Surfnet\StepupSelfService\SelfServiceBundle\Service\SelfAssertedTokens\SafeStoreService

Complexity

Total Complexity

8

Size/Duplication

Total Lines	65
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

7 Methods

Rating	Name	Duplication	Size	Complexity
A	produceSecret()	0	10	2
A	promisePossession()	0	9	1
A	authenticate()	0	3	1
A	revokeRecoveryToken()	0	6	1
A	forgetSafeStoreTokenCreatedDuringSecondFactorRegistration()	0	3	1
A	__construct()	0	4	1
A	wasSafeStoreTokenCreatedDuringSecondFactorRegistration()	0	3	1

<?php

/**
 * Copyright 2022 SURFnet bv
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

namespace Surfnet\StepupSelfService\SelfServiceBundle\Service\SelfAssertedTokens;

use Surfnet\StepupMiddlewareClient\Service\ExecutionResult;
use Surfnet\StepupMiddlewareClientBundle\Identity\Command\PromiseSafeStoreSecretTokenPossessionCommand;
use Surfnet\StepupMiddlewareClientBundle\Identity\Command\RevokeOwnRecoveryTokenCommand;
use Surfnet\StepupMiddlewareClientBundle\Uuid\Uuid;
use Surfnet\StepupSelfService\SelfServiceBundle\Command\PromiseSafeStorePossessionCommand;
use Surfnet\StepupSelfService\SelfServiceBundle\Command\RevokeRecoveryTokenCommand;
use Surfnet\StepupSelfService\SelfServiceBundle\Service\CommandService;
use Surfnet\StepupSelfService\SelfServiceBundle\Service\SelfAssertedTokens\Dto\SafeStoreSecret;
use Surfnet\StepupSelfService\SelfServiceBundle\Service\SelfAssertedTokens\Exception\SafeStoreSecretNotFoundException;

class SafeStoreService
{
    /**
     * @var RecoveryTokenState
     */
    private $stateStore;

    /**
     * @var CommandService
     */
    private $commandService;

    public function __construct(RecoveryTokenState $stateStore, CommandService $commandService)
    {
        $this->stateStore = $stateStore;
        $this->commandService = $commandService;
    }

    public function produceSecret(): SafeStoreSecret
    {
        try {
            // On another request, we might have already created a secret, retrieve that
            $secret = $this->stateStore->retrieveSecret();
        } catch (SafeStoreSecretNotFoundException $e) {
            $secret = new SafeStoreSecret();
            $this->stateStore->store($secret);
        }
        return $secret;
    }

    public function promisePossession(PromiseSafeStorePossessionCommand $command): ExecutionResult
    {
        $apiCommand = new PromiseSafeStoreSecretTokenPossessionCommand();
        $apiCommand->identityId = $command->identity->id;

The property id does not exist on string.

        $apiCommand->recoveryTokenId = Uuid::generate();
        $apiCommand->secret = $command->secret->display();
        $this->stateStore->forget();
        $this->stateStore->tokenCreatedDuringSecondFactorRegistration();
        return $this->commandService->execute($apiCommand);
    }

    public function revokeRecoveryToken(RevokeRecoveryTokenCommand $command): ExecutionResult
    {
        $apiCommand = new RevokeOwnRecoveryTokenCommand();
        $apiCommand->identityId = $command->identity->id;
        $apiCommand->recoveryTokenId = $command->recoveryToken->recoveryTokenId;
        return $this->commandService->execute($apiCommand);
    }

    public function wasSafeStoreTokenCreatedDuringSecondFactorRegistration(): bool
    {
        return $this->stateStore->wasRecoveryTokenCreatedDuringSecondFactorRegistration();
    }

    /**
     * Verifies if the password hash matches the secret that was provided
     */
    public function authenticate(string $secret, string $passwordHash)
    {
        return password_verify($secret, $passwordHash);
    }

    public function forgetSafeStoreTokenCreatedDuringSecondFactorRegistration(): void
    {
        $this->stateStore->forgetTokenCreatedDuringSecondFactorRegistration();
    }
}