SMG\ManagerBundle\Controller\Traits\TokenFromHeaderTrait

Complexity

Total Complexity

23

Size/Duplication

Total Lines	67
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	0

Test Coverage

Coverage

90.91%

Importance

Changes	3
Bugs	0	Features	2

4 Methods

Rating	Name	Duplication	Size	Complexity
A	throwIfClientNot()	0	13	2
A	getCurrentUser()	0	9	1
A	getFOSOauthServer()	0	4	1
A	getAccessTokenString()	0	11	1

<?php

namespace SMG\ManagerBundle\Controller\Traits;

trait TokenFromHeaderTrait
{
    /**
     * Extract the access token from the HTTP request header and
     * format it from oauth2 format to return only the token string.
     *
     * @return string access token
     */
    public function getAccessTokenString()
    {
        $request = $this->getRequest();

It seems like getRequest() must be provided by classes using this trait. How about adding it as abstract method to this trait?

        $headers = $request->headers->all();

        return str_replace(
            'Bearer ',
            '',
            $headers['authorization']
        );
    }

    /**
     * Check if the user is currently through a token
     * linked to allowed client(s) for an action.
     *
     * @param string $allowedType client type to check
     *
     * @return bool
     *
     * @throws AccessDeniedException
     */
    public function throwIfClientNot($allowedType)
    {
        $accessToken = $this->getFOSOauthServer()->verifyAccessToken(
            $this->getAccessTokenString(),
            'user'
        );

        if (!$accessToken->getClient()->isTypeEqualsTo($allowedType)) {
            throw $this->createAccessDeniedException(

It seems like createAccessDeniedException() must be provided by classes using this trait. How about adding it as abstract method to this trait?

                'This user type is not allowed for this operation.'
            );
        }
    }

    /**
     * get current by accessToken.
     *
     * @return User
     */
    public function getCurrentUser()
    {
        $accessToken = $this->getFOSOauthServer()->verifyAccessToken(
            $this->getAccessTokenString(),
            'user'
        );

        return $accessToken->getUser();
    }

    /**
     *
     */
    private function getFOSOauthServer()
    {
        return $this->get('fos_oauth_server.server');

It seems like get() must be provided by classes using this trait. How about adding it as abstract method to this trait?

    }
}