kalanis\kw_forms\Controls\Security\Csrf\Simple2

Complexity

Total Complexity

12

Size/Duplication

Total Lines	49
Duplicated Lines	0 %

Test Coverage

Coverage

95.83%

Importance

Changes	1
Bugs	0	Features	1

6 Methods

Rating	Name	Duplication	Size	Complexity
A	checkToken()	0	6	4
A	getToken()	0	7	2
A	removeToken()	0	4	2
A	init()	0	4	1
A	getSession()	0	8	2
A	getExpire()	0	3	1

<?php

namespace kalanis\kw_forms\Controls\Security\Csrf;


use ArrayAccess;
use kalanis\kw_forms\Interfaces\ICsrf;


/**
 * Class Simple2
 * Secure forms by simple tokens
 * @package kalanis\kw_forms\Controls\Security\Csrf
 */
class Simple2 implements ICsrf
{
    protected ?ArrayAccess $session = null;
    protected int $expire = 3600;

    public function init(ArrayAccess &$cookie, int $expire = 3600): void
    {
        $this->session = $cookie;
        $this->expire = $expire;
    }

    public function removeToken(string $codeName): void
    {
        if ($this->getSession()->offsetExists($codeName)) {
            $this->getSession()->offsetUnset($codeName);
        }
    }

    public function getToken(string $codeName): string
    {
        if (!$this->getSession()->offsetExists($codeName)) {
            $this->getSession()->offsetSet($codeName, bin2hex(random_bytes(64)));
            $this->getSession()->offsetSet($codeName . '_timer', time() + $this->expire);
        }
        return strval($this->getSession()->offsetGet($codeName));
    }

    public function getExpire(): int
    {
        return $this->expire;
    }

    public function checkToken(string $token, string $codeName): bool
    {
        return $this->getSession()->offsetExists($codeName)
                && $this->getSession()->offsetExists($codeName . '_timer')
                && $this->getSession()->offsetGet($codeName) == $token
                && $this->getSession()->offsetGet($codeName . '_timer') > time()
                ;
    }

    protected function getSession(): ArrayAccess
    {
        if (!empty($this->session)) {
            return $this->session;
        }
        // @codeCoverageIgnoreStart
        // you need to whant session before call that sets the control
        throw new \LogicException('Set the session first!');
        // @codeCoverageIgnoreEnd
    }
}