Chubbyphp\Cors\CorsMiddleware

Complexity

Total Complexity

8

Size/Duplication

Total Lines	98
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	0

Test Coverage

Coverage

100%

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	15	1
A	process()	0	17	4
A	getAllowOrigin()	0	12	3

<?php

declare(strict_types=1);

namespace Chubbyphp\Cors;

use Psr\Http\Message\ResponseFactoryInterface;
use Psr\Http\Message\ResponseInterface;
use Psr\Http\Message\ServerRequestInterface;
use Psr\Http\Server\MiddlewareInterface;
use Psr\Http\Server\RequestHandlerInterface;

final class CorsMiddleware implements MiddlewareInterface
{
    /**
     * @var ResponseFactoryInterface
     */
    private $responseFactory;

    /**
     * @var string[]
     */
    private $allowOrigin;

    /**
     * @var string[]
     */
    private $allowMethods;

    /**
     * @var string[]
     */
    private $allowHeaders;

    /**
     * @var bool
     */
    private $allowCredentials;

    /**
     * @var int
     */
    private $maxAge;

    /**
     * @param ResponseFactoryInterface $responseFactory
     * @param string[]                 $allowHeaders
     * @param string[]                 $allowMethods
     * @param string[]                 $allowOrigin
     * @param bool                     $allowCredentials
     * @param int                      $maxAge
     */
    public function __construct(
        ResponseFactoryInterface $responseFactory,
        array $allowOrigin,
        array $allowMethods,
        array $allowHeaders,
        bool $allowCredentials = false,
        int $maxAge = 600
    ) {
        $this->responseFactory = $responseFactory;
        $this->allowOrigin = $allowOrigin;
        $this->allowMethods = $allowMethods;
        $this->allowHeaders = $allowHeaders;
        $this->allowCredentials = $allowCredentials;
        $this->maxAge = $maxAge;
    }

    /**
     * @param ServerRequestInterface  $request
     * @param RequestHandlerInterface $handler
     *
     * @return ResponseInterface
     */
    public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
    {
        if ('OPTIONS' === strtoupper($request->getMethod())) {
            return $this->responseFactory->createResponse(204)
                ->withHeader('Access-Control-Allow-Origin', $this->getAllowOrigin($request))
                ->withHeader('Access-Control-Allow-Methods', implode(', ', $this->allowMethods))
                ->withHeader('Access-Control-Allow-Headers', implode(', ', $this->allowHeaders))
                ->withHeader('Access-Control-Allow-Credentials', $this->allowCredentials ? 'true' : 'false')
                ->withHeader('Access-Control-Max-Age', (string) $this->maxAge)
            ;
        }

        return $handler->handle($request)
            ->withHeader('Access-Control-Allow-Origin', $this->getAllowOrigin($request))
            ->withHeader('Access-Control-Allow-Credentials', $this->allowCredentials ? 'true' : 'false')
        ;
    }

    /**
     * @param ServerRequestInterface $request
     *
     * @return string
     */
    private function getAllowOrigin(ServerRequestInterface $request): string
    {
        if ('' === $origin = $request->getHeaderLine('Origin')) {
            return '';
        }

        if (false === $index = array_search($origin, $this->allowOrigin, true)) {
            return '';
        }

        return $this->allowOrigin[$index];
    }
}