CILogon\Service\MyProxy::getMyProxyCredential()

Complexity

Conditions	13
Paths	98

Size

Total Lines	85
Code Lines	46

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	0
CRAP Score	182

Importance

Changes

0

<?php
    public static function getMyProxyCredential(
        $username,
        $passphrase = '',
        $server = MYPROXY_HOST,

The constant CILogon\Service\MYPROXY_HOST was not found. Maybe you did not declare it correctly or list all dependencies?

        $port = MYPROXY_PORT,

The constant CILogon\Service\MYPROXY_PORT was not found. Maybe you did not declare it correctly or list all dependencies?

        $lifetime = MYPROXY_LIFETIME,

The constant CILogon\Service\MYPROXY_LIFETIME was not found. Maybe you did not declare it correctly or list all dependencies?

        $usercert = '',
        $userkey = '',
        $certreq = '',
        $env = ''
    ) {
        $retstr = '';

        // Verify the myproxy-logon binary has been configured
        if ((!defined('MYPROXY_LOGON')) || (empty(MYPROXY_LOGON))) {

The constant CILogon\Service\MYPROXY_LOGON was not found. Maybe you did not declare it correctly or list all dependencies?

            Util::sendErrorAlert(
                'getMyProxyCredential Error',
                'MyProxy Error = myproxy-logon binary not configured'
            );
            return $retstr;
        }

        // Make sure the username passed in is not empty
        if (strlen($username) == 0) {
            Util::sendErrorAlert(
                'getMyProxyCredential Error',
                'MyProxy Error = Missing MyProxy username'
            );
            return $retstr;
        }

        // Don't allow weird port numbers, i.e. negative or over 65535
        if (($port < 0) || ($port > 65535)) {
            $port = MYPROXY_PORT;
        }

        // Don't allow weird lifetimes, i.e. negative or over 5 years
        if (($lifetime < 0) || ($lifetime > 43800)) {
            $lifetime = MYPROXY_LIFETIME;
        }

        // If the usercert (X509_USER_CERT) is specified, check to see if
        // the userkey (X509_USER_KEY) was as well.  If not, set userkey to
        // usercert, in effect making usercert act like X509_USER_PROXY. Then,
        // set the USER_CERT_ENV variable to bundle the two parameters into a
        // single variable holding the two X509_USER_* environment variables.
        $USER_CERT_ENV = '';
        if (strlen($usercert) > 0) {
            if (strlen($userkey) == 0) {
                $userkey = $usercert;
            }
            $USER_CERT_ENV = 'X509_USER_CERT=' . escapeshellarg($usercert) .
                             ' ' .
                             'X509_USER_KEY='  . escapeshellarg($userkey);
        }

        // Run the myproxy-logon command and capture the output and any error
        $output = array();
        $cmd = '/bin/env ' .
               $USER_CERT_ENV . ' ' .
               $env . ' ' .
               'MYPROXY_SOCKET_TIMEOUT=1 ' .
               MYPROXY_LOGON . ' ' .
               ' -s ' . escapeshellarg($server) .
               " -p $port" .
               " -t $lifetime" .
               ' -l ' . escapeshellarg($username) .
               ' -S -o -' .
               ((strlen($certreq) > 0) ?
                   (' --certreq - <<< ' . escapeshellarg($certreq)) : '') .
               ((strlen($passphrase) > 0) ?
                   (' <<< ' . escapeshellarg($passphrase)) : ' -n') .
               ' 2>&1';
        exec($cmd, $output, $return_val);
        $retstr = implode("\n", $output);

        if ($return_val > 0) {
            Util::sendErrorAlert(
                'getMyProxyCredential Error',
                "MyProxy Error = $return_val\nMyProxy Output= $retstr"
            );
            $retstr = '';
        }

        return $retstr;
    }