yrc\web\Json25519ResponseFormatter::formatJson()

Complexity

Conditions	5
Paths	5

Size

Total Lines	65
Code Lines	39

Duplication

Lines	0
Ratio	0 %

Importance

Changes	6
Bugs	0	Features	0

<?php
    protected function formatJson($response)
    {
        // Generate a new encryption key
        $key = EncryptionKey::generate();
        $public = Yii::$app->request->getHeaders()->get(Json25519Parser::PUBLICKEY_HEADER, null);

        if ($public === null) {
            $response->statusCode = 400;
            $response->content = '';
            $response->getHeaders('x-reason', Yii::t('yrc', 'Accept: application/vnd.25519+json requires x-pubkey header to be set.'));

The method getHeaders cannot be called on $response (of type array).

            return;
        }

        $rawPublic = \base64_decode($public);
        if (strlen($rawPublic) !== 32) {
            $response->statusCode = 400;
            $response->getHeaders()->set('x-reason', Yii::t('yrc', 'Public key is not 32 bytes in length.'));

The method getHeaders cannot be called on $response (of type array).

            return;
        }

        parent::formatJson($response);

$response is of type array, but the function expects a object<yrc\web\Response>.

        $response->getHeaders()->set('Content-Type', 'application/vnd.25519+json; charset=UTF-8');

The method getHeaders cannot be called on $response (of type array).

        // Calculate the keypair
        $keyPair = \sodium_crypto_box_keypair_from_secretkey_and_publickey(
            \base64_decode($key->secret),

The property secret does not exist on object<yrc\models\redis\EncryptionKey>. Since you implemented __get, maybe consider adding a @property annotation.

            $rawPublic
        );

        // Encrypt the content
        $nonce = \random_bytes(SODIUM_CRYPTO_BOX_NONCEBYTES);
        $content = \sodium_crypto_box(
            $response->content,
            $nonce,
            $keyPair
        );

        // If the user is authenticated, we can sign the request using the signature associated to the session.
        // If they are not authenticated, we can skip the signature generation
        if (!Yii::$app->user->isGuest) {
            $token = Yii::$app->user->getIdentity()->getToken();
            if ($token === null) {
                $response->statusCode = 406;
                $response->content = '';
                Yii::warning([
                    'message' => 'Could not fetch token keypair. Unable to generate encrypted response.'
                ]);
                return;
            }

            // Sign the request using the new authentication key
            $signature = \sodium_crypto_sign_detached(
                $content,
                \base64_decode($token->secret_sign_kp)
            );

            // Sign the raw response and send the signature alongside the header
            $response->getHeaders()->set('x-sigpubkey', \base64_encode($token->getSignPublicKey()));

The method getHeaders cannot be called on $response (of type array).

            $response->getHeaders()->set('x-signature', \base64_encode($signature));

The method getHeaders cannot be called on $response (of type array).

        }

        $response->getHeaders()->set('x-nonce', \base64_encode($nonce));

The method getHeaders cannot be called on $response (of type array).

        $response->getHeaders()->set('x-pubkey', \base64_encode($key->getBoxPublicKey()));

The method getHeaders cannot be called on $response (of type array).

        $response->content = \base64_encode($content);
    }
}