EcPhp\ApiGwAuthenticationBundle\Service\KeyLoader\JWKSKeyLoader

Complexity

Total Complexity

9

Size/Duplication

Total Lines	69
Duplicated Lines	0 %

Test Coverage

Coverage

100%

Importance

Changes	2
Bugs	0	Features	0

5 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	8	1
A	getPublicKey()	0	3	1
A	getSigningKey()	0	3	1
A	getPassphrase()	0	3	1
A	loadKey()	0	36	5

<?php

declare(strict_types=1);

namespace EcPhp\ApiGwAuthenticationBundle\Service\KeyLoader;

use EcPhp\ApiGwAuthenticationBundle\Exception\ApiGwAuthenticationException;
use EcPhp\ApiGwAuthenticationBundle\Service\KeyConverter\KeyConverterInterface;
use Symfony\Contracts\HttpClient\HttpClientInterface;
use Throwable;

use function array_key_exists;

final class JWKSKeyLoader implements KeyLoaderInterface
{
    private HttpClientInterface $httpClient;

    private KeyConverterInterface $keyConverter;

    private KeyLoaderInterface $keyLoader;

    public function __construct(
        KeyLoaderInterface $keyLoader,
        HttpClientInterface $httpClient,
        KeyConverterInterface $keyConverter
    ) {
        $this->keyLoader = $keyLoader;
        $this->httpClient = $httpClient;
        $this->keyConverter = $keyConverter;
    }

    public function getPassphrase(): string
    {
        return $this->keyLoader->getPassphrase();

The expression return $this->keyLoader->getPassphrase() could return the type null which is incompatible with the type-hinted return string. Consider adding an additional type-check to rule them out.

    }

    public function getPublicKey(): string
    {
        return $this->keyLoader->getPublicKey();
    }

    public function getSigningKey(): string
    {
        return $this->keyLoader->getSigningKey();
    }

    public function loadKey($type): string
    {
        // Todo: Implements for PRIVATE key as well.
        $key = $this->keyLoader->getPublicKey();

        try {
            $response = $this->httpClient->request('GET', $key);
        } catch (Throwable $e) {
            throw new ApiGwAuthenticationException(
                sprintf('Unable to request uri(%s) for %s key.', $key, $type),
                $e->getCode(),
                $e
            );
        }

        if (200 !== $statusCode = $response->getStatusCode()) {
            throw new ApiGwAuthenticationException(
                sprintf('Invalid code(%s) thrown while fetching the %s key at %s.', $statusCode, $type, $key)
            );
        }

        $jwks = $response->toArray();

        if (false === array_key_exists('keys', $jwks)) {
            throw new ApiGwAuthenticationException(
                sprintf('Invalid JWKS format of %s key at %s.', $type, $key)
            );
        }

        if ([] === $jwks['keys']) {
            throw new ApiGwAuthenticationException(
                sprintf('Invalid JWKS format of %s key at %s, keys array is empty.', $type, $key)
            );
        }

        return current($this->keyConverter->fromJWKStoPEMS($jwks['keys']));
    }
}