Gewaer\Middleware\TokenValidationMiddleware::call()

Complexity

Conditions	6
Paths	2

Size

Total Lines	33
Code Lines	16

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php

    public function call(Micro $api)

    {

        $config = $api->getService('config');


        $auth = $api->getService('auth');

        // to get the payload

        $data = $auth->data();


        $api->getDI()->setShared(

            'userData',

            function () use ($config, $data) {

The import $config is not used and could be removed.

                $session = new Sessions();

                $request = new Request();


                if (!empty($data) && !empty($data['sessionId'])) {

                    //user

                    if (!$user = Users::getByEmail($data['email'])) {

                        throw new Exception('User not found');

                    }


                    return $session->check($user, $data['sessionId'], $request->getClientAddress(), 1);

It seems like $request->getClientAddress() can also be of type boolean; however, parameter $userIp of Baka\Auth\Models\Sessions::check() does only seem to accept string, maybe add an additional type check?

                } else {

                    throw new Exception('User not found');

                }

            }

        );


        if (!empty($data) && $data['iat'] <= strtotime('-10 seconds')) {

            // return false to invalidate the authentication

            //throw new Exception("Old Request");

        }


        return true;

    }