Chubbyphp\Security\Authorization\RoleAuthorization

Complexity

Total Complexity

13

Size/Duplication

Total Lines	102
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	1

Importance

Changes

0

6 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	isGranted()	0	7	1
A	getOwningRoles()	0	11	2
A	resolveRoleHierarchy()	0	16	4
A	getNeededRoles()	0	4	2
A	checkRoles()	0	10	3

<?php

namespace Chubbyphp\Security\Authorization;

use Chubbyphp\Model\ModelInterface;
use Chubbyphp\Security\UserInterface;

final class RoleAuthorization implements AuthorizationInterface
{
    /**
     * @var array
     */
    private $roleHierarchy;

    /**
     * @var array
     */
    private $cachedResolvedHierarchies;

    /**
     * @param array $roleHierarchy
     */
    public function __construct(array $roleHierarchy = [])
    {
        $this->roleHierarchy = $roleHierarchy;
    }

    /**
     * @param UserInterface       $user
     * @param mixed               $attributes
     * @param ModelInterface|null $model
     *
     * @return bool
     */
    public function isGranted(UserInterface $user, $attributes, ModelInterface $model = null): bool
    {
        $owningRoles = $this->getOwningRoles($user);
        $neededRoles = $this->getNeededRoles($attributes);

        return $this->checkRoles($owningRoles, $neededRoles);
    }

    /**
     * @param UserInterface $user
     *
     * @return array
     */
    private function getOwningRoles(UserInterface $user): array
    {
        $roles = $user->getRoles();
        $rolesHash = serialize($roles);

        if (!isset($this->cachedResolvedHierarchies[$rolesHash])) {
            $this->cachedResolvedHierarchies[$rolesHash] = $this->resolveRoleHierarchy($user->getRoles());
        }

        return $this->cachedResolvedHierarchies[$rolesHash];
    }

    /**
     * @param array $roles
     * @param array $alreadySolvedRoles
     *
     * @return array
     */
    private function resolveRoleHierarchy(array $roles, array $alreadySolvedRoles = []): array
    {
        foreach ($roles as $role) {
            if (isset($this->roleHierarchy[$role])) {
                if (in_array($role, $alreadySolvedRoles, true)) {
                    continue;
                }

                $alreadySolvedRoles[] = $role;
                $resolveRoles = $this->resolveRoleHierarchy($this->roleHierarchy[$role], $alreadySolvedRoles);
                $roles = array_merge($roles, $resolveRoles);
            }
        }

        return array_unique($roles);
    }

    /**
     * @param mixed $attributes
     *
     * @return array
     */
    private function getNeededRoles($attributes): array
    {
        return is_scalar($attributes) ? [$attributes] : $attributes;
    }

    /**
     * @param array $owningRoles
     * @param array $neededRoles
     *
     * @return bool
     */
    private function checkRoles(array $owningRoles, array $neededRoles): bool
    {
        foreach ($neededRoles as $neededRole) {
            if (!in_array($neededRole, $owningRoles, true)) {
                return false;
            }
        }

        return true;
    }
}