Jose\Finder\X5UFinder

Complexity

Total Complexity

10

Size/Duplication

Total Lines	61
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	1

Importance

Changes	4
Bugs	3	Features	1

2 Methods

Rating	Name	Duplication	Size	Complexity
C	findJWKSet()	0	30	7
A	downloadContent()	0	19	3

<?php

/*
 * The MIT License (MIT)
 *
 * Copyright (c) 2014-2015 Spomky-Labs
 *
 * This software may be modified and distributed under the terms
 * of the MIT license.  See the LICENSE file for details.
 */

namespace Jose\Finder;

use Jose\KeyConverter\KeyConverter;

/**
 */
class X5UFinder implements JWKSetFinderInterface
{
    /**
     * {@inheritdoc}
     */
    public function findJWKSet(array $header)
    {
        if (!isset($header['x5u'])) {
            return;
        }

        $content = $this->downloadContent($header['x5u']);
        if (null === $content) {
            return;
        }

        $content = json_decode($content, true);
        if (!is_array($content)) {
            return;
        }

        $jwk_set = ['keys'];
        foreach ($content as $kid => $cert) {
            $jwk = KeyConverter::loadKeyFromCertificate($cert);
            if (null === $jwk) {
                break;
            }
            if (is_string($kid)) {
                $jwk['kid'] = $kid;
            }
            $jwk_set['keys'][] = $jwk;
        }

        return $jwk_set;
    }

    /**
     * @param string $url
     *
     * @return string|void
     */
    protected function downloadContent($url)
    {
        // The URL must be a valid URL and scheme must be https
        if (false === filter_var($url, FILTER_VALIDATE_URL, FILTER_FLAG_SCHEME_REQUIRED | FILTER_FLAG_HOST_REQUIRED) || 'https://' !== substr($url, 0, 8)) {
            return;
        }

        $ch = curl_init();
        curl_setopt_array($ch, [
            CURLOPT_RETURNTRANSFER => true,
            CURLOPT_SSL_VERIFYPEER => true,
            CURLOPT_SSL_VERIFYHOST => 2,
            CURLOPT_URL            => $url,
        ]);
        $content = curl_exec($ch);
        curl_close($ch);

        return $content;
    }
}