App\Controller\ServiceProviderController

Complexity

Total Complexity

22

Size/Duplication

Total Lines	147
Duplicated Lines	0 %

Test Coverage

Coverage

0%

Importance

Changes	2
Bugs	0	Features	1

7 Methods

Rating	Name	Duplication	Size	Complexity
B	loadXml()	0	33	8
A	__construct()	0	2	1
A	certificateInfo()	0	12	2
A	remove()	0	19	3
A	edit()	0	14	3
A	add()	0	20	4
A	index()	0	6	1

<?php

namespace App\Controller;

use App\Entity\SamlServiceProvider;
use App\Entity\ServiceProvider;
use App\Form\ServiceProviderType;
use App\Repository\ServiceProviderRepositoryInterface;
use App\Service\ServiceProviderTokenGenerator;
use Exception;
use LightSaml\Model\Metadata\EntityDescriptor;
use SchulIT\CommonBundle\Form\ConfirmType;
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\HttpFoundation\Exception\BadRequestException;
use Symfony\Component\HttpFoundation\JsonResponse;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\Routing\Annotation\Route;
use Symfony\Contracts\HttpClient\Exception\TransportExceptionInterface;
use Symfony\Contracts\HttpClient\HttpClientInterface;
use Symfony\Contracts\Translation\TranslatorInterface;

/**
 * @Route("/admin/service_providers")
 */
class ServiceProviderController extends AbstractController {

    private $repository;

    public function __construct(ServiceProviderRepositoryInterface $repository) {
        $this->repository = $repository;
    }

    /**
     * @Route("", name="service_providers")
     */
    public function index() {
        $serviceProviders = $this->repository
            ->findAll();

        return $this->render('service_providers/index.html.twig', [
            'service_providers' => $serviceProviders
        ]);
    }

    /**
     * @Route("/{uuid}/certificate", name="service_provider_certificate")
     */
    public function certificateInfo(ServiceProvider $serviceProvider) {
        if(!$serviceProvider instanceof SamlServiceProvider) {
            return $this->redirectToRoute('service_providers');
        }

        $cert = openssl_x509_read($serviceProvider->getCertificate());
        $certificateInfo = openssl_x509_parse($cert);
        openssl_x509_free($cert);

        return $this->render('service_providers/info.html.twig', [
            'service_provider' => $serviceProvider,
            'certificate' => $certificateInfo
        ]);
    }

    /**
     * @Route("/add", name="add_service_provider")
     */
    public function add(Request $request) {
        if($request->query->get('type', 'default') === 'saml') {
            $serviceProvider = new SamlServiceProvider();
        } else {
            $serviceProvider = new ServiceProvider();
        }

        $form = $this->createForm(ServiceProviderType::class, $serviceProvider);
        $form->handleRequest($request);

        if($form->isSubmitted() && $form->isValid()) {
            $this->repository->persist($serviceProvider);

            $this->addFlash('success', 'service_providers.add.success');
            return $this->redirectToRoute('service_providers');
        }

        return $this->render('service_providers/add.html.twig', [
            'form' => $form->createView(),
            'type' => get_class($serviceProvider)
        ]);
    }

    /**
     * @Route("/{uuid}/edit", name="edit_service_provider")
     */
    public function edit(Request $request, ServiceProvider $serviceProvider) {
        $form = $this->createForm(ServiceProviderType::class, $serviceProvider);
        $form->handleRequest($request);

        if($form->isSubmitted() && $form->isValid()) {
            $this->repository->persist($serviceProvider);

            $this->addFlash('success', 'service_providers.edit.success');
            return $this->redirectToRoute('service_providers');
        }

        return $this->render('service_providers/edit.html.twig', [
            'form' => $form->createView(),
            'service_provider' => $serviceProvider
        ]);
    }

    /**
     * @Route("/{uuid}/remove", name="remove_service_provider")
     */
    public function remove(ServiceProvider $serviceProvider, Request $request, TranslatorInterface $translator) {
        $form = $this->createForm(ConfirmType::class, [], [
            'message' => $translator->trans('service_providers.remove.confirm', [
                '%name%' => $serviceProvider->getName()
            ]),
            'label' => 'service_providers.remove.label'
        ]);
        $form->handleRequest($request);

        if($form->isSubmitted() && $form->isValid()) {
            $this->repository->remove($serviceProvider);

            $this->addFlash('success', 'service_providers.remove.success');
            return $this->redirectToRoute('service_providers');
        }

        return $this->render('service_providers/remove.html.twig', [
            'form' => $form->createView(),
            'service_provider' => $serviceProvider
        ]);
    }

    /**
     * @Route("/metadata", name="load_xml_metadata")
     * @throws TransportExceptionInterface
     * @throws Exception
     */
    public function loadXml(Request $request, HttpClientInterface $httpClient) {
        $url = $request->query->get('url');

        if(empty($url)) {
            throw new BadRequestException();
        }

        $response = $httpClient->request('GET', $url);
        if($response->getStatusCode() < 200 || $response->getStatusCode() >= 300) {
            throw new Exception(sprintf('Request was not successful. Got status %d', $response->getStatusCode()));
        }

        $xml = $response->getContent();
        $descriptor = EntityDescriptor::loadXml($xml);
        $certificate = null;
        $acs = null;

        foreach($descriptor->getAllSpKeyDescriptors() as $spKeyDescriptor) {
            if($spKeyDescriptor->getUse() === 'encryption') {
                $certificate = $spKeyDescriptor->getCertificate()->toPem();
            }
        }

        $sspSsoDescriptor = $descriptor->getFirstSpSsoDescriptor();

        if($sspSsoDescriptor !== null && $sspSsoDescriptor->getFirstAssertionConsumerService() !== null) {
            $acs = $sspSsoDescriptor->getFirstAssertionConsumerService()->getLocation();
        }

        return new JsonResponse([
            'entity_id' => $descriptor->getEntityID(),
            'certificate' => $certificate,
            'acs' => $acs
        ]);
    }
}