SlayerBirden\DataFlowServer\Authentication\Middleware\PasswordConfirmationMiddleware

Complexity

Total Complexity

5

Size/Duplication

Total Lines	39
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	5

Test Coverage

Coverage

93.75%

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	process()	0	23	4

<?php
declare(strict_types=1);

namespace SlayerBirden\DataFlowServer\Authentication\Middleware;

use Psr\Http\Message\ResponseInterface;
use Psr\Http\Message\ServerRequestInterface;
use Psr\Http\Server\MiddlewareInterface;
use Psr\Http\Server\RequestHandlerInterface;
use SlayerBirden\DataFlowServer\Authentication\PasswordManagerInterface;
use SlayerBirden\DataFlowServer\Stdlib\Validation\DataValidationResponseFactory;
use SlayerBirden\DataFlowServer\Stdlib\Validation\GeneralErrorResponseFactory;

final class PasswordConfirmationMiddleware implements MiddlewareInterface
{
    /**
     * @var PasswordManagerInterface
     */
    private $passwordManager;

    public function __construct(PasswordManagerInterface $passwordManager)
    {
        $this->passwordManager = $passwordManager;
    }

    /**
     * @inheritdoc
     */
    public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
    {
        $data = $request->getParsedBody();
        if (!is_array($data)) {
            return (new DataValidationResponseFactory())();
        }
        $password = $data['password'] ?? null;

        if (empty($password)) {
            $msg = 'The action requires password confirmation. No password provided.';
            return (new GeneralErrorResponseFactory())($msg, null, 412);
        } else {
            unset($data['password']);
        }

        $user = $request->getAttribute(TokenMiddleware::USER_PARAM);
        if (!$this->passwordManager->isValidForUser((string)$password, $user)) {
            return (new GeneralErrorResponseFactory())('Invalid password provided.', null, 412);
        }

        // serve down the pipe without password data
        return $handler->handle($request->withParsedBody($data));
    }
}