SocialConnect\OpenIDConnect\Provider\AzureAD

Complexity

Total Complexity

13

Size/Duplication

Total Lines	106
Duplicated Lines	0 %

Test Coverage

Coverage

75.86%

Importance

Changes	1
Bugs	0	Features	0

10 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	9	2
A	getBaseUri()	0	3	1
A	getName()	0	3	1
A	getOpenIdUrl()	0	3	1
A	getAuthorizeUri()	0	3	1
A	getScopeInline()	0	3	1
A	prepareRequest()	0	4	2
A	getIdentity()	0	3	1
A	getRequestTokenUri()	0	3	1
A	extractIdentity()	0	19	2

<?php

declare(strict_types=1);

namespace SocialConnect\OpenIDConnect\Provider;

use SocialConnect\Common\ArrayHydrator;
use SocialConnect\Common\Entity\User;
use SocialConnect\Common\Exception\InvalidArgumentException;
use SocialConnect\OpenIDConnect\AccessToken;
use SocialConnect\Provider\AccessTokenInterface;
use SocialConnect\OpenIDConnect\AbstractProvider;
use SocialConnect\Common\HttpStack;
use SocialConnect\Provider\Session\SessionInterface;

class AzureAD extends AbstractProvider
{
    const NAME = 'azure-ad';
    const MS_GRAPH_API = 'https://graph.microsoft.com';

    /**
     * @var string
     */
    private $baseUri;

    public function __construct(HttpStack $httpStack, SessionInterface $session, array $parameters)
    {
        if (!isset($parameters['directoryId'])) {
            throw new \InvalidArgumentException('There is no "baseUri" given in the configuration');
        }

        $this->baseUri = sprintf("https://login.microsoftonline.com/%s/", $parameters['directoryId']);

        parent::__construct($httpStack, $session, $parameters);
    }

    /**
     * {@inheritdoc}
     */
    public function getBaseUri()
    {
        return $this->baseUri;
    }

    /**
     * {@inheritdoc}
     */
    public function getAuthorizeUri()
    {
        return $this->baseUri . 'oauth2/v2.0/authorize';
    }

    /**
     * {@inheritdoc}
     */
    public function getRequestTokenUri()
    {
        return $this->baseUri . 'oauth2/v2.0/token';
    }

    /**
     * {@inheritdoc}
     */
    public function getOpenIdUrl()
    {
        return $this->baseUri . 'v2.0/.well-known/openid-configuration';
    }

    /**
     * {@inheritdoc}
     */
    public function getName()
    {
        return self::NAME;
    }

    public function prepareRequest(string $method, string $uri, array &$headers, array &$query, ?AccessTokenInterface $accessToken = null): void
    {
        if ($accessToken) {
            $headers['Authorization'] = 'Bearer ' . $accessToken->getToken();
        }
    }

    /**
     * {@inheritdoc}
     */
    public function extractIdentity(AccessTokenInterface $accessToken)
    {
        if (!$accessToken instanceof AccessToken) {
            throw new InvalidArgumentException(
                '$accessToken must be instance AccessToken'
            );
        }

        $jwt = $accessToken->getJwt();

        $hydrator = new ArrayHydrator([
            'sub' => 'id',
            'name' => 'username',
            'email' => 'email'
        ]);

        $user = $hydrator->hydrate(new User(), $jwt->getPayload());

        return $user;
    }

    /**
     * {@inheritdoc}
     */
    public function getIdentity(AccessTokenInterface $accessToken)
    {
        return $this->extractIdentity($accessToken);
    }

    /**
     * {@inheritdoc}
     */
    public function getScopeInline()
    {
        return implode(' ', $this->scope);
    }
}