Jose\Component\Signature\Serializer\JSONGeneralSerializer

Complexity

Total Complexity

30

Size/Duplication

Total Lines	142
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	5

Importance

Changes

0

6 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	displayName()	0	4	1
A	name()	0	4	1
B	serialize()	0	31	6
F	unserialize()	0	47	15
B	checkPayloadEncoding()	0	17	6

<?php

declare(strict_types=1);

/*
 * The MIT License (MIT)
 *
 * Copyright (c) 2014-2017 Spomky-Labs
 *
 * This software may be modified and distributed under the terms
 * of the MIT license.  See the LICENSE file for details.
 */

namespace Jose\Component\Signature\Serializer;

use Base64Url\Base64Url;
use Jose\Component\Core\Converter\JsonConverterInterface;
use Jose\Component\Signature\JWS;

/**
 * Class JSONGeneralSerializer.
 */
final class JSONGeneralSerializer extends AbstractSerializer
{
    public const NAME = 'jws_json_general';

    /**
     * @var JsonConverterInterface
     */
    private $jsonConverter;

    /**
     * JSONFlattenedSerializer constructor.
     *
     * @param JsonConverterInterface $jsonConverter
     */
    public function __construct(JsonConverterInterface $jsonConverter)
    {
        $this->jsonConverter = $jsonConverter;
    }

    /**
     * {@inheritdoc}
     */
    public function displayName(): string
    {
        return 'JWS JSON General';
    }

    /**
     * {@inheritdoc}
     */
    public function name(): string
    {
        return self::NAME;
    }

    /**
     * {@inheritdoc}
     */
    public function serialize(JWS $jws, ?int $signatureIndex = null): string
    {
        if (0 === $jws->countSignatures()) {
            throw new \LogicException('No signature.');
        }

        $data = [];
        $this->checkPayloadEncoding($jws);

        if (false === $jws->isPayloadDetached()) {
            $data['payload'] = $jws->getEncodedPayload();
        }

        $data['signatures'] = [];
        foreach ($jws->getSignatures() as $signature) {
            $tmp = ['signature' => Base64Url::encode($signature->getSignature())];
            $values = [
                'protected' => $signature->getEncodedProtectedHeaders(),
                'header' => $signature->getHeaders(),
            ];

            foreach ($values as $key => $value) {
                if (!empty($value)) {
                    $tmp[$key] = $value;
                }
            }
            $data['signatures'][] = $tmp;
        }

        return $this->jsonConverter->encode($data);
    }

    /**
     * {@inheritdoc}
     */
    public function unserialize(string $input): JWS
    {
        $data = $this->jsonConverter->decode($input);
        if (!is_array($data) || !array_key_exists('signatures', $data)) {
            throw new \InvalidArgumentException('Unsupported input.');
        }

        $isPayloadEncoded = null;
        $rawPayload = array_key_exists('payload', $data) ? $data['payload'] : null;
        $signatures = [];
        foreach ($data['signatures'] as $signature) {
            if (!is_array($signature) || !array_key_exists('signature', $signature)) {
                throw new \InvalidArgumentException('Unsupported input.');
            }
            $encodedProtectedHeaders = array_key_exists('protected', $signature) ? $signature['protected'] : null;
            $protectedHeaders = null !== $encodedProtectedHeaders ? $this->jsonConverter->decode(Base64Url::decode($encodedProtectedHeaders)) : [];
            $signatures[] = [
                'signature' => Base64Url::decode($signature['signature']),
                'protected' => $protectedHeaders,
                'encoded_protected' => $encodedProtectedHeaders,
                'header' => array_key_exists('header', $signature) ? $signature['header'] : [],
            ];
            if (null === $isPayloadEncoded) {
                $isPayloadEncoded = self::isPayloadEncoded($protectedHeaders);
            }
            if ($this->isPayloadEncoded($protectedHeaders) !== $isPayloadEncoded) {
                throw new \InvalidArgumentException('Foreign payload encoding detected.');
            }
        }

        if (null === $rawPayload) {
            $payload = null;
        } else {
            $payload = false === $isPayloadEncoded ? $rawPayload : Base64Url::decode($rawPayload);
        }
        $jws = JWS::create($payload, $rawPayload);
        foreach ($signatures as $signature) {
            $jws = $jws->addSignature(
                $signature['signature'],
                $signature['protected'],
                $signature['encoded_protected'],
                $signature['header']
            );
        }

        return $jws;
    }

    /**
     * @param JWS $jws
     */
    private function checkPayloadEncoding(JWS $jws)
    {
        if ($jws->isPayloadDetached()) {
            return;
        }
        $is_encoded = null;
        foreach ($jws->getSignatures() as $signature) {
            if (null === $is_encoded) {
                $is_encoded = $this->isPayloadEncoded($signature->getProtectedHeaders());
            }
            if (false === $jws->isPayloadDetached()) {
                if ($is_encoded !== $this->isPayloadEncoded($signature->getProtectedHeaders())) {
                    throw new \LogicException('Foreign payload encoding detected.');
                }
            }
        }
    }
}