Passed
Push — master ( 1eefed...85c254 )
by Mr
37:01 queued 22:00
created

Authorizor::process()   A

Complexity

Conditions 3
Paths 3

Size

Total Lines 11
Code Lines 5

Duplication

Lines 0
Ratio 0 %

Importance

Changes 1
Bugs 0 Features 0
Metric Value
cc 3
eloc 5
c 1
b 0
f 0
nc 3
nop 2
dl 0
loc 11
rs 10
1
<?php declare(strict_types=1);
2
/**
3
 * This file is part of the daikon-cqrs/security-interop project.
4
 *
5
 * For the full copyright and license information, please view the LICENSE
6
 * file that was distributed with this source code.
7
 */
8
9
namespace Daikon\Security\Middleware;
10
11
use Daikon\Boot\Middleware\Action\DaikonRequest;
12
use Daikon\Boot\Middleware\RoutingHandler;
13
use Daikon\Security\Middleware\Action\SecureActionInterface;
14
use Fig\Http\Message\StatusCodeInterface;
15
use Middlewares\Utils\Factory;
16
use Psr\Http\Message\ResponseInterface;
17
use Psr\Http\Message\ServerRequestInterface;
18
use Psr\Http\Server\MiddlewareInterface;
19
use Psr\Http\Server\RequestHandlerInterface;
20
21
final class Authorizor implements MiddlewareInterface, StatusCodeInterface
22
{
23
    public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
24
    {
25
        $requestHandler = $request->getAttribute(RoutingHandler::REQUEST_HANDLER);
26
27
        if ($requestHandler instanceof SecureActionInterface) {
28
            if (!$requestHandler->isAuthorized(DaikonRequest::wrap($request))) {
29
                return Factory::createResponse(self::STATUS_FORBIDDEN);
30
            }
31
        }
32
33
        return $handler->handle($request);
34
    }
35
}
36