Tiqr_Service::authenticate()

Complexity

Conditions	7
Paths	11

Size

Total Lines	40
Code Lines	25

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	22
CRAP Score	7.0846

Importance

Changes	4
Bugs	0	Features	1

<?php
    public function authenticate($userId, $userSecret, $sessionKey, $response)
    {
        $state = $this->_stateStorage->getValue(self::PREFIX_CHALLENGE . $sessionKey);
        if (is_null($state)) {
            $this->logger->info('The auth challenge could not be found in the state storage');
            return self::AUTH_RESULT_INVALID_CHALLENGE;
        }
        
        $sessionId       = $state["sessionId"];
        $challenge       = $state["challenge"];

        $challengeUserId = NULL;
        if (isset($state["userId"])) {
          $challengeUserId = $state["userId"];
        }
        // Check if we're dealing with a second factor
        if ($challengeUserId!=NULL && ($userId != $challengeUserId)) {
            $this->logger->error(
                'Authentication failed: the first factor user id does not match with that of the second factor'
            );
            return self::AUTH_RESULT_INVALID_USERID; // only allowed to authenticate against the user that's authenticated in the first factor
        }

        $method = $this->_ocraService->getVerificationMethodName();
        if ($method == 'verifyResponseWithUserId') {
            $equal = $this->_ocraService->$method($response, $userId, $challenge, $sessionKey);
        } else {
            $equal = $this->_ocraService->$method($response, $userSecret, $challenge, $sessionKey);
        }

        if ($equal) {
            $this->_stateStorage->setValue("authenticated_".$sessionId, $userId, self::LOGIN_EXPIRE);
            
            // Clean up the challenge.
            $this->_stateStorage->unsetValue(self::PREFIX_CHALLENGE . $sessionKey);
            $this->logger->info('Authentication succeeded');
            return self::AUTH_RESULT_AUTHENTICATED;
        }
        $this->logger->error('Authentication failed: verification failed');
        return self::AUTH_RESULT_INVALID_RESPONSE;
    }