Chadicus\Slim\OAuth2\Routes\Authorize

Complexity

Total Complexity

7

Size/Duplication

Total Lines	98
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	8

Importance

Changes	3
Bugs	0	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	20	4
B	__invoke()	0	25	3

<?php

namespace Chadicus\Slim\OAuth2\Routes;

use Chadicus\Slim\OAuth2\Http;
use Psr\Http\Message\ServerRequestInterface;
use Psr\Http\Message\ResponseInterface;
use OAuth2;

/**
 * Slim route for /authorization endpoint.
 */
final class Authorize implements RouteCallbackInterface
{
    const ROUTE = '/authorize';

    /**
     * The slim framework view helper.
     *
     * @var object
     */
    private $view;

    /**
     * The oauth2 server imstance.
     *
     * @var OAuth2\Server
     */
    private $server;

    /**
     * The template for /authorize
     *
     * @var string
     */
    private $template;

    /**
     * Extracts user_id from the incoming request.
     *
     * @var UserIdProviderInterface
     */
    private $userIdProvider;

    /**
     * Construct a new instance of Authorize.
     *
     * @param OAuth2\Server           $server         The oauth2 server imstance.
     * @param object                  $view           The slim framework view helper.
     * @param string                  $template       The template for /authorize.
     * @param UserIdProviderInterface $userIdProvider Object to extract a user_id based on the incoming request.
     *
     * @throws \InvalidArgumentException Thrown if $view is not an object implementing a render method.
     */
    public function __construct(
        OAuth2\Server $server,
        $view,
        $template = '/authorize.phtml',
        UserIdProviderInterface $userIdProvider = null
    ) {
        if (!is_object($view) || !method_exists($view, 'render')) {
            throw new \InvalidArgumentException('$view must implement a render() method');
        }

        $this->server = $server;
        $this->view = $view;
        $this->template = $template;

        if ($userIdProvider == null) {
            $userIdProvider = new UserIdProvider();
        }

        $this->userIdProvider = $userIdProvider;
    }

    /**
     * Invoke this route callback.
     *
     * @param ServerRequestInterface $request   Represents the current HTTP request.
     * @param ResponseInterface      $response  Represents the current HTTP response.
     * @param array                  $arguments Values for the current route’s named placeholders.
     *
     * @return ResponseInterface
     */
    public function __invoke(ServerRequestInterface $request, ResponseInterface $response, array $arguments = [])
    {
        $oauth2Request = Http\RequestBridge::toOAuth2($request);
        $oauth2Response = new OAuth2\Response();
        $isValid = $this->server->validateAuthorizeRequest($oauth2Request, $oauth2Response);
        if (!$isValid) {
            return Http\ResponseBridge::fromOAuth2($oauth2Response);
        }

        $authorized = $oauth2Request->request('authorized');
        if (empty($authorized)) {
            $response = Http\ResponseBridge::fromOAuth2($oauth2Response);
            $this->view->render($response, $this->template, ['client_id' => $oauth2Request->query('client_id')]);
            return $response->withHeader('Content-Type', 'text/html');
        }

        $this->server->handleAuthorizeRequest(
            $oauth2Request,
            $oauth2Response,
            $authorized === 'yes',
            $this->userIdProvider->getUserId($request, $arguments)
        );

        return Http\ResponseBridge::fromOAuth2($oauth2Response);
    }
}