Tiqr_UserSecretStorage_OathServiceClient

Complexity

Total Complexity

3

Size/Duplication

Total Lines	44
Duplicated Lines	0 %

Test Coverage

Coverage

100%

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	setSecret()	0	4	1
A	getSecret()	0	5	1
A	__construct()	0	4	1

<?php
/**
 * This file is part of the tiqr project.
 *
 * The tiqr project aims to provide an open implementation for
 * authentication using mobile devices. It was initiated by
 * SURFnet and developed by Egeniq.
 *
 * More information: http://www.tiqr.org
 *
 * @author Lineke Kerckhoffs-Willems <lineke@egeniq.com>
 *
 * @package tiqr
 *
 * @license New BSD License - See LICENSE file for details.
 *
 * @copyright (C) 2014 SURFnet BV
 */

use Psr\Log\LoggerInterface;

/**
 * OATHService storage for user's secret
 */
class Tiqr_UserSecretStorage_OathServiceClient implements Tiqr_UserSecretStorage_Interface
{
    private $client;
    /**
     * @var LoggerInterface
     */
    private LoggerInterface $logger;

    public function __construct(Tiqr_API_Client $client, LoggerInterface $logger)
    {
        $this->logger = $logger;
        $this->client = $client;
    }

    /**
     * Get the user's secret
     * Not implemented because the idea of the oathservice is that secrets cannot be retrieved
     *
     * @param String $userId
     *
     * @return string The user's secret
     * @throws Exception
     */
    public function getSecret(string $userId): string
    {
        // By design the keyserver calculates the OCRA response but never revels the secret
        $this->logger->error('Calling getUserSecret on the OathServiceClient is not supported');
        throw new RuntimeException('Calling getUserSecret on the OathServiceClient is not supported');
    }

    /**
     * Store a secret for a user
     *
     * Note that this storage engine does not use the encryption mechnism that PDO and File storage do implement. This
     * is taken care of by the OathService itself.
     *
     * @param string $userId
     * @param string $secret
     * @throws Exception
     */
    public function setSecret(string $userId, string $secret): void
    {
        $this->logger->info('Storing the user secret on the OathServiceClient (api call)');
        $this->client->call('/secrets/'.urlencode($userId), 'POST', array('secret' => $secret));
    }
}