Controlabs\Handler\Slim\Cors

Complexity

Total Complexity

12

Size/Duplication

Total Lines	63
Duplicated Lines	0 %

Importance

Changes

0

5 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	3	1
A	methods()	0	18	4
A	__invoke()	0	10	3
A	router()	0	3	1
A	optionsMethods()	0	9	3

<?php

namespace Controlabs\Handler\Slim;

use FastRoute\Dispatcher;
use Psr\Http\Message\ServerRequestInterface as Request;
use Psr\Http\Message\ResponseInterface as Response;
use Slim\Router;

class Cors
{
    const HEADERS = [
        'Content-Type',
        'Accept',
        'Origin',
        'Authorization',
        'X-Requested-With'
    ];

    protected $container;

    public function __construct($container)
    {
        $this->container = $container;
    }

    public function __invoke(Request $request, Response $response, $next)
    {
        if ($next && is_callable($next)) {
            $response = $next($request, $response);
        }

        return $response
            ->withHeader('Access-Control-Allow-Origin', '*')
            ->withHeader('Access-Control-Allow-Headers', implode(',', self::HEADERS))
            ->withHeader('Access-Control-Allow-Methods', implode(',', $this->methods($request)));
    }

    protected function methods(Request $request)
    {
        $methods = $this->optionsMethods($request);

        $currentRoute = $request->getAttribute('route');

        if (empty($currentRoute)) {
            return array_merge($methods, [$request->getMethod()]);
        }

        $pattern = $currentRoute->getPattern();

        foreach ($this->router()->getRoutes() as $route) {
            $pattern === $route->getPattern()
            and $methods = array_merge_recursive($methods, $route->getMethods());
        }

        return $methods;
    }

    protected function optionsMethods(Request $request)
    {
        if ('OPTIONS' !== $request->getMethod()) {
            return [];
        }

        list($status, $allowedMethods) = $this->router()->dispatch($request);

        return Dispatcher::METHOD_NOT_ALLOWED == $status ? $allowedMethods : [];
    }

    protected function router(): Router
    {
        return $this->container->get('router');
    }
}