LoginCidadao\OAuthBundle\EventListener\OAuthEventListener

Complexity

Total Complexity

10

Size/Duplication

Total Lines	107
Duplicated Lines	0 %

Test Coverage

Coverage

100%

Importance

Changes

0

5 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	9	1
A	onPreAuthorizationProcess()	0	18	3
A	getUser()	0	3	1
A	checkSubjectIdentifierPersisted()	0	13	2
B	onPostAuthorizationProcess()	0	41	3

<?php
/**
 * This file is part of the login-cidadao project or it's bundles.
 *
 * (c) Guilherme Donato <guilhermednt on github>
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

namespace LoginCidadao\OAuthBundle\EventListener;

use Doctrine\ORM\EntityManagerInterface;
use FOS\OAuthServerBundle\Event\OAuthEvent;
use LoginCidadao\CoreBundle\Entity\Authorization;
use LoginCidadao\CoreBundle\Entity\PersonRepository;
use LoginCidadao\CoreBundle\Model\PersonInterface;
use LoginCidadao\OAuthBundle\Entity\Client;
use LoginCidadao\OAuthBundle\Helper\ScopeFinderHelper;
use LoginCidadao\OAuthBundle\Model\ClientInterface;
use LoginCidadao\OpenIDBundle\Entity\SubjectIdentifier;
use LoginCidadao\OpenIDBundle\Service\SubjectIdentifierService;

class OAuthEventListener
{
    /** @var EntityManagerInterface */
    private $em;

    /** @var PersonRepository */
    private $personRepo;

    /** @var SubjectIdentifierService */
    private $subjectIdentifierService;

    /** @var ScopeFinderHelper */
    private $scopeFinder;

    public function __construct(
        EntityManagerInterface $em,
        ScopeFinderHelper $scopeFinder,
        SubjectIdentifierService $subjectIdentifierService
    ) {
        $this->em = $em;
        $this->personRepo = $this->em->getRepository('LoginCidadaoCoreBundle:Person');
        $this->scopeFinder = $scopeFinder;
        $this->subjectIdentifierService = $subjectIdentifierService;
    }

    public function onPreAuthorizationProcess(OAuthEvent $event)
    {
        $scope = $this->scopeFinder->getScope();
        /** @var PersonInterface $user */
        $user = $this->getUser($event);
        if (!$user) {

The condition ! $user can never be false.

            return;
        }

        /** @var ClientInterface $client */
        $client = $event->getClient();

        $event->setAuthorizedClient(
            $user->isAuthorizedClient($client, $scope)
        );

        if ($event->isAuthorizedClient()) {
            $this->checkSubjectIdentifierPersisted($user, $client);
        }
    }

    public function onPostAuthorizationProcess(OAuthEvent $event)
    {
        if (!$event->isAuthorizedClient()) {
            return;
        }

        /** @var Client $client */
        $client = $event->getClient();

        /** @var PersonInterface $user */
        $user = $this->getUser($event);
        $scope = $this->scopeFinder->getScope();

        $authRepo = $this->em->getRepository('LoginCidadaoCoreBundle:Authorization');
        $currentAuth = $authRepo->findOneBy([
            'person' => $user,
            'client' => $client,
        ]);

        // if the authorization is already there, update it.
        if ($currentAuth instanceof Authorization) {
            $merged = array_merge($currentAuth->getScope(), $scope);
            $currentAuth->setScope($merged);
            $this->checkSubjectIdentifierPersisted($user, $client);
        } else {
            $authorization = new Authorization();
            $authorization->setClient($client);
            $authorization->setPerson($user);
            $authorization->setScope($scope);

            $subjectIdentifier = $this->subjectIdentifierService->getSubjectIdentifier($user, $client->getMetadata());
            $sub = new SubjectIdentifier();
            $sub->setPerson($user)
                ->setClient($client)
                ->setSubjectIdentifier($subjectIdentifier);

            $this->em->persist($authorization);
            $this->em->persist($sub);
        }

        $this->em->flush();
    }

    public function getUser(OAuthEvent $event)
    {
        return $this->personRepo->findOneBy(['username' => $event->getUser()->getUsername()]);
    }

    private function checkSubjectIdentifierPersisted(PersonInterface $person, ClientInterface $client)
    {
        if ($this->subjectIdentifierService->isSubjectIdentifierPersisted($person, $client)) {
            return;
        }

        $subjectIdentifier = $this->subjectIdentifierService->getSubjectIdentifier($person, $client->getMetadata());
        $sub = new SubjectIdentifier();
        $sub->setPerson($person)
            ->setClient($client)
            ->setSubjectIdentifier($subjectIdentifier);
        $this->em->persist($sub);
        $this->em->flush($sub);
    }
}