AzureSyncUsersCommand

Complexity

Total Complexity

18

Size/Duplication

Total Lines	183
Duplicated Lines	0 %

Importance

Changes	3
Bugs	0	Features	0

3 Methods

Rating	Name	Duplication	Size	Complexity
B	__invoke()	0	74	8
A	getAzureUsers()	0	48	5
A	getAzureGroupMembers()	0	40	5

<?php

/* For license terms, see /license.txt */

use Chamilo\UserBundle\Entity\User;

class AzureSyncUsersCommand extends AzureCommand
{
    /**
     * @throws Exception
     *
     * @return Generator<int, string>
     */
    public function __invoke(): Generator
    {
        yield 'Synchronizing users from Azure.';

        /** @var array<string, int> $existingUsers */
        $existingUsers = [];

        foreach ($this->getAzureUsers() as $azureUserInfo) {
            try {
                $userId = $this->plugin->registerUser($azureUserInfo, 'id');
            } catch (Exception $e) {
                yield $e->getMessage();

                continue;
            }

            $existingUsers[$azureUserInfo['id']] = $userId;

            yield sprintf('User (ID %d) with received info: %s ', $userId, serialize($azureUserInfo));
        }

        yield '----------------';
        yield 'Updating users status';

        $roleGroups = $this->plugin->getGroupUidPerRole();
        $roleActions = $this->plugin->getActionPerRole();

        $userManager = UserManager::getManager();
        $em = Database::getManager();

        foreach ($roleGroups as $userRole => $groupUid) {
            $azureGroupMembersInfo = iterator_to_array($this->getAzureGroupMembers($groupUid));
            $azureGroupMembersUids = array_column($azureGroupMembersInfo, 'id');

            foreach ($azureGroupMembersUids as $azureGroupMembersUid) {
                $userId = $existingUsers[$azureGroupMembersUid] ?? null;

                if (!$userId) {
                    continue;
                }

                if (isset($roleActions[$userRole])) {
                    /** @var User $user */
                    $user = $userManager->find($userId);

                    $roleActions[$userRole]($user);

                    yield sprintf('User (ID %d) status %s', $userId, $userRole);
                }
            }

            $em->flush();
        }

        if ('true' === $this->plugin->get(AzureActiveDirectory::SETTING_DEACTIVATE_NONEXISTING_USERS)) {
            yield '----------------';

            yield 'Trying deactivate non-existing users in Azure';

            $users = UserManager::getRepository()->findByAuthSource('azure');
            $userIdList = array_map(
                function ($user) {
                    return $user->getId();
                },
                $users
            );

            $nonExistingUsers = array_diff($userIdList, $existingUsers);

            UserManager::deactivate_users($nonExistingUsers);

            yield sprintf(
                'Deactivated users IDs: %s',
                implode(', ', $nonExistingUsers)
            );
        }
    }

    /**
     * @throws Exception
     *
     * @return Generator<int, array<string, string>>
     */
    private function getAzureUsers(): Generator
    {
        $userFields = [
            'givenName',
            'surname',
            'mail',
            'userPrincipalName',
            'businessPhones',
            'mobilePhone',
            'accountEnabled',
            'mailNickname',
            'id',
        ];

        $query = sprintf(
            '$top=%d&$select=%s',
            AzureActiveDirectory::API_PAGE_SIZE,
            implode(',', $userFields)
        );

        $token = null;

        do {
            $this->generateOrRefreshToken($token);

            try {
                $azureUsersRequest = $this->provider->request(
                    'get',
                    "users?$query",
                    $token
                );
            } catch (Exception $e) {
                throw new Exception('Exception when requesting users from Azure: '.$e->getMessage());
            }

            $azureUsersInfo = $azureUsersRequest['value'] ?? [];

            foreach ($azureUsersInfo as $azureUserInfo) {
                yield $azureUserInfo;
            }

            $hasNextLink = false;

            if (!empty($azureUsersRequest['@odata.nextLink'])) {
                $hasNextLink = true;
                $query = parse_url($azureUsersRequest['@odata.nextLink'], PHP_URL_QUERY);
            }
        } while ($hasNextLink);
    }

    /**
     * @throws Exception
     */
    public function getAzureGroupMembers(string $groupUid): Generator
    {
        $userFields = [
            'id',
        ];

        $query = sprintf(
            '$top=%d&$select=%s',
            AzureActiveDirectory::API_PAGE_SIZE,
            implode(',', $userFields)
        );

        $token = null;

        do {
            $this->generateOrRefreshToken($token);

            try {
                $azureGroupMembersRequest = $this->provider->request(
                    'get',
                    "groups/$groupUid/members?$query",
                    $token
                );
            } catch (Exception $e) {
                throw new Exception('Exception when requesting group members from Azure: '.$e->getMessage());
            }

            $azureGroupMembers = $azureGroupMembersRequest['value'] ?? [];

            foreach ($azureGroupMembers as $azureGroupMember) {
                yield $azureGroupMember;
            }

            $hasNextLink = false;

            if (!empty($azureGroupMembersRequest['@odata.nextLink'])) {
                $hasNextLink = true;
                $query = parse_url($azureGroupMembersRequest['@odata.nextLink'], PHP_URL_QUERY);
            }
        } while ($hasNextLink);
    }
}