kalanis\kw_forms\Controls\Security\Csrf\JWT

Complexity

Total Complexity

10

Size/Duplication

Total Lines	41
Duplicated Lines	0 %

Test Coverage

Coverage

0%

Importance

Changes	1
Bugs	0	Features	0

5 Methods

Rating	Name	Duplication	Size	Complexity
A	getToken()	0	6	2
A	getExpire()	0	3	1
A	removeToken()	0	3	1
A	checkToken()	0	6	4
A	init()	0	8	2

<?php

namespace kalanis\kw_forms\Controls\Security\Csrf;


use ArrayAccess;
use kalanis\kw_forms\Interfaces\ICsrf;
use kalanis\kw_forms\JWT\Token;


/**
 * Class JWT
 * Secure forms by JWT token
 * @package kalanis\kw_forms\Controls\Security\Csrf
 * @codeCoverageIgnore dependent on remote library
 */
class JWT implements ICsrf
{
    protected string $sessionToken = '';
    protected int $expire = 3600;
    /** @var array<string, string> Token cache */
    protected array $tokens = [];

    public function init(ArrayAccess &$cookie, int $expire = 3600): void
    {
        if (empty($cookie['csrf_token'])) {
            $cookie['csrf_token'] = uniqid('csrf', true);
        }

        $this->sessionToken = strval($cookie['csrf_token']);
        $this->expire = $expire;
    }

    public function removeToken(string $codeName): void
    {
        unset($this->tokens[$codeName]);
    }

    public function getToken(string $codeName): string
    {
        if (!isset($this->tokens[$codeName])) {
            $this->tokens[$codeName] = Token::getJWTToken(['nam' => $codeName, 'ses' => $this->sessionToken], $this->expire);
        }
        return $this->tokens[$codeName];
    }

    public function getExpire(): int
    {
        return $this->expire;
    }

    public function checkToken(string $token, string $codeName): bool
    {
        $data = Token::decodeJWTToken($token);
        return isset($data['nam']) && isset($data['ses']) &&
            ($data['nam'] == $codeName) &&
            ($data['ses'] == $this->sessionToken);
    }
}