chubbyphp / chubbyphp-csrf

src/CsrfMiddleware.php

<?php

declare(strict_types=1);

namespace Chubbyphp\Csrf;

use Chubbyphp\ErrorHandler\HttpException;
use Chubbyphp\Session\SessionInterface;
use Psr\Http\Message\ServerRequestInterface as Request;
use Psr\Http\Message\ResponseInterface as Response;
use Psr\Log\LoggerInterface;
use Psr\Log\NullLogger;

/**
 * @deprecated use CsrfErrorResponseMiddleware
 */
final class CsrfMiddleware
{
    /**
     * @var CsrfErrorResponseMiddleware
     */
    private $middleware;

    const CSRF_KEY = 'csrf';

    const EXCEPTION_STATUS = 424;

    const EXCEPTION_MISSING_IN_SESSION = 'Csrf token is missing within session';
    const EXCEPTION_MISSING_IN_BODY = 'Csrf token is missing within body';
    const EXCEPTION_IS_NOT_SAME = 'Csrf token within body is not the same as in session';

    /**
     * @param CsrfTokenGeneratorInterface $csrfTokenGenerator
     * @param SessionInterface            $session
     * @param LoggerInterface|null        $logger
     */
    public function __construct(
        CsrfTokenGeneratorInterface $csrfTokenGenerator,
        SessionInterface $session,
        LoggerInterface $logger = null
    ) {
        $this->middleware = new CsrfErrorResponseMiddleware(
            $csrfTokenGenerator,
            $session,
            new class() implements CsrfErrorHandlerInterface {
                public function errorResponse(
                    Request $request,
                    Response $response,
                    int $code,
                    string $reasonPhrase
                ): Response {
                    throw HttpException::create($request, $response, $code, $reasonPhrase);
                }
            },
            $logger
        );

        $this->csrfTokenGenerator = $csrfTokenGenerator;

The property csrfTokenGenerator does not exist. Did you maybe forget to declare it?

        $this->session = $session;

The property session does not exist. Did you maybe forget to declare it?

        $this->logger = $logger ?? new NullLogger();

The property logger does not exist. Did you maybe forget to declare it?

    }

    /**
     * @param Request  $request
     * @param Response $response
     * @param callable $next
     *
     * @return Response
     */
    public function __invoke(Request $request, Response $response, callable $next = null)
    {
        return $this->middleware->__invoke($request, $response, $next);
    }
}