Jwt::remove() - Code Metrics - Inspection of "黑名单" - edenleung/think-jwt - Measure and Improve Code Quality continuously with Scrutinizer

Test Failed
Push — master ( da5486...b4738e )

by LEUNG
created 2020-03-16 07:47 UTC
Jwt::remove() A

↳ Parent: Jwt
Complexity

Conditions	1
Paths	1
Size

Total Lines	3
Code Lines	1
Duplication

Lines	0
Ratio	0 %
Code Coverage

Tests	0
CRAP Score	2
Importance

Changes
Metric	Value
cc	1
eloc	1
c	0
b	0
f	0
nc	1
nop	1
dl	0
loc	3
rs	10
ccs	0
cts	0
cp	0
crap	2
<?php

namespace xiaodi;

use think\App;
use Lcobucci\JWT\Token;
use Lcobucci\JWT\Parser;
use Lcobucci\JWT\Builder;
use Lcobucci\JWT\Signer\Key;
use xiaodi\Blacklist;
use xiaodi\Exception\JWTException;
use xiaodi\Exception\HasLoggedException;
use xiaodi\Exception\TokenAlreadyEexpired;
use xiaodi\Exception\JWTInvalidArgumentException;

class Jwt
{
    private $token;

    private $blacklist;

    use \xiaodi\Traits\Jwt;

    public function __construct(App $app, Blacklist $blacklist)
    {
        $this->app = $app;

        $this->blacklist = $blacklist;
        $this->builder = new Builder();


        $config = $this->getConfig();
class A
{
    function getObject()
    {
        return null;
    }

}

$a = new A();
$object = $a->getObject();
        foreach ($config as $key => $v) {

            $this->$key = $v;
        }
    }

    /**
     * 获取jwt配置
     *
     * @return void
     */
    public function getConfig()
    {
        return $this->app->config->get('jwt');

    }

    /**
     * 生成 Token.
     *
     * @param array $claims
     *
     * @return \Lcobucci\JWT\Token
     */
    public function token(array $claims)
    {
        $time = time();
        $uniqid = uniqid();

        // 单点登录
        if ($this->sso()) {
            $sso_key = $this->ssoKey();

            if (empty($claims[$sso_key])) {
                throw new JWTInvalidArgumentException("未设置 \$claims['{$this->ssoKey}']值", 500);
            }
            $uniqid = $claims[$sso_key];
        }

        $this->builder->issuedAt($time)
            ->identifiedBy($uniqid, true)
            ->canOnlyBeUsedAfter($time + $this->notBefore())
            ->expiresAt($time + $this->ttl());

        foreach ($claims as $key => $claim) {
            $this->builder->withClaim($key, $claim);
        }

        $token = $this->builder->getToken($this->getSigner(), $this->makeKey());

        if (true === $this->sso()) {
            $this->setCacheIssuedAt($uniqid, $time);
                   setCacheIssuedAt($uniqid, $time);
        }

        return $token;
    }

    /**
     * 解析Token.
     *
     * @param string $token
     *
     * @return Token
     */
    public function parse(string $token)
    {
        try {
            $token = (new Parser())->parse($token);
        } catch (\InvalidArgumentException $e) {
            throw new JWTInvalidArgumentException('此 Token 解析失败', 500);
        }

        return $token;
    }

    protected function getRequestToken()
    {
        switch ($this->type) {
            case 'Header':
                $bearer = new BearerToken($this->app);
                $token = $bearer->getToken();
                break;
            case 'Cookie':
                $token = $this->app->cookie->get('token');
                break;
            case 'Url':
                $token = $this->app->request->param('token');
                break;
            default:
                $token = $this->app->request->param('token');
                break;
        }

        if (!$token) {
            throw new JwtException('获取Token失败.', 500);
        }

        return $token;
    }

    /**
     * 验证 Token.
     *
     * @param string $token
     *
     * @return bool
     */
    public function verify(string $token = '')
    {
        // 自动获取请求token
        if ($token == '') {
            $token = $this->getRequestToken();
        }

        // 解析Token
        $this->token = $this->parse($token);

        try {
            $this->validateToken();
            // 是否已过期
            if ($this->token->isExpired()) {
                throw new TokenAlreadyEexpired('Token 已过期', 401, $this->getAlreadyCode());
            }

            // 单点登录
            if ($this->sso()) {
                $jwt_id = $this->token->getHeader('jti');
                // 当前Token签发时间
                $issued_at = $this->token->getClaim('iat');
                // 最新Token签发时间
                $cache_issued_at = $this->getCacheIssuedAt($jwt_id);
                $cache_issued_at = $this->getCacheIssuedAt($jwt_id);
                if ($issued_at != $cache_issued_at) {
                    throw new HasLoggedException('已在其它终端登录，请重新登录', 401, $this->getHasLoggedCode());
                }
            }
        } catch (\BadMethodCallException $e) {
            throw new JWTException('此 Token 未进行签名', 500);
        }

        return true;
    }

    /**
     * 效验 Token
     *
     * @return void
     */
    protected function validateToken()
    {
        // 验证密钥是否与创建签名的密钥匹配
        if (false === $this->token->verify($this->getSigner(), $this->makeKey())) {
            throw new JWTException('此 Token 与 密钥不匹配', 500);
        }

        // 是否可用
        $exp = $this->token->getClaim('nbf');
        if (time() < $exp) {
            throw new JWTException('此 Token 暂未可用', 500);
        }

        if ($this->blacklist->has($this->token)) {
            throw new JWTException('此 Token 已注销', 500);
        }
    }

    /**
     * 获取 Token 对象.
     *
     * @return \Lcobucci\JWT\Token
     */
    public function getToken()
    {
        return $this->token;
    }

    /**
     * 刷新 Token.
     *
     * @param Token $token
     * @return Token
     */
    public function refresh(Token $token)
    {
        // 加入黑名单
        $this->blacklist->push($token);

        $claims = $token->getClaims();

        unset($claims['iat']);
        unset($claims['jti']);
        unset($claims['nbf']);
        unset($claims['exp']);
        unset($claims['iss']);
        unset($claims['aud']);

        return $this->token($claims);
    }

    /**
     * 删除 Token.
     *
     * @param Token $token
     * @return void
     */
    public function remove(Token $token)
    {
        $this->blacklist->push($token);
    }

    /**
     * 生成私钥.
     *
     * @return Key
     */
    private function makeKey()
    {
        $key = $this->getSignerKey();
        if (empty($key)) {
            throw new JWTException('私钥未配置.', 500);
        }

        return new Key($key);
    }
}

edenleung / think-jwt

Push — master ( da5486...b4738e )

Jwt::remove() A

Complexity

Size

Duplication

Code Coverage

Importance

Duplication Side-by-Side

Filter issues like
