JsonParser::getDecryptedBody() - Code Metrics - Inspection of "Updating to application/vnd.ncryptf+json content t..." - charlesportwoodii/yii2-api-rest-components - Measure and Improve Code Quality continuously with Scrutinizer

Passed

Push — master ( 843189...d0e20a )

by Charles

created 2018-10-01 17:43 UTC

JsonParser::getDecryptedBody() A

↳ Parent: JsonParser

Complexity

Conditions	1
Paths	1

Size

Total Lines	3
Code Lines	1

Duplication

Lines	0
Ratio	0 %

Importance

Changes

Metric	Value
cc	1
eloc	1
nc	1
nop	0
dl	0
loc	3
rs	10
c	0
b	0
f	0

<?php declare(strict_types=1);

namespace yrc\web\ncryptf;

use InvalidArgumentException;
use ncryptf\Request;
use ncryptf\Response;
use ncryptf\exceptions\DecryptionFailedException;
use yrc\models\redis\EncryptionKey;
use yrc\web\Request as YiiRequest;
use yii\base\Exception;
use yii\base\InvalidParamException;
use yii\helpers\Json;
use yii\web\BadRequestHttpException;
use Yii;

/**
 * Parses vnd.ncryptf+json
 * @class Ncryptf JsonParser
 */
class JsonParser extends \yii\web\JsonParser
{
    private $decryptedBody;

    /**
     * Returns the decrypted response
     *
     * @return string
     */
    public function getDecryptedBody() :? string
    {
        return $this->decryptedBody;
    }

    /**
     * Parses vnd.ncryptf+json
     *
     * @param string  $rawBody
     * @param string $contentType
     * @return mixed
     */
    public function parse($rawBody, $contentType)
    {
        if ($contentType === 'application/vnd.25519+json') {
            Yii::warning([
                'message' => '`application/vnd.25519+json` content type is deprecated. Migrate to `application/vnd.ncryptf+json'
            ]);
        }

        if ($rawBody === '') {
            $this->decryptedBody = '';
            return [];
        }

        $request = Yii::$app->request;
class Id
{
    public $id;

    public function __construct($id)
    {
        $this->id = $id;
    }

}

class Account
{
    /** @var  Id $id */
    public $id;
}

$account_id = false;

if (starsAreRight()) {
    $account_id = new Id(42);
}

$account = new Account();
if ($account instanceof Id)
{
    $account->id = $account_id;
}
        $version = Response::getVersion(\base64_decode($rawBody));
        $key = $this->getEncryptionKey($request, $rawBody, $version);
        $key = $this->getEncryptionKey(/** @scrutinizer ignore-type */ $request, $rawBody, $version);

        try {
            $this->decryptedBody = $this->decryptRequest($key, $request, $rawBody, $version);
        } catch (DecryptionFailedException | InvalidArgumentException | InvalidSignatureException | InvalidChecksumException $e) {
filter:
    dependency_paths: ["lib/*"]
            throw new BadRequestHttpException(Yii::t('yrc', 'Unable to decrypt response.'));
        } catch (\Exception $e) {
            Yii::warning([
                'message' => 'An unexpected error occured when decryption the response. See attached exception',
                'exception' => $e
            ]);

            throw new BadRequestHttpException(Yii::t('yrc', 'Unable to decrypt response.'));
        }

        try {
            $parameters = Json::decode($this->decryptedBody, $this->asArray);
            return $parameters ?? [];
        } catch (InvalidParamException $e) {
            if ($this->throwException) {
                throw new BadRequestHttpException('Invalid JSON data in request body: ' . $e->getMessage());
            }
            return [];
        }
    }

    /**
     * Decrypts the request using a given encryption key and request parameters
     *
     * @param EncryptionKey $key
     * @param Request $request
     * @param string $rawBody
     * @param string $version
     * @return string
     */
    private function decryptRequest(EncryptionKey $key, \yrc\web\Request $request, string $rawBody, int $version)
    {
        static $response = null;
        static $nonce = null;
        static $publicKey = null;
        
        $response = new Response(
            \base64_decode($key->secret)
        );

        if ($version === 1) {
            $publicKey = $request->headers->get('x-pubkey', null);
            $nonce = $request->headers->get('x-nonce', null);

            if ($publicKey === null || $nonce === null) {

                throw new Exception(Yii::t('yrc', 'Missing nonce or public key header. Unable to decrypt request.'));
            }
            $nonce = \base64_decode($nonce);
            $nonce = \base64_decode(/** @scrutinizer ignore-type */ $nonce);
            $publicKey = \base64_decode($publicKey);
        }

        $decryptedRequest = $response->decrypt(
            \base64_decode($rawBody),
            $publicKey,
            $nonce
        );

        if ($key->is_single_use) {
            $key->delete();
        }

        return $decryptedRequest;
    }

    /**
     * Fetches the local encryption key from the data provided in the request
     *
     * @param yrc\web\Request $request

     * @param string $rawBody
     * @param integer $version
     * @return EncryptionKey
     */
    private function getEncryptionKey(\yrc\web\Request $request, string $rawBody, int $version) : EncryptionKey
    private function getEncryptionKey(\yrc\web\Request $request, /** @scrutinizer ignore-unused */ string $rawBody, int $version) : EncryptionKey
    {
        
        $lookup = $request->headers->get('x-hashid', null);
        if ($lookup === null) {

            Yii::warning([
                'message' => 'X-HashId missing on request. Unable to decrypt response.'
            ]);
            throw new Exception(Yii::t('yrc', 'Unable to decrypt response.'));
        }

        $key = EncryptionKey::find()->where([
            'hash' => $lookup
        ])->one();

        if ($key === null) {
            Yii::warning([
                'message' => Yii::t('yrc', '{property} not found in database', [
                    'property' => $property

                ])
            ]);
            
            throw new Exception(Yii::t('yrc', 'Unable to decrypt response.'));
        }

        return $key;

    }
}


charlesportwoodii / yii2-api-rest-components

Push — master ( 843189...d0e20a )

JsonParser::getDecryptedBody() A

Complexity

Size

Duplication

Importance

Duplication Side-by-Side

Filter issues like