SlayerBirden\DataFlowServer\Authentication\Controller\GetTokenAction

Complexity

Total Complexity

5

Size/Duplication

Total Lines	72
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	8

Test Coverage

Coverage

100%

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	9	1
A	process()	0	43	4

<?php
declare(strict_types=1);

namespace SlayerBirden\DataFlowServer\Authentication\Controller;

use Psr\Http\Message\ResponseInterface;
use Psr\Http\Message\ServerRequestInterface;
use Psr\Http\Server\MiddlewareInterface;
use Psr\Http\Server\RequestHandlerInterface;
use SlayerBirden\DataFlowServer\Authentication\Exception\InvalidCredentialsException;
use SlayerBirden\DataFlowServer\Authentication\Exception\PermissionDeniedException;
use SlayerBirden\DataFlowServer\Authentication\TokenManagerInterface;
use SlayerBirden\DataFlowServer\Notification\DangerMessage;
use SlayerBirden\DataFlowServer\Notification\SuccessMessage;
use SlayerBirden\DataFlowServer\Stdlib\Validation\ValidationResponseFactory;
use Zend\Diactoros\Response\JsonResponse;
use Zend\Hydrator\ExtractionInterface;
use Zend\InputFilter\InputFilterInterface;

class GetTokenAction implements MiddlewareInterface
{
    /**
     * @var TokenManagerInterface
     */
    private $tokenManager;
    /**
     * @var ExtractionInterface
     */
    private $extraction;
    /**
     * @var InputFilterInterface
     */
    private $inputFilter;

    public function __construct(
        TokenManagerInterface $tokenManager,
        ExtractionInterface $extraction,
        InputFilterInterface $inputFilter
    ) {
        $this->tokenManager = $tokenManager;
        $this->extraction = $extraction;
        $this->inputFilter = $inputFilter;
    }

    /**
     * @inheritdoc
     */
    public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
    {
        $data = $request->getParsedBody();
        $this->inputFilter->setData($data);

It seems like $data defined by $request->getParsedBody() on line 50 can also be of type null or object; however, Zend\InputFilter\InputFilterInterface::setData() does only seem to accept array|object<Traversable>, maybe add an additional type check?

        if (!$this->inputFilter->isValid()) {
            return (new ValidationResponseFactory())('token', $this->inputFilter);
        }

        try {
            $token = $this->tokenManager->getToken($data['user'], $data['password'], $data['resources']);
            return new JsonResponse([
                'data' => [
                    'token' => $this->extraction->extract($token),
                    'validation' => [],
                ],
                'success' => true,
                'msg' => new SuccessMessage('Token successfully creaeted'),
            ], 200);
        } catch (InvalidCredentialsException $exception) {
            return new JsonResponse([
                'data' => [
                    'token' => null,
                    'validation' => [],
                ],
                'success' => false,
                'msg' => new DangerMessage(
                    'Invalid credentials provided. Please double check your user and password.'
                ),
            ], 401);
        } catch (PermissionDeniedException $exception) {
            return new JsonResponse([
                'data' => [
                    'token' => null,
                    'validation' => [],
                ],
                'success' => false,
                'msg' => new DangerMessage(
                    'Provided user does not have permission to access requested resources.'
                ),
            ], 403);
        }
    }
}