Application\Auth\Provider\Cookie

Complexity

Total Complexity

5

Size/Duplication

Total Lines	62
Duplicated Lines	0 %

Test Coverage

Coverage

0%

Importance

Changes	1
Bugs	0	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	create()	0	25	1
A	verify()	0	13	4

<?php

/**
 * @copyright Bluz PHP Team
 * @link      https://github.com/bluzphp/skeleton
 */

declare(strict_types=1);

namespace Application\Auth\Provider;

use Application\Auth\Row;
use Application\Auth\Table;
use Application\Users\Row as User;
use Bluz\Auth\AuthException;

The type Bluz\Auth\AuthException was not found. Maybe you did not declare it correctly or list all dependencies?

use Bluz\Db\Exception\DbException;

The type Bluz\Db\Exception\DbException was not found. Maybe you did not declare it correctly or list all dependencies?

use Bluz\Db\Exception\InvalidPrimaryKeyException;

The type Bluz\Db\Exception\InvalidPrimaryKeyException was not found. Maybe you did not declare it correctly or list all dependencies?

use Bluz\Db\Exception\TableNotFoundException;

The type Bluz\Db\Exception\TableNotFoundException was not found. Maybe you did not declare it correctly or list all dependencies?

use Bluz\Proxy\Auth;

The type Bluz\Proxy\Auth was not found. Maybe you did not declare it correctly or list all dependencies?

use Bluz\Proxy\Response;

The type Bluz\Proxy\Response was not found. Maybe you did not declare it correctly or list all dependencies?

use Exception;

/**
 * Cookie Provider
 *
 * @package  Application\Auth\Provider
 */
class Cookie extends AbstractToken
{
    public const PROVIDER = Table::PROVIDER_COOKIE;

    /**
     * {@inheritdoc}
     *
     * @return Row
     * @throws AuthException
     * @throws DbException
     */
    protected static function verify(?Row $authRow): void
    {
        if (!$authRow) {
            throw new AuthException('User can\'t login with cookies');
        }

        if (strtotime($authRow->expired) < time()) {
            self::remove($authRow->userId);
            throw new AuthException('Token has expired');
        }

        if ($authRow->token !== hash('md5', $authRow->token . $authRow->tokenSecret)) {
            throw new AuthException('Incorrect token');
        }
    }


    /**
     * {@inheritdoc}
     *
     * @return Row
     * @throws DbException
     * @throws InvalidPrimaryKeyException
     * @throws TableNotFoundException
     * @throws Exception
     */
    public static function create(User $user): Row
    {
        // remove old Auth record
        self::remove($user->id);

        $ttl = Auth::getInstance()->getOption('cookie', 'ttl');

        // create new auth row
        $authRow = new Row();

        $authRow->userId = $user->id;
        $authRow->foreignKey = $user->login;
        $authRow->provider = self::PROVIDER;
        $authRow->tokenType = Table::TYPE_ACCESS;
        $authRow->expired = gmdate('Y-m-d H:i:s', time() + $ttl);
        // generate secret part is not required
        // encrypt password and save as token
        $authRow->token = bin2hex(random_bytes(32));

        $authRow->save();

        // Not great, not terrible
        Response::setCookie('Auth-Token', $authRow->token, time() + $ttl);

        return $authRow;
    }
}