yrc\actions\RefreshAction::post()

Complexity

Conditions	4
Paths	4

Size

Total Lines	25
Code Lines	14

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function post($params)

The parameter $params is not used and could be removed.

    {
        $refreshToken = Yii::$app->request->post('refresh_token', false);
        $model = RefreshToken::find()->where([
            'user_id' => Yii::$app->user->id,
            'token' => $refreshToken
        ])->one();

        if ($model === null) {
            throw new HttpException(401, Yii::t('yrc', 'The refresh token provided is either not valid, or has expired.'));
        }

        // If we can delete the token, send a newly generated token out
        if ($model->delete()) {
            // Merge any extra attributes with the generated tokens
            $tokenClass = (Yii::$app->user->identityClass::TOKEN_CLASS);
            $tokens = ArrayHelper::merge($this->extraAttributes, $tokenClass::generate(Yii::$app->user->id)->getAuthResponse());
            // Merge the identity attributes
            foreach ($this->identityAttributes as $attr) {
                $tokens[$attr] = Yii::$app->user->getIdentity()->$attr;

The method getIdentity() does not exist on null.

            }
            return $tokens;

The expression return $tokens returns the type array which is incompatible with the documented return type boolean.

        }

        throw new HttpException(400, Yii::t('yrc', 'An unexpected error occurred. Please re-authenticate.'));
    }