
62
                            )
63
                            ->thenInvalid('max_absolute_lifetime must be an integer')
64
                        ->end()
65
                    ->end()
66
                    ->integerNode('max_relative_lifetime')
67
                        ->isRequired()
68
                        ->defaultValue(600)
69
                        ->info(
70
                            'The maximum relative lifetime of a session; the maximum allowed time between two '
71
                            . 'interactions by the user'
72
                        )
73
                        ->example('600 -> 10 minutes * 60 seconds')
74
                        ->validate()
75
                            ->ifTrue(
76
                                function ($lifetime) {
77
                                    return !is_int($lifetime);
78
                                }
79
                            )
80
                            ->thenInvalid('max_relative_lifetime must be an integer')
81
                        ->end()
82
                    ->end()
83
                ->end()
84
            ->end();
85
    }
86
87
    /**
88
     * @param NodeBuilder $childNodes
89
     */
90
    private function appendEnabledSecondFactorTypesConfiguration(NodeBuilder $childNodes)
91
    {
92
        $childNodes
0 ignored issues
show
Bug introduced by
It seems like you code against a specific sub-type and not the parent class Symfony\Component\Config...\Builder\NodeDefinition as the method prototype() does only exist in the following sub-classes of Symfony\Component\Config...\Builder\NodeDefinition: Symfony\Component\Config...der\ArrayNodeDefinition. Maybe you want to instanceof check for one of these explicitly?

Let’s take a look at an example:

abstract class User
{
    /** @return string */
    abstract public function getPassword();
}

class MyUser extends User
{
    public function getPassword()
    {
        // return something
    }

    public function getDisplayName()
    {
        // return some name.
    }
}

class AuthSystem
{
    public function authenticate(User $user)
    {
        $this->logger->info(sprintf('Authenticating %s.', $user->getDisplayName()));
        // do something.
    }
}

In the above example, the authenticate() method works fine as long as you just pass instances of MyUser. However, if you now also want to pass a different sub-classes of User which does not have a getDisplayName() method, the code will break.

Available Fixes

  1. Change the type-hint for the parameter:

    class AuthSystem
    {
        public function authenticate(MyUser $user) { /* ... */ }
    }
    
  2. Add an additional type-check:

    class AuthSystem
    {
        public function authenticate(User $user)
        {
            if ($user instanceof MyUser) {
                $this->logger->info(/** ... */);
            }
    
            // or alternatively
            if ( ! $user instanceof MyUser) {
                throw new \LogicException(
                    '$user must be an instance of MyUser, '
                   .'other instances are not supported.'
                );
            }
    
        }
    }
    
Note: PHP Analyzer uses reverse abstract interpretation to narrow down the types inside the if block in such a case.
  1. Add the method to the parent class:

    abstract class User
    {
        /** @return string */
        abstract public function getPassword();
    
        /** @return string */
        abstract public function getDisplayName();
    }
    
Loading history...
93
            ->arrayNode('enabled_second_factors')
94
                ->isRequired()
95
                ->prototype('scalar')
96
                    ->validate()
97
                        ->ifTrue(
98
                            function ($type) {
99
                                try {
100
                                    new SecondFactorType($type);
101
                                } catch (InvalidArgumentException $e) {
102
                                    return true;
103
                                } catch (DomainException $e) {
104
                                    return true;
105
                                }
106
                            }
107
                        )
108
                        ->thenInvalid(
109
                            'Enabled second factor type "%s" is not one of the valid types. See SecondFactorType'
110
                        )
111
                    ->end()
112
                ->end()
113
            ->end();
114
    }
115
116
    private function appendRemoteIdpConfiguration(NodeBuilder $childNodes)
117
    {
118
        $childNodes
119
            ->scalarNode('remote_idp')
120
            ->info('The EntityID of the remote Idp that act as an issuer (Gateway)')
121
            ->end();
122
    }
123
}
124