Chadicus\Psr\Http\ServerMiddleware\Hmac\AuthorizationHeaderExtractor

Complexity

Total Complexity

3

Size/Duplication

Total Lines	45
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	3

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	extract()	0	16	2

<?php

namespace Chadicus\Psr\Http\ServerMiddleware\Hmac;

use Chadicus\Psr\Http\ServerMiddleware\AuthenticationException;
use Chadicus\Psr\Http\ServerMiddleware\Token;
use Chadicus\Psr\Http\ServerMiddleware\TokenExtractorInterface;
use Psr\Http\Message\ServerRequestInterface;

/**
 * Token extractor to obtain a token from an authorization header.
 */
final class AuthorizationHeaderExtractor implements TokenExtractorInterface
{
    /**
     * A custom scheme expected in the Authorization header.
     *
     * @var string
     */
    private $scheme;

    /**
     * Construct a new instance of this extractor
     *
     * @param string $scheme A custom scheme expected in the Authorization header.
     */
    public function __construct(string $scheme = 'hmac')

The parameter $scheme is not used and could be removed.

    {
        $this->scheme = 'hmac';
    }

    /**
     * Extracts the HMAC authentication Token from the given PSR-7 $request.
     *
     * @param ServerRequestInterface $request The request containing the HMAC token data.
     *
     * @return Token
     *
     * @throws AuthenticationException 400 Thrown if any required data is missing.
     */
    public function extract(ServerRequestInterface $request) : Token
    {
        $authorizationHeader = $request->getHeaderLine('Authorization');

        //Authorization: schema PublicKey:Signature:Nonce:Timestamp

        $pattern = "^{$this->scheme}\s(?P<publicKey>[a-zA-z0-9]*):(?P<signature>[a-zA-Z0-9]*):"
                 . '(?P<nonce>[a-zA-Z0-9]*):(?P<timestamp>[0-9]*)$';
        $matches = [];
        $matched = preg_match("/{$pattern}/", $authorizationHeader, $matches);
        if (!$matched) {
            throw new AuthenticationException(400, 'Bad Request');
        }

        return new Token($matches['publicKey'], $matches['signature'], $matches['nonce'], $matches['timestamp']);
    }
}