AppserverIo\Appserver\ServletEngine\Security\Utils\Util::getRoleSets()

Complexity

Conditions	13
Paths	317

Size

Total Lines	103
Code Lines	56

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	0
CRAP Score	182

Importance

Changes	1
Bugs	0	Features	0

<?php
    public static function getRoleSets(String $username, String $lookupName, String $rolesQuery, LoginModuleInterface $aslm)
    {

        try {
            // initialize the map for the groups
            $setsMap = new HashMap();

            // load the application context
            $application = RequestHandler::getApplicationContext();

            /** @var \AppserverIo\Appserver\Core\Api\Node\DatabaseNode $databaseNode */
            $databaseNode = $application->getNamingDirectory()->search($lookupName)->getDatabase();

The method getNamingDirectory() does not exist on AppserverIo\Psr\Application\ApplicationInterface. It seems like you code against a sub-type of AppserverIo\Psr\Application\ApplicationInterface such as AppserverIo\Appserver\Application\Application.

            // prepare the connection parameters and create the DBAL connection
            $connection = DriverManager::getConnection(ConnectionUtil::get($application)->fromDatabaseNode($databaseNode));

            // try to load the principal's roles from the database
            $statement = $connection->prepare($rolesQuery);
            $statement->bindParam(1, $username);
            $statement->execute();

            // query whether or not we've a password found or not
            $row = $statement->fetch(\PDO::FETCH_NUM);

            // query whether or not we've found at least one role
            if ($row == false) {
                // try load the unauthenticated identity
                if ($aslm->getUnauthenticatedIdentity() == null) {

The method getUnauthenticatedIdentity() does not exist on AppserverIo\Psr\Security\Auth\Spi\LoginModuleInterface. It seems like you code against a sub-type of AppserverIo\Psr\Security\Auth\Spi\LoginModuleInterface such as AppserverIo\Appserver\ServletEngine\Security\Auth\Spi\AbstractLoginModule.

                    throw new FailedLoginException('No matching username found in Roles');
                }

                // we're running with an unauthenticatedIdentity so create an empty roles set and return
                return array(new SimpleGroup(Util::DEFAULT_GROUP_NAME));
            }

            do {
                // load the found name and initialize the group name with a default value
                $name = $row[0];
                $groupName = Util::DEFAULT_GROUP_NAME;

                // query whether or not we've to initialize a default group
                if (isset($row[1])) {
                    $groupName = $row[1];
                }

                // query whether or not the group already exists in the set
                if ($setsMap->exists($groupName) === false) {
                    $group = new SimpleGroup(new String($groupName));
                    $setsMap->add($groupName, $group);
                } else {
                    $group = $setsMap->get($groupName);
                }

                try {
                    // add the user to the group
                    $group->addMember($aslm->createIdentity(new String($name)));

The method createIdentity() does not exist on AppserverIo\Psr\Security\Auth\Spi\LoginModuleInterface. It seems like you code against a sub-type of AppserverIo\Psr\Security\Auth\Spi\LoginModuleInterface such as AppserverIo\Appserver\ServletEngine\Security\Auth\Spi\AbstractLoginModule.

                    // log a message
                    $application
                        ->getNamingDirectory()
                        ->search(NamingDirectoryKeys::SYSTEM_LOGGER)
                        ->debug(sprintf('Assign user to role: %s', $name));
                } catch (\Exception $e) {
                    $application
                        ->getNamingDirectory()
                        ->search(NamingDirectoryKeys::SYSTEM_LOGGER)
                        ->error(sprintf('Failed to create principal: %s', $name));
                }

            // load one group after another
            } while ($row = $statement->fetch(\PDO::FETCH_OBJ));

        } catch (NamingException $ne) {
            throw new LoginException($ne->__toString());
        } catch (\PDOException $pdoe) {
            throw new LoginException($pdoe->__toString());
        }

        // close the prepared statement
        if ($statement != null) {
            try {
                $statement->closeCursor();
            } catch (\Exception $e) {
                $application
                    ->getNamingDirectory()
                    ->search(NamingDirectoryKeys::SYSTEM_LOGGER)
                    ->error($e->__toString());
            }
        }

        // close the DBAL connection
        if ($connection != null) {
            try {
                $connection->close();
            } catch (\Exception $e) {
                $application
                    ->getNamingDirectory()
                    ->search(NamingDirectoryKeys::SYSTEM_LOGGER)
                    ->error($e->__toString());
            }
        }

        // return the prepared groups
        return $setsMap->toArray();
    }