Drone\Network\Rest\Digest

Complexity

Total Complexity

11

Size/Duplication

Total Lines	87
Duplicated Lines	0 %

Test Coverage

Coverage

0%

Importance

Changes

0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	request()	0	14	2
A	httpDigestParse()	0	15	4
A	response()	0	5	1
A	authenticate()	0	22	4

<?php
/**
 * DronePHP (http://www.dronephp.com)
 *
 * @link      http://github.com/Pleets/DronePHP
 * @copyright Copyright (c) 2016-2018 Pleets. (http://www.pleets.org)
 * @license   http://www.dronephp.com/license
 * @author    Darío Rivera <fermius.us@gmail.com>
 */

namespace Drone\Network\Rest;

/**
 * Digest class
 *
 * Class for Digest access authetication
 */
class Digest extends AbstractRest
{
    /**
     * Requests client authentication
     *
     * @return null
     */
    public function request()
    {
        if (empty($_SERVER['PHP_AUTH_DIGEST'])) {
            $ht = $this->http;

            $this->http->writeStatus($ht::HTTP_UNAUTHORIZED);
            header(
                'WWW-Authenticate: Digest realm="'.
                $this->realm.
                '",qop="auth",nonce="'.
                uniqid().
                '",opaque="'.md5($this->realm).'"'
            );
            die('Error ' . $ht::HTTP_UNAUTHORIZED .' (' . $this->http->getStatusText($ht::HTTP_UNAUTHORIZED) . ')!!');
        }
    }

    /**
     * Checks credentials
     *
     * @return boolean
     */
    public function authenticate()
    {
        $ht = $this->http;

        if (!($data = $this->http_digest_parse($_SERVER['PHP_AUTH_DIGEST']))

The method http_digest_parse() does not exist on Drone\Network\Rest\Digest. Did you maybe mean httpDigestParse()?

            || !isset($this->whiteList[$data['username']])) {
            $this->http->writeStatus($ht::HTTP_UNAUTHORIZED);
            return false;
        }

        $A1 = md5($data['username'] . ':' . $this->realm . ':' . $this->whiteList[$data['username']]);
        $A2 = md5($_SERVER['REQUEST_METHOD'].':'.$data['uri']);
        $valid_response = md5($A1.':'.$data['nonce'].':'.$data['nc'].':'.$data['cnonce'].':'.$data['qop'].':'.$A2);

        if ($data['response'] != $valid_response) {
            $this->http->writeStatus($ht::HTTP_UNAUTHORIZED);
            return false;
        }

        $this->username = $data['username'];

        return true;
    }

    /**
     * Parse digest parameters
     *
     * @param string $txt
     *
     * @return boolean
     */
    private function httpDigestParse($txt)

The method httpDigestParse() is not used, and could be removed.

    {
        // protect against missing data
        $needed_parts = array('nonce'=>1, 'nc'=>1, 'cnonce'=>1, 'qop'=>1, 'username'=>1, 'uri'=>1, 'response'=>1);
        $data = array();
        $keys = implode('|', array_keys($needed_parts));

        preg_match_all('@(' . $keys . ')=(?:([\'"])([^\2]+?)\2|([^\s,]+))@', $txt, $matches, PREG_SET_ORDER);

        foreach ($matches as $m) {
            $data[$m[1]] = $m[3] ? $m[3] : $m[4];
            unset($needed_parts[$m[1]]);
        }

        return $needed_parts ? false : $data;

$needed_parts is a non-empty array, thus is always true.

    }

    /**
     * Shows the server response
     *
     * @return null
     */
    public function response()
    {
        $status = http_response_code();
        $this->response = 'Error ' . $status .' (' . $this->http->getStatusText($status) . ')!!';
        echo $this->response;
    }
}